Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/O_0uARvnlGBsnK2YoqVoSrDpqrg.roa
File: O_0uARvnlGBsnK2YoqVoSrDpqrg.roa (raw, json)
Hash identifier: 6A40cJhwnS2HIcaMt2E3Okdtazof/ELlLEJTOh8u/cA=
Subject key identifier: 3B:FD:2E:01:1B:E7:94:60:6C:9C:AD:98:A2:A5:68:4A:B0:E9:AA:B8
Certificate issuer: /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial: 019422FAF66DB096C5512E33F366B09215FB
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/O_0uARvnlGBsnK2YoqVoSrDpqrg.roa
Signing time: Wed 01 Jan 2025 17:47:39 +0000
ROA not before: Wed 01 Jan 2025 17:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 2a0a:4540:220::/48 maxlen: 48
2a0a:4540:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 10:49:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f6:6d:b0:96:c5:51:2e:33:f3:66:b0:92:15:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Validity
Not Before: Jan 1 17:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bfd2e011be794606c9cad98a2a5684ab0e9aab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:24:0c:d8:de:0b:dc:4a:b8:d1:d8:04:b4:
d0:3e:46:0c:5e:93:fb:59:37:c7:75:fa:48:55:ac:
1f:a0:77:f6:a0:3c:f8:7f:fc:91:68:d1:4b:9e:5d:
71:53:e9:2c:35:f7:8f:8f:5e:aa:c0:e1:f8:00:0d:
44:ca:e9:79:a5:17:94:b4:6a:d5:ba:08:b9:c4:a8:
18:49:14:8b:0e:c6:a4:cd:d7:3f:32:6b:b6:cc:ef:
34:0b:df:d1:bc:f9:d3:f2:b4:ad:e0:74:91:b8:ed:
d4:a2:ed:c0:cc:86:6b:f1:da:3b:6c:33:90:46:f2:
e5:fb:1d:85:cb:07:29:49:5e:9a:1c:3c:08:6e:a3:
22:41:eb:de:93:54:45:52:97:cf:16:78:c3:0b:68:
16:67:29:e3:ad:cb:81:8d:d2:05:f6:44:7e:b2:a6:
7b:ab:f4:de:cf:3b:cb:9e:de:9c:a2:d0:93:78:9d:
77:48:4f:3b:5d:d6:62:31:8a:b0:44:f1:f0:0c:af:
eb:f1:57:ae:e0:4d:58:7e:1a:84:56:c6:94:03:b3:
8d:4b:4d:62:14:b7:eb:30:b2:bb:c9:97:2b:4f:b1:
57:9a:26:a2:87:ee:ab:0e:6b:4e:68:d1:7a:1d:90:
87:dc:2a:ff:c1:53:b3:7b:d2:cc:59:78:68:28:df:
5d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:FD:2E:01:1B:E7:94:60:6C:9C:AD:98:A2:A5:68:4A:B0:E9:AA:B8
X509v3 Authority Key Identifier:
keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/O_0uARvnlGBsnK2YoqVoSrDpqrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4540:220::/48
2a0a:4540:1000::/48
Signature Algorithm: sha256WithRSAEncryption
60:51:61:92:52:18:63:ca:d3:1e:60:2a:92:e0:f7:4b:e7:e8:
bb:cb:0c:65:77:30:24:a4:e3:63:fa:6a:2b:e3:c5:ac:2f:01:
96:5c:f6:57:6c:c8:52:18:4f:9f:37:f3:e0:ca:8c:2b:35:0c:
f4:87:ba:fe:ee:49:4e:87:89:30:bb:03:ff:93:58:89:f2:5e:
d5:65:f8:eb:cf:ea:e6:9b:09:d5:7f:87:95:e9:3f:a9:6d:90:
86:6a:9d:4a:76:3b:47:8e:9c:c1:e6:46:9c:12:3e:10:49:a4:
c3:8f:91:19:1a:5c:d6:2f:9b:6a:d9:19:ca:f7:4a:08:4c:83:
70:24:8f:94:7c:5a:2e:65:4c:e9:f8:70:03:75:0d:d2:3a:bd:
ed:6c:3b:d6:b7:d1:76:dd:75:bb:ed:b8:9a:d2:e6:90:99:f7:
f1:a5:b5:f7:9c:36:89:3e:70:d2:2f:db:56:b7:41:e5:d6:a9:
6f:7f:b5:61:15:56:fe:68:eb:35:31:d8:03:c7:8f:9b:87:ae:
a7:22:20:00:d9:a4:0c:03:03:1e:f2:19:5e:54:fa:da:6a:fd:
35:9a:52:44:de:cc:3e:0c:df:97:b3:6c:12:98:b0:19:75:84:
97:bf:6f:82:b3:ab:a2:32:24:51:e7:c5:42:8b:e2:6b:4e:e9:
87:2d:e5:db
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 11 12:54:17 2025 by rpki-client