Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/FRMJ2z4kCJ_w8lrb8z-QFwDHfEs.roa
File: FRMJ2z4kCJ_w8lrb8z-QFwDHfEs.roa (raw, json)
Hash identifier: C02friGf2/eI41x3ctdCJsSF5237prwoIfP9E5DpSNA=
Subject key identifier: 15:13:09:DB:3E:24:08:9F:F0:F2:5A:DB:F3:3F:90:17:00:C7:7C:4B
Certificate issuer: /CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Certificate serial: 0195F6E3F7EC98C02883E284A6E4601242A6
Authority key identifier: F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/FRMJ2z4kCJ_w8lrb8z-QFwDHfEs.roa
Signing time: Wed 02 Apr 2025 14:24:49 +0000
ROA not before: Wed 02 Apr 2025 14:24:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204490
IP address blocks: 2a09:da42::/32 maxlen: 32
2a0c:ac2::/32 maxlen: 32
2a12:7306::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 23:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:f6:e3:f7:ec:98:c0:28:83:e2:84:a6:e4:60:12:42:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f75d8b52815f3f2613e948992ec9fe660f6949b4
Validity
Not Before: Apr 2 14:24:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=151309db3e24089ff0f25adbf33f901700c77c4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:e5:4b:a4:a7:a0:c6:33:be:fb:91:ae:fb:e5:
7c:47:bb:92:aa:ef:26:9b:25:20:21:dc:ab:05:c3:
25:c2:7b:02:2b:87:1a:22:be:6d:e4:22:01:94:db:
bf:e1:44:a0:07:55:76:fd:84:ed:5d:8f:91:8f:bc:
28:bc:fa:5b:e9:f0:7c:14:6b:d1:fb:2a:b5:8e:95:
9b:ca:71:5f:87:25:32:70:f4:8c:6d:f8:ac:aa:71:
5c:3a:9f:5a:3a:45:56:a1:c5:7e:38:83:90:2d:85:
b3:63:eb:c4:28:a3:09:df:d9:16:a0:68:f7:e6:43:
07:17:a4:ee:2a:e0:09:11:59:4b:44:5b:6e:54:82:
20:74:c1:dc:1e:76:40:fd:e6:d2:46:21:01:39:d2:
57:ed:92:57:c4:a3:c0:8d:95:25:cb:a4:1c:b6:f1:
cb:ca:77:65:01:a3:57:d1:21:03:c2:21:d7:ee:fd:
4b:8e:71:14:e0:d7:92:d2:62:42:af:c3:b0:16:2c:
e9:df:03:27:9a:8a:b8:f7:e1:49:38:83:9d:70:58:
71:8a:40:2f:62:8b:d2:4e:c3:b4:ef:8a:53:ef:41:
cf:30:b5:d1:06:63:69:19:09:1e:84:5a:7a:55:03:
d2:a8:39:ff:1f:e0:0c:01:02:74:8a:bd:ee:04:63:
c3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:13:09:DB:3E:24:08:9F:F0:F2:5A:DB:F3:3F:90:17:00:C7:7C:4B
X509v3 Authority Key Identifier:
keyid:F7:5D:8B:52:81:5F:3F:26:13:E9:48:99:2E:C9:FE:66:0F:69:49:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/912LUoFfPyYT6UiZLsn-Zg9pSbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/FRMJ2z4kCJ_w8lrb8z-QFwDHfEs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9514ed-276e-4aba-897e-a4410e10b6f5/1/912LUoFfPyYT6UiZLsn-Zg9pSbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:da42::/32
2a0c:ac2::/32
2a12:7306::/32
Signature Algorithm: sha256WithRSAEncryption
19:95:c1:61:f8:b4:35:51:95:5b:45:03:e3:37:5f:2d:39:d7:
be:89:be:b7:25:f3:2d:17:12:b8:6d:2a:75:95:b2:93:24:1d:
60:3c:9c:fd:e5:63:5f:d8:aa:a6:fd:02:92:0c:62:4f:29:84:
83:a7:b5:2e:b4:81:ae:a8:a3:c8:84:18:dd:50:2a:83:39:d6:
4c:e4:67:0c:f8:50:ff:06:6a:c0:31:77:78:07:97:0a:3f:42:
74:9d:ca:13:b3:c4:06:cf:06:e6:19:e5:11:e7:76:07:96:c0:
43:b2:ad:5f:83:49:62:ae:a3:d9:51:a5:b3:0d:49:20:b3:cc:
0e:a4:72:ff:41:09:5c:6a:c2:09:cb:1c:03:2b:92:21:35:c8:
90:29:37:5f:17:68:6a:70:3f:4b:9e:ff:dc:fd:aa:d1:a5:c7:
6f:aa:1a:74:39:af:05:03:b4:c8:6a:17:47:5b:83:9e:15:6d:
5a:44:12:8c:5a:f5:3d:b6:f8:b2:c2:03:ea:99:f1:ba:d7:90:
50:1a:0f:92:1b:bf:84:85:15:cc:a1:be:79:93:d1:79:2f:64:
64:eb:4f:90:7e:8c:ae:99:1f:fe:e6:24:23:84:77:37:5a:20:
ae:8b:7a:1c:b2:be:92:0a:4c:db:db:53:e1:bd:8d:34:c2:ea:
8b:3a:bd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 03:51:19 2025 by rpki-client