Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/VlxGkOYTvniUpaN2-i96-ByjVFM.roa
File: VlxGkOYTvniUpaN2-i96-ByjVFM.roa (raw, json)
Hash identifier: dGGtOFH1lEwvFRDc0nTehDr8TdEeKkWN0IxRLEDb348=
Subject key identifier: 56:5C:46:90:E6:13:BE:78:94:A5:A3:76:FA:2F:7A:F8:1C:A3:54:53
Certificate issuer: /CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Certificate serial: 01941F8C1BC89543C970A1A10E4D34713CFA
Authority key identifier: B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/VlxGkOYTvniUpaN2-i96-ByjVFM.roa
Signing time: Wed 01 Jan 2025 01:47:43 +0000
ROA not before: Wed 01 Jan 2025 01:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216226
IP address blocks: 2a12:de40:30::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:1b:c8:95:43:c9:70:a1:a1:0e:4d:34:71:3c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9e6c41a2b04fcd8f8e95718fa7d2e12cc44ac1f
Validity
Not Before: Jan 1 01:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=565c4690e613be7894a5a376fa2f7af81ca35453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:db:40:c9:1c:e6:bc:a8:bd:e2:67:a7:58:09:
ec:e6:72:2c:67:1a:3d:2f:87:c3:7e:2f:13:65:16:
93:61:76:44:cb:a9:b5:28:7e:41:a9:ce:ba:4c:26:
14:56:00:7c:93:c5:63:f5:9a:1f:6d:55:d6:af:56:
d9:39:53:07:5b:4f:a1:49:1d:dc:19:24:72:f1:19:
fd:59:8d:37:0b:b9:7a:ee:ba:f1:68:87:f3:19:d2:
db:ed:f3:ef:dd:59:25:4a:cd:70:5a:2e:b2:f6:54:
be:37:51:bc:c1:b3:cb:4b:4a:da:e8:72:91:c5:2e:
fd:05:44:9f:e9:0a:09:7e:22:1c:f8:7a:92:42:9a:
5c:f4:2f:20:64:3f:dd:70:3d:cf:f4:ca:33:6e:07:
7a:af:49:3a:f8:81:01:06:3b:25:83:5a:5e:58:4b:
fd:4f:5a:f0:51:6f:77:c5:39:d3:e8:4a:8d:6c:99:
47:72:67:f3:ff:95:2d:e8:2c:04:0f:d0:60:b6:36:
b1:90:2b:75:dc:ae:d4:d1:d1:98:07:5c:a7:e9:52:
60:1d:8d:11:c7:99:a2:73:14:d2:ab:63:fd:ff:5b:
be:10:0f:be:e3:3d:67:f0:76:8c:71:8f:54:c4:aa:
f3:0e:5f:91:42:8d:13:b7:58:b7:6c:47:81:53:31:
7d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5C:46:90:E6:13:BE:78:94:A5:A3:76:FA:2F:7A:F8:1C:A3:54:53
X509v3 Authority Key Identifier:
keyid:B9:E6:C4:1A:2B:04:FC:D8:F8:E9:57:18:FA:7D:2E:12:CC:44:AC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uebEGisE_Nj46VcY-n0uEsxErB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/VlxGkOYTvniUpaN2-i96-ByjVFM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c261bf-6c6b-4b07-b5aa-c08c0446d613/1/uebEGisE_Nj46VcY-n0uEsxErB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:de40:30::/48
Signature Algorithm: sha256WithRSAEncryption
b6:53:ff:7e:db:34:f2:df:cf:20:a8:80:d1:af:c3:66:9e:8b:
e5:dc:5b:7e:d0:18:c1:d2:3e:2c:d6:cf:1f:cb:0c:8e:3c:f7:
89:26:b6:14:18:f9:e2:cb:a4:ad:ca:b2:1a:ed:66:5f:bc:28:
7f:db:7a:6e:d0:05:ac:3d:76:0e:96:43:d6:01:4a:df:4a:15:
dc:4b:10:5d:4f:04:ac:78:6f:f2:5c:eb:95:26:85:62:c7:27:
84:02:c5:4b:15:46:ea:de:7f:6c:15:10:b7:f5:f1:fa:71:e3:
73:81:4e:11:a3:a9:da:c6:92:b7:63:ad:ac:33:39:ba:ca:4d:
33:2b:6e:31:67:0c:ad:44:38:59:3e:09:32:28:f4:15:6e:b2:
af:25:18:e8:c6:d5:5e:82:24:6f:69:91:67:90:de:da:fa:30:
37:fa:f0:d1:aa:b3:a7:ec:f5:ab:00:cd:c1:3d:d5:bf:14:f2:
54:c3:44:4b:ae:cf:34:2b:4e:0c:15:06:0f:92:23:6a:78:49:
8e:4c:83:ac:8f:59:08:ea:b4:05:41:9e:c0:f8:7a:b7:8b:4f:
49:26:6d:10:24:7b:0c:79:41:a9:77:32:52:bd:df:9d:fc:c8:
ad:52:07:ef:a6:fa:57:f1:cd:70:07:d0:27:d1:0f:1e:f9:99:
e2:7f:f3:cc
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQfjBvIlUPJcKGhDk00cTz6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZTZjNDFhMmIwNGZjZDhmOGU5NTcxOGZhN2QyZTEyY2M0
NGFjMWYwHhcNMjUwMTAxMDE0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NjVjNDY5MGU2MTNiZTc4OTRhNWEzNzZmYTJmN2FmODFjYTM1NDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNtAyRzmvKi94menWAns5nIsZxo9
L4fDfi8TZRaTYXZEy6m1KH5Bqc66TCYUVgB8k8Vj9ZofbVXWr1bZOVMHW0+hSR3c
GSRy8Rn9WY03C7l67rrxaIfzGdLb7fPv3VklSs1wWi6y9lS+N1G8wbPLS0ra6HKR
xS79BUSf6QoJfiIc+HqSQppc9C8gZD/dcD3P9Mozbgd6r0k6+IEBBjslg1peWEv9
T1rwUW93xTnT6EqNbJlHcmfz/5Ut6CwED9BgtjaxkCt13K7U0dGYB1yn6VJgHY0R
x5micxTSq2P9/1u+EA++4z1n8HaMcY9UxKrzDl+RQo0Tt1i3bEeBUzF9kQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFFZcRpDmE754lKWjdvovevgco1RTMB8GA1UdIwQY
MBaAFLnmxBorBPzY+OlXGPp9LhLMRKwfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWViRUdpc0VfTmo0NlZjWS1uMHVFc3hFckI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9jMjYxYmYtNmM2Yi00YjA3LWI1YWEt
YzA4YzA0NDZkNjEzLzEvVmx4R2tPWVR2bmlVcGFOMi1pOTYtQnlqVkZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9jMjYxYmYtNmM2Yi00YjA3LWI1YWEtYzA4YzA0NDZkNjEz
LzEvdWViRUdpc0VfTmo0NlZjWS1uMHVFc3hFckI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhLeQAAw
MA0GCSqGSIb3DQEBCwUAA4IBAQC2U/9+2zTy388gqIDRr8Nmnovl3Ft+0BjB0j4s
1s8fywyOPPeJJrYUGPniy6StyrIa7WZfvCh/23pu0AWsPXYOlkPWAUrfShXcSxBd
TwSseG/yXOuVJoVixyeEAsVLFUbq3n9sFRC39fH6ceNzgU4Ro6naxpK3Y62sMzm6
yk0zK24xZwytRDhZPgkyKPQVbrKvJRjoxtVegiRvaZFnkN7a+jA3+vDRqrOn7PWr
AM3BPdW/FPJUw0RLrs80K04MFQYPkiNqeEmOTIOsj1kI6rQFQZ7A+Hq3i09JJm0Q
JHsMeUGpdzJSvd+d/MitUgfvpvpX8c1wB9An0Q8e+Znif/PM
-----END CERTIFICATE-----
Generated at Fri Apr 18 22:19:04 2025 by rpki-client