Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/F5Ytjlg1FWsdxSwJLOPD5DQhDJo.roa
File: F5Ytjlg1FWsdxSwJLOPD5DQhDJo.roa (raw, json)
Hash identifier: rB0GXP4P44L/glh/m3ADF7lSZ634cO8s/N8lvh7pZrw=
Subject key identifier: 17:96:2D:8E:58:35:15:6B:1D:C5:2C:09:2C:E3:C3:E4:34:21:0C:9A
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369FE133CC9A42B38C4EB7203F41111
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/F5Ytjlg1FWsdxSwJLOPD5DQhDJo.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213328
IP address blocks: 2a0d:6f80:2a42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fe:13:3c:c9:a4:2b:38:c4:eb:72:03:f4:11:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17962d8e5835156b1dc52c092ce3c3e434210c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:c5:af:55:d2:77:45:e1:c9:8a:23:28:33:4e:
1d:38:de:b9:cf:bc:1d:22:1d:0c:1e:75:f7:d9:90:
61:3b:57:bf:4c:f2:4f:9c:d4:67:51:41:e6:6b:d2:
15:5f:6d:92:d6:e5:dd:d7:bc:36:07:b8:1c:71:63:
a1:91:db:c3:f4:70:df:09:09:a8:fb:c5:2f:99:d3:
0c:18:82:66:39:ce:c2:96:53:a0:d8:bf:b5:cc:eb:
b9:b4:6b:3f:77:a5:3a:1a:6b:e8:25:e8:60:51:42:
c4:28:5c:3d:85:ef:4b:c8:e3:62:9c:11:40:53:67:
03:45:0f:5c:60:90:1a:c0:40:4e:b6:d5:2d:ad:61:
72:cb:6a:fa:fc:b2:90:49:b0:48:eb:cc:9f:23:b1:
cc:2d:69:2c:c5:93:4a:5d:13:58:f4:61:41:cc:3a:
86:bd:0f:20:6d:7b:64:c1:8d:a8:86:02:63:42:95:
8a:e3:63:bb:06:12:7a:be:cf:87:01:38:67:9a:80:
13:fe:46:29:a5:d7:06:b5:46:cd:d9:93:5b:8f:71:
bb:36:0e:f4:40:83:a7:93:e9:63:cf:f7:7e:6e:99:
64:91:89:87:b6:85:14:34:79:45:a1:af:ea:cf:41:
47:25:91:88:8f:07:42:d5:d5:af:73:ad:34:f6:d7:
75:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:96:2D:8E:58:35:15:6B:1D:C5:2C:09:2C:E3:C3:E4:34:21:0C:9A
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/F5Ytjlg1FWsdxSwJLOPD5DQhDJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:2a42::/48
Signature Algorithm: sha256WithRSAEncryption
91:4e:7a:1d:d5:cc:6c:42:c4:25:ed:8b:df:a2:de:51:1f:b6:
89:9a:f8:93:2b:db:03:6d:6b:2e:27:3b:1d:18:79:56:95:ac:
99:a1:45:66:84:af:31:52:c1:75:e4:b9:99:55:97:be:d8:34:
81:6a:87:d6:a3:1d:71:c9:ad:d4:c1:77:99:99:9d:30:41:60:
08:08:ee:db:50:cf:29:81:70:91:58:43:43:2a:80:8f:e8:a9:
2c:11:84:ac:0a:38:7a:11:b8:56:46:d4:04:f3:2d:e6:6b:20:
cd:a9:42:38:8d:fa:ea:52:5a:56:f3:c5:df:a4:9f:7d:28:dd:
51:6e:a7:20:2d:e9:a2:8a:f5:21:ce:58:15:57:ec:1e:b2:2d:
e9:aa:c6:07:23:ef:48:ff:ae:dc:ec:4a:3c:69:b1:fb:33:1b:
d9:cc:f8:8c:46:01:40:fc:bb:37:15:b0:ed:09:16:1e:d2:37:
fa:97:d8:c7:7a:bf:69:f7:17:f9:f5:5b:c6:92:30:78:46:14:
c2:f0:9d:05:03:62:c2:01:af:c3:b4:3c:e7:88:bd:21:8d:55:
68:5d:87:10:c6:5f:35:01:f5:05:46:f8:1f:3a:a2:75:ef:3f:
c8:be:d8:fb:e1:fa:3f:53:c7:b3:b6:81:17:65:b2:bb:4a:eb:
3d:75:b0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:40:06 2025 by rpki-client