Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VnXIYgoqrG254tjaGRQSRIp42OY.roa
File: VnXIYgoqrG254tjaGRQSRIp42OY.roa (raw, json)
Hash identifier: zUlbYQ/124/wiT4exNMn3hgoKiTErdCGCR3QZtPGZtA=
Subject key identifier: 56:75:C8:62:0A:2A:AC:6D:B9:E2:D8:DA:19:14:12:44:8A:78:D8:E6
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01965A373849A43BBDF20D561982AA0B5BE7
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VnXIYgoqrG254tjaGRQSRIp42OY.roa
Signing time: Mon 21 Apr 2025 21:18:10 +0000
ROA not before: Mon 21 Apr 2025 21:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215568
IP address blocks: 2a13:c247:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 12:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5a:37:38:49:a4:3b:bd:f2:0d:56:19:82:aa:0b:5b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 21 21:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5675c8620a2aac6db9e2d8da191412448a78d8e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:8e:50:52:84:49:f7:96:71:3f:2f:c7:46:
55:2f:7b:16:ea:88:44:d2:98:3f:7c:bf:55:17:93:
20:ab:ff:51:23:29:b5:72:d3:0f:b1:ba:31:43:39:
51:46:f5:00:8a:ad:22:7f:bc:6e:3d:6f:b8:db:22:
31:39:a1:dc:f4:a1:f9:09:f0:a7:69:29:a6:e2:85:
ba:de:5c:11:0b:78:5f:a7:0a:3a:63:47:52:61:bf:
51:75:19:ab:b6:99:5a:c5:a1:84:97:21:0e:e5:ba:
04:c9:5e:fb:b4:c9:74:f0:13:75:4e:b1:bc:d2:66:
93:aa:25:94:39:39:10:d6:52:90:26:25:9a:a4:96:
1e:27:e8:21:71:62:52:e8:ef:cf:85:e4:19:0d:bf:
21:ae:fb:6a:de:26:26:0f:f1:ea:04:98:ac:2b:61:
a4:ed:59:d1:8e:79:06:61:53:94:61:86:06:de:37:
ad:cd:14:40:af:1b:aa:c2:9f:98:98:a4:dd:d6:35:
6a:43:3a:79:60:72:0f:c1:45:aa:f6:c2:ff:fa:a2:
75:5e:53:7e:ef:07:66:4c:01:e7:9c:77:fc:6d:4a:
12:b4:18:48:70:07:aa:34:6f:fb:b1:d3:6b:37:59:
c5:b5:62:85:a9:5c:bb:7f:03:73:ab:0f:3b:7b:66:
a5:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:75:C8:62:0A:2A:AC:6D:B9:E2:D8:DA:19:14:12:44:8A:78:D8:E6
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/VnXIYgoqrG254tjaGRQSRIp42OY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:c247:8000::/33
Signature Algorithm: sha256WithRSAEncryption
0d:4c:93:64:51:8f:6e:82:3f:ea:48:75:9a:db:6b:68:e2:3e:
22:74:2f:37:1f:af:a9:03:2b:3d:b0:3a:bb:64:53:62:2c:fb:
b4:31:4b:72:f7:12:ff:59:63:79:6a:e8:63:f1:e5:c4:fe:07:
01:6e:bf:e3:b7:2a:8f:ee:07:ef:b3:f3:35:30:74:6d:26:bb:
f5:f4:76:af:dd:0a:c9:73:7c:3b:04:3d:50:d6:fb:75:32:d2:
1f:d1:3d:56:7d:af:dc:c4:43:e3:cb:c7:01:42:5e:3b:73:f4:
d7:d2:a2:83:69:d3:f6:0f:64:8e:c5:e6:37:36:dc:06:ca:70:
c4:84:33:ba:e5:27:8b:ca:61:be:e7:f5:bd:a5:46:5d:c1:9f:
85:4c:63:c4:64:ca:6d:b3:73:16:d8:a2:64:b7:09:a1:35:8e:
59:d9:86:f8:2d:ef:59:50:18:14:10:5d:ad:ea:89:48:b4:fd:
d5:12:af:f9:02:42:49:f5:5b:1d:64:95:00:04:94:36:a3:8e:
27:e0:16:b6:05:fa:22:c9:77:a6:9d:4e:3d:13:cd:1f:1c:1e:
e5:70:9e:5d:ca:4e:b0:36:24:ea:90:59:2d:9b:ad:f7:da:1a:
d7:f0:15:5d:b0:90:a7:7a:59:b9:3c:d3:1a:cf:71:3a:e7:1d:
60:5d:c9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:03:29 2025 by rpki-client