Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FuBYFezN1AFhO-uBBhrN-Y7mNos.roa
File: FuBYFezN1AFhO-uBBhrN-Y7mNos.roa (raw, json)
Hash identifier: Tx2rwusqq9yV6pbIJXsJYgeTJDYcj0GUS8gIEA0wI74=
Subject key identifier: 16:E0:58:15:EC:CD:D4:01:61:3B:EB:81:06:1A:CD:F9:8E:E6:36:8B
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0194A238003C565487EE2306434E729CBFBA
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FuBYFezN1AFhO-uBBhrN-Y7mNos.roa
Signing time: Sun 26 Jan 2025 10:46:06 +0000
ROA not before: Sun 26 Jan 2025 10:46:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214147
IP address blocks: 2a0c:9a40:8c10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a2:38:00:3c:56:54:87:ee:23:06:43:4e:72:9c:bf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 26 10:46:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16e05815eccdd401613beb81061acdf98ee6368b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d4:39:b5:ef:e1:1a:13:a5:a9:a7:ca:77:26:
41:58:96:78:18:6a:65:aa:b9:57:d3:cd:33:33:78:
5d:5f:bb:10:92:2b:de:d7:6e:c6:79:b5:b3:00:15:
94:fd:ee:c2:6b:95:d7:a9:5e:a3:b7:ea:a7:63:49:
49:05:21:3b:77:2c:27:eb:b6:dd:52:b8:d9:58:d5:
6c:88:c6:89:cb:97:8d:a8:c7:d8:56:26:47:1a:c5:
4d:03:56:43:34:14:26:bf:e7:fa:c7:f9:9b:23:93:
f6:82:57:15:47:bb:10:52:74:e1:ad:22:ab:ef:06:
92:b1:94:f2:96:a9:3b:74:b7:41:ab:70:07:15:60:
3e:2d:be:20:b0:8a:4e:e4:90:54:87:23:36:e0:7c:
3c:94:da:e6:2f:d5:cf:6a:63:65:05:7f:1c:bb:a7:
9f:bf:46:7e:28:0a:c1:ca:5d:05:05:07:a6:85:39:
7d:7e:07:b3:8b:87:4e:c8:d9:a5:f0:a4:a6:46:7e:
38:b5:2b:c5:92:b4:b5:ae:4a:53:b3:33:0f:4d:55:
67:1a:9d:0f:bb:4b:f5:1b:80:6e:03:14:cb:cf:3e:
b8:72:93:8d:66:d3:71:2e:7c:ed:9b:1c:ed:8e:35:
03:cd:18:f1:6e:58:12:63:98:27:f0:c0:79:63:a0:
41:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E0:58:15:EC:CD:D4:01:61:3B:EB:81:06:1A:CD:F9:8E:E6:36:8B
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/FuBYFezN1AFhO-uBBhrN-Y7mNos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:8c10::/44
Signature Algorithm: sha256WithRSAEncryption
13:8a:76:2d:68:15:90:b5:45:50:62:10:02:e2:1a:32:9d:e6:
ec:ac:af:de:99:fb:26:63:d5:af:c9:39:e7:5a:ea:8b:dc:a0:
a1:7a:34:1b:c1:5a:58:3e:d1:05:df:b5:f5:27:ea:fe:d5:1d:
ee:a1:da:e0:f3:50:6a:76:80:5f:11:e3:d1:39:7f:2a:7f:83:
d2:e3:35:75:11:9d:42:1a:c6:2b:05:04:b5:a4:6c:7f:d6:90:
64:e6:0b:89:e2:0c:c9:2b:4f:26:9b:be:38:0c:b0:b8:65:29:
af:c4:07:50:b0:18:2e:ed:b2:95:ba:61:af:15:33:06:9a:9c:
64:87:63:e7:fa:9a:cc:12:3c:7f:b1:1a:94:b5:c6:f2:47:f0:
8b:11:46:04:ed:ca:54:45:99:72:a0:cc:f5:32:d4:6d:35:33:
2c:35:93:8d:ac:ef:43:78:39:c2:d7:da:34:7d:04:95:e3:e0:
3d:e9:e8:c6:e0:6d:02:95:45:7d:e1:2a:84:6d:fd:8d:47:60:
02:f1:46:35:51:6d:12:f4:a3:30:e8:fc:11:b2:71:5e:ec:92:
28:73:65:c8:a6:50:bc:46:a8:79:c6:76:d4:d5:44:aa:1f:bb:
a6:02:2e:a4:5c:6a:76:a0:40:99:3b:c9:55:0d:aa:38:42:c9:
38:0d:7d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:36:53 2025 by rpki-client