Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa
File: vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa (raw, json)
Hash identifier: bhhfgUa9IkevuU6kgmPNLfOfpmJN6kMgsbrrhzr6WCg=
Subject key identifier: BC:FC:10:1F:54:6F:4D:5E:0C:D4:9F:AF:01:96:E3:22:32:83:1B:87
Certificate issuer: /CN=44d64dac03f1a57c1931667118048d82c43c5540
Certificate serial: 0194244583EFFCCB136EDB0672DB185F710A
Authority key identifier: 44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa
Signing time: Wed 01 Jan 2025 23:48:43 +0000
ROA not before: Wed 01 Jan 2025 23:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204828
IP address blocks: 2001:67c:2284::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:83:ef:fc:cb:13:6e:db:06:72:db:18:5f:71:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44d64dac03f1a57c1931667118048d82c43c5540
Validity
Not Before: Jan 1 23:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bcfc101f546f4d5e0cd49faf0196e32232831b87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:01:39:8a:fc:3a:72:85:9b:ea:52:1a:d1:c3:
2a:d8:f5:56:22:6c:0e:c2:34:ff:4c:5d:b1:1d:77:
d2:c5:b6:4f:59:38:1e:f7:b6:5a:3b:da:ce:f7:cf:
6c:8a:1b:0e:6f:cf:60:3d:71:e4:4b:f3:2e:2b:7b:
59:d4:8c:8d:09:52:03:60:69:6c:58:e4:5e:0c:bc:
2b:d7:ff:b7:fe:6b:6e:58:41:59:3b:65:1f:9c:cd:
48:e5:a5:b8:98:d6:67:86:82:f6:52:ba:85:80:0a:
f0:fe:ed:25:e0:7d:fc:ca:2a:bd:2c:68:c2:36:68:
8e:ce:a3:dc:09:7e:d9:32:f0:98:fd:46:96:85:9e:
73:0d:c7:c6:2c:01:d7:0a:85:26:e7:fa:19:52:ad:
a2:4c:2c:68:72:18:1a:e8:13:07:2a:6a:7e:34:1b:
37:00:b0:15:7b:ea:0d:dc:2e:4a:37:bc:13:6f:e7:
70:7f:4e:84:21:6b:16:bb:ae:d1:27:81:f1:07:c0:
1f:b7:15:f8:20:60:7b:aa:5c:77:cb:c3:73:7c:d3:
d6:5d:41:7b:42:23:82:fb:b2:59:7a:5c:a0:a3:b3:
f9:50:c8:b8:d5:a7:0d:5e:e8:02:21:dc:f4:8f:a3:
41:ae:db:ac:7a:22:f4:84:40:65:a6:6f:02:42:1f:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:FC:10:1F:54:6F:4D:5E:0C:D4:9F:AF:01:96:E3:22:32:83:1B:87
X509v3 Authority Key Identifier:
keyid:44:D6:4D:AC:03:F1:A5:7C:19:31:66:71:18:04:8D:82:C4:3C:55:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RNZNrAPxpXwZMWZxGASNgsQ8VUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/vPwQH1RvTV4M1J-vAZbjIjKDG4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/102bef-6459-44bc-840e-e9d2b3a7872c/1/RNZNrAPxpXwZMWZxGASNgsQ8VUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2284::/48
Signature Algorithm: sha256WithRSAEncryption
2f:97:59:90:b7:dd:13:92:2d:b7:65:ba:ac:ed:be:98:f1:18:
60:6f:ba:ab:2a:38:c8:6d:35:1e:0f:65:04:c4:e5:89:5e:44:
e5:ce:80:7c:56:28:21:ae:b4:f3:07:86:8c:94:66:20:9e:96:
8f:45:62:48:f4:30:2a:c8:5f:71:84:e7:c3:ce:c4:ef:ef:0a:
d5:a7:91:7e:fc:a2:27:20:ec:ec:72:ff:f2:38:46:2b:e9:97:
fa:b1:c2:57:10:dc:7f:6c:98:ac:cd:e9:5e:6a:31:6b:9d:52:
d9:c8:29:bf:12:d2:fa:f1:8d:15:47:ac:61:44:df:16:85:30:
f7:13:4f:ad:0c:16:5a:5c:3a:42:59:73:aa:ea:4a:4e:87:44:
2a:10:19:a9:97:e1:5b:a9:de:dc:7c:39:5b:d5:ac:b7:45:e2:
cf:01:fc:57:9b:14:ef:b0:90:c7:f9:cd:ce:90:fa:7d:68:4f:
af:48:f4:10:c2:74:f6:46:13:b7:6e:8d:36:a1:e3:6d:b3:13:
ba:b8:53:d6:21:2d:a7:2d:95:66:83:80:36:e9:ce:f1:4f:1c:
36:a6:11:eb:51:a9:c6:01:42:14:9e:f9:c0:1a:0f:df:59:44:
d8:25:c5:bc:4f:31:3d:a2:ec:89:6f:66:3e:f2:72:c8:9d:81:
52:be:ae:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:28:00 2025 by rpki-client