Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/VZ0QTQOqbhBZXRpRcK6PrfGjqXA.roa
File: VZ0QTQOqbhBZXRpRcK6PrfGjqXA.roa (raw, json)
Hash identifier: qUqfQH6HkkXqxIuCFL1oijtckoAAoRaIonlYxeFElKw=
Subject key identifier: 55:9D:10:4D:03:AA:6E:10:59:5D:1A:51:70:AE:8F:AD:F1:A3:A9:70
Certificate issuer: /CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Certificate serial: 019426D9CA111E77EAAC42668F69B7630DE3
Authority key identifier: 10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/VZ0QTQOqbhBZXRpRcK6PrfGjqXA.roa
Signing time: Thu 02 Jan 2025 11:49:54 +0000
ROA not before: Thu 02 Jan 2025 11:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39150
IP address blocks: 2a02:d0c0::/32 maxlen: 32
2a02:d0c1::/32 maxlen: 32
2a02:ec40::/29 maxlen: 29
2a02:ec40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:ca:11:1e:77:ea:ac:42:66:8f:69:b7:63:0d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1045dacc837798c3e6cf31f4d27946a33b0de661
Validity
Not Before: Jan 2 11:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=559d104d03aa6e10595d1a5170ae8fadf1a3a970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f5:15:5b:16:06:35:e8:b1:1d:0f:91:63:d7:
2a:9d:48:ba:8c:f7:0e:05:86:a9:45:68:64:a6:75:
65:b3:53:9b:b9:7b:1d:76:70:2c:2a:78:e5:24:39:
eb:22:aa:c8:fd:8a:5c:9b:ca:7a:0c:27:f9:e6:2e:
87:73:65:c9:db:78:19:4f:79:dd:d9:57:5f:16:85:
06:cd:9c:94:60:12:aa:c7:b9:c9:5e:b9:08:ed:8b:
f9:8d:41:48:07:91:d9:52:19:98:ef:55:a4:8d:f7:
d9:78:04:8d:1f:bc:13:fc:d2:64:90:da:bb:8f:7e:
26:5a:cf:c7:0d:6e:92:7c:5c:b8:16:8a:78:6f:22:
c7:a2:b7:b6:6c:36:bd:f7:2c:33:31:06:1b:1b:90:
1d:33:9f:c3:75:ad:af:f2:c8:84:94:82:76:75:02:
68:84:84:be:24:5d:3c:c2:da:56:dd:55:15:74:4a:
c0:6e:5f:81:91:61:e9:64:5a:28:3b:aa:d8:5c:9a:
a8:be:d8:ff:ef:67:b3:eb:af:0b:d4:25:11:b0:42:
16:02:b8:fe:06:9a:c5:a5:85:c0:88:42:33:c9:32:
34:26:10:dc:38:9a:e4:57:33:3f:ae:a0:3f:7d:7c:
61:63:e3:76:79:bd:4a:d5:dd:41:93:be:4d:30:be:
82:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9D:10:4D:03:AA:6E:10:59:5D:1A:51:70:AE:8F:AD:F1:A3:A9:70
X509v3 Authority Key Identifier:
keyid:10:45:DA:CC:83:77:98:C3:E6:CF:31:F4:D2:79:46:A3:3B:0D:E6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EEXazIN3mMPmzzH00nlGozsN5mE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/VZ0QTQOqbhBZXRpRcK6PrfGjqXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/266caf-3b43-49e0-b6e1-9c174e53e4fe/1/EEXazIN3mMPmzzH00nlGozsN5mE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:d0c0::/31
2a02:ec40::/29
Signature Algorithm: sha256WithRSAEncryption
d5:56:db:98:6b:1a:a3:42:2c:65:a5:dc:5c:66:15:8f:9a:f6:
87:fb:d1:81:21:af:90:ff:6b:8a:78:85:0e:bc:37:88:89:9a:
cf:6a:99:0c:be:cb:f7:cf:d2:d7:0d:9e:ad:dd:b1:4f:9d:7b:
72:82:b1:64:db:de:f7:72:15:67:d4:bf:e9:49:21:7a:4e:21:
1c:fc:85:80:b7:71:a4:6f:60:37:a2:36:5a:f9:91:fe:e4:d2:
df:75:70:97:41:7c:72:49:6e:b2:27:82:29:ac:32:f0:11:30:
7c:2f:e0:46:fb:6b:c5:f7:b8:75:75:9a:0d:47:d8:46:9a:7c:
e9:aa:26:de:2d:e2:ac:34:47:09:6a:b2:28:cc:81:50:6c:40:
3d:af:7a:06:51:fa:4e:82:2c:20:f8:87:43:9d:71:d5:32:73:
ff:95:1b:1f:ca:44:e6:ad:6e:9d:f3:b4:2f:e3:aa:ae:1b:0f:
ec:69:74:5c:44:29:61:0b:07:9a:31:73:72:04:7e:bc:53:56:
2b:b5:41:c0:85:a4:a9:a8:c7:77:68:a0:c7:e9:4c:c5:0d:aa:
31:99:bf:48:1a:42:4b:6e:09:f8:59:42:f5:77:80:11:c1:df:
5f:a1:a8:1c:81:84:d3:0f:03:2d:95:1e:e1:27:b1:c0:65:38:
6d:bc:19:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:15 2025 by rpki-client