Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vOsMvtdeR5gITtoal1rXjMMPXik.roa
File: vOsMvtdeR5gITtoal1rXjMMPXik.roa (raw, json)
Hash identifier: b2caMroCvmBfQGY2htgBWg0FweLYFeBFyckWgjl9E/Q=
Subject key identifier: BC:EB:0C:BE:D7:5E:47:98:08:4E:DA:1A:97:5A:D7:8C:C3:0F:5E:29
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01978CC277217E3F79A493DAA11623520112
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vOsMvtdeR5gITtoal1rXjMMPXik.roa
Signing time: Fri 20 Jun 2025 09:54:04 +0000
ROA not before: Fri 20 Jun 2025 09:54:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214939
IP address blocks: 2a0e:97c0:92a::/48 maxlen: 48
2a0e:97c0:92f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:c2:77:21:7e:3f:79:a4:93:da:a1:16:23:52:01:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 20 09:54:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bceb0cbed75e4798084eda1a975ad78cc30f5e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7c:b7:64:fa:ea:ac:aa:74:ab:c7:99:f7:76:
74:aa:69:02:84:f9:9c:23:91:5f:1d:08:14:27:48:
a4:6a:a7:d0:c7:20:b4:55:1a:52:bf:c2:28:44:9b:
02:2d:1d:77:77:b5:98:33:91:8d:ae:bb:a7:c5:aa:
6b:7b:fe:e2:4f:67:95:42:b4:ea:d1:55:61:f1:49:
7b:5e:cf:bc:fb:10:f6:96:ed:99:c1:b2:cf:ad:ae:
5d:83:76:45:ea:50:1c:0a:e4:4e:0e:e9:a4:70:35:
b5:0a:57:80:71:46:41:42:38:36:14:be:d0:6a:aa:
e8:07:43:c2:69:41:d4:81:71:7f:3a:2b:7d:72:23:
8d:6e:23:f0:f2:9d:42:76:10:50:4a:9f:bd:22:00:
65:a9:8a:96:d9:7e:ff:1e:76:db:5a:63:a6:36:de:
46:3c:15:9c:33:2b:62:a6:54:d2:93:96:f7:50:fd:
1e:7e:60:c1:db:de:5a:fb:4f:e3:96:bc:7a:82:b8:
d9:5b:14:6c:d1:98:41:3c:9a:32:2f:b3:3b:1e:cb:
e3:0e:7d:ae:70:3e:a0:2a:ad:1a:11:01:23:9d:68:
08:8e:62:1c:b1:c9:57:df:8b:88:43:48:c7:3b:7a:
2e:1a:fc:d0:9d:7b:9e:4e:82:7b:aa:3e:23:e3:b5:
bc:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:EB:0C:BE:D7:5E:47:98:08:4E:DA:1A:97:5A:D7:8C:C3:0F:5E:29
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/vOsMvtdeR5gITtoal1rXjMMPXik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:92a::/48
2a0e:97c0:92f::/48
Signature Algorithm: sha256WithRSAEncryption
23:e5:e0:32:0f:23:61:69:48:af:fc:99:1f:ee:c4:09:d0:90:
45:e5:81:5a:d9:84:16:33:5b:3a:6e:06:02:9f:0e:90:26:35:
46:0e:81:f8:df:67:c0:9d:53:d9:79:52:f5:77:3b:f3:34:90:
27:26:86:83:47:f9:18:05:16:f0:5d:37:e8:f0:51:e5:bb:90:
cc:45:7d:ea:1b:a4:4f:0c:86:26:7c:b3:20:19:57:5e:9b:c1:
1b:c8:4e:c9:7c:59:ab:1f:65:a2:74:9f:cf:8d:e7:ba:1d:87:
89:26:d1:02:d5:76:ba:34:14:fd:2a:f2:cd:7a:15:17:f2:ce:
13:9c:7f:ca:4d:4a:59:8a:5f:dd:26:5e:04:16:e5:56:92:98:
08:d1:13:8c:9b:06:70:7c:e8:dc:a0:a7:e7:30:42:93:97:d4:
8d:82:c3:25:26:50:21:17:36:92:ee:1d:d3:a6:e7:0b:53:ec:
30:8b:a4:a7:a1:1b:0d:1a:31:e2:4e:f1:8f:cb:4d:f2:34:36:
a7:d4:7e:35:31:be:0c:f3:ac:70:6f:c1:7d:de:d8:55:ce:ea:
48:a3:e3:ba:be:f5:9b:ea:7b:72:dd:65:fa:d1:13:c7:3d:8b:
97:02:99:44:04:76:6f:25:42:6d:08:16:31:e4:01:79:cd:f8:
6a:b0:07:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 00:53:00 2025 by rpki-client