Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FNPtX1z6-Gt7jQ44UvWNFSRbm-g.roa
File: FNPtX1z6-Gt7jQ44UvWNFSRbm-g.roa (raw, json)
Hash identifier: nguWIGGL61WB5iPidKnsdqS+gmUzKRAINT8EDHat7dE=
Subject key identifier: 14:D3:ED:5F:5C:FA:F8:6B:7B:8D:0E:38:52:F5:8D:15:24:5B:9B:E8
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 01942369F924FE43291AF8335AB20993BC09
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FNPtX1z6-Gt7jQ44UvWNFSRbm-g.roa
Signing time: Wed 01 Jan 2025 19:48:55 +0000
ROA not before: Wed 01 Jan 2025 19:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211330
IP address blocks: 2a0d:6f80:2a41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:f9:24:fe:43:29:1a:f8:33:5a:b2:09:93:bc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14d3ed5f5cfaf86b7b8d0e3852f58d15245b9be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:90:c3:11:6c:a3:9a:df:18:e5:45:11:a1:ea:
be:46:7c:11:24:2d:98:61:fa:0c:b1:30:4d:d8:96:
fb:4a:4f:4b:86:97:50:77:46:76:cc:23:e5:b5:b8:
06:7a:93:c2:ab:b5:87:33:c8:b1:2b:b8:df:57:2d:
63:cd:3f:e3:8d:09:63:27:e8:b5:b8:bf:60:77:0e:
d0:aa:27:f3:b2:05:44:3f:12:79:89:a8:44:60:1f:
7e:81:98:4d:a7:3c:dd:84:ad:a7:29:86:0f:44:a5:
0c:90:6e:a4:4d:4e:2d:32:f1:2a:76:cf:c9:de:35:
05:8d:86:f9:27:56:6c:80:43:e9:6b:41:0b:38:f1:
7b:7d:90:5e:31:8e:95:27:da:93:ac:fe:ae:d4:30:
5d:b1:70:1e:de:7f:35:3d:31:88:ed:77:84:fb:b5:
c5:28:24:56:dc:52:c2:14:4a:fa:4c:45:e3:f1:3d:
29:92:8b:c1:99:01:90:5f:09:18:06:16:e9:50:b0:
96:68:1b:fb:ce:86:fe:c9:12:52:9b:1d:95:53:7d:
b5:c5:30:f1:fc:3b:97:6e:89:aa:1f:58:70:a2:f7:
dd:7e:b0:9e:6e:11:d1:e9:26:15:24:8f:d4:68:db:
18:46:39:11:2b:84:da:26:df:ed:67:fd:36:21:a7:
ff:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D3:ED:5F:5C:FA:F8:6B:7B:8D:0E:38:52:F5:8D:15:24:5B:9B:E8
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/FNPtX1z6-Gt7jQ44UvWNFSRbm-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:2a41::/48
Signature Algorithm: sha256WithRSAEncryption
11:d6:17:18:96:61:2a:aa:0b:f5:7b:e6:8d:bb:8d:34:cc:8b:
a3:d2:b3:e8:9a:bb:cb:a4:a0:0d:5b:0e:3c:87:96:43:17:37:
94:f1:b4:be:04:65:05:cd:2b:3e:46:83:89:0d:d8:93:a9:01:
37:ef:9d:e5:8f:cf:17:4f:c7:ae:d1:75:c1:5c:35:7b:b3:22:
65:e1:2e:40:fa:2e:52:79:21:1f:b0:06:f2:cf:71:50:ea:7c:
7d:3a:42:2c:fe:dd:94:99:48:93:8e:5c:b7:ea:e9:00:f9:12:
28:41:be:6d:a6:17:d4:a1:ef:b1:f3:7d:51:ea:92:53:81:af:
03:32:c2:81:42:05:4d:94:9b:d1:3c:f7:d2:48:68:c7:f7:6b:
85:36:9b:bf:c6:49:ed:0c:4f:df:f2:5a:61:b7:9c:d2:e6:91:
e8:d2:a0:ca:61:22:92:88:06:12:e7:2f:38:72:fa:ee:06:33:
94:ed:8e:dc:e6:38:87:20:cf:0a:c7:d1:f4:e2:23:d5:2c:f8:
90:da:ba:b7:ed:0b:83:c0:12:26:0f:e6:0a:81:1e:03:81:3a:
f4:bc:f6:17:dc:c6:1a:0e:91:50:ff:39:31:fb:82:c0:f0:15:
c3:93:ac:be:55:9d:36:84:de:a1:4e:42:58:74:d1:71:eb:35:
f1:5e:16:90
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQjafkk/kMpGvgzWrIJk7wJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjUwMTAxMTk0ODU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGQzZWQ1ZjVjZmFmODZiN2I4ZDBlMzg1MmY1OGQxNTI0NWI5YmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25DDEWyjmt8Y5UURoeq+RnwRJC2Y
YfoMsTBN2Jb7Sk9LhpdQd0Z2zCPltbgGepPCq7WHM8ixK7jfVy1jzT/jjQljJ+i1
uL9gdw7QqifzsgVEPxJ5iahEYB9+gZhNpzzdhK2nKYYPRKUMkG6kTU4tMvEqds/J
3jUFjYb5J1ZsgEPpa0ELOPF7fZBeMY6VJ9qTrP6u1DBdsXAe3n81PTGI7XeE+7XF
KCRW3FLCFEr6TEXj8T0pkovBmQGQXwkYBhbpULCWaBv7zob+yRJSmx2VU321xTDx
/DuXbomqH1hwovfdfrCebhHR6SYVJI/UaNsYRjkRK4TaJt/tZ/02Iaf/TQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBTT7V9c+vhre40OOFL1jRUkW5voMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvRk5QdFgxejYtR3Q3alE0NFV2V05GU1JibS1nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg1vgCpB
MA0GCSqGSIb3DQEBCwUAA4IBAQAR1hcYlmEqqgv1e+aNu400zIuj0rPomrvLpKAN
Ww48h5ZDFzeU8bS+BGUFzSs+RoOJDdiTqQE3753lj88XT8eu0XXBXDV7syJl4S5A
+i5SeSEfsAbyz3FQ6nx9OkIs/t2UmUiTjly36ukA+RIoQb5tphfUoe+x831R6pJT
ga8DMsKBQgVNlJvRPPfSSGjH92uFNpu/xkntDE/f8lpht5zS5pHo0qDKYSKSiAYS
5y84cvruBjOU7Y7c5jiHIM8Kx9H04iPVLPiQ2rq37QuDwBImD+YKgR4DgTr0vPYX
3MYaDpFQ/zkx+4LA8BXDk6y+VZ02hN6hTkJYdNFx6zXxXhaQ
-----END CERTIFICATE-----
Generated at Wed Feb 5 12:51:50 2025 by rpki-client