Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/FAtymmkCe6OSJEcPV_Hsc91u3dE.roa
File: FAtymmkCe6OSJEcPV_Hsc91u3dE.roa (raw, json)
Hash identifier: aLoKF1mAozJf+kgQkDeGL4QfI5DgmXzGdTqo0LToX+c=
Subject key identifier: 14:0B:72:9A:69:02:7B:A3:92:24:47:0F:57:F1:EC:73:DD:6E:DD:D1
Certificate issuer: /CN=51626068942586ce95702103bac899d23fcf7242
Certificate serial: 019424B2C13B44CEA01151A491966413B6E5
Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/FAtymmkCe6OSJEcPV_Hsc91u3dE.roa
Signing time: Thu 02 Jan 2025 01:48:02 +0000
ROA not before: Thu 02 Jan 2025 01:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204423
IP address blocks: 2001:678:61c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:c1:3b:44:ce:a0:11:51:a4:91:96:64:13:b6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51626068942586ce95702103bac899d23fcf7242
Validity
Not Before: Jan 2 01:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=140b729a69027ba39224470f57f1ec73dd6eddd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:12:fd:de:43:ac:91:58:88:94:31:ed:55:
57:c0:2e:4b:35:74:7f:f9:2f:2b:62:b3:30:24:d1:
fc:03:e3:94:f6:6c:59:03:24:52:f9:92:33:59:c8:
e2:1f:fe:e7:18:83:a3:8b:94:e8:30:d2:ee:92:89:
89:0c:c8:62:3f:51:f9:b0:37:34:79:b5:e5:4e:bb:
bb:c9:b6:4c:df:33:dd:cd:4b:e2:41:8a:4a:57:0f:
1b:ba:86:53:b9:36:17:6a:42:90:d9:d3:95:9b:6e:
e0:d2:d5:15:70:ac:5d:bd:9c:39:05:62:96:44:c1:
39:5c:86:ec:22:b8:4f:a3:33:f1:bc:60:55:01:4e:
66:c1:fa:13:47:be:89:88:05:4f:9b:04:4c:14:a6:
b3:90:30:79:94:65:cd:3d:17:c1:93:51:27:9e:e3:
4e:4f:7b:65:f8:af:88:7e:fb:35:e7:6a:00:66:19:
96:ae:1b:2c:83:6d:55:72:e5:cd:c6:ba:64:50:95:
8e:9b:a5:10:9c:c2:16:7f:20:43:b8:52:15:e8:42:
0f:fd:d0:95:0f:99:54:dd:a7:42:61:1b:2e:08:e4:
30:1b:28:73:ca:b4:f2:19:a2:fe:18:3c:5a:2f:1b:
84:d3:9f:06:55:4b:99:52:ec:31:0f:55:1a:82:7e:
b8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0B:72:9A:69:02:7B:A3:92:24:47:0F:57:F1:EC:73:DD:6E:DD:D1
X509v3 Authority Key Identifier:
keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/FAtymmkCe6OSJEcPV_Hsc91u3dE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:61c::/48
Signature Algorithm: sha256WithRSAEncryption
0c:32:01:2c:3c:58:52:a5:cd:8c:f0:75:89:99:2d:dc:af:5c:
eb:91:8c:d3:c3:39:42:33:77:70:d8:26:33:53:5a:be:2b:53:
4f:f7:8b:f6:19:f6:33:26:b2:e1:8a:72:12:e7:eb:79:a0:8f:
33:c9:94:4b:b7:74:f4:8e:b6:c5:23:e1:84:fe:2a:9c:61:3b:
77:5a:37:b7:18:48:f2:05:b2:7f:21:0a:8a:8d:4b:bc:90:d0:
c1:6b:cd:6f:fb:c1:34:c2:8c:a1:b0:d2:53:90:d0:38:10:67:
4c:26:70:91:a7:d4:95:77:a4:3e:b8:01:c8:89:c1:71:8e:10:
a1:2a:b0:b7:d9:d2:64:8f:71:bf:8a:26:6c:9b:1c:b8:9e:bf:
40:8e:50:a9:b5:c6:19:a5:18:37:74:6b:e9:0e:d1:51:28:5e:
a4:99:dc:24:fe:c9:4e:60:32:66:92:62:18:ce:69:85:87:25:
6a:87:47:c2:5d:9e:34:ae:0b:a8:63:84:6d:82:71:8c:d9:01:
aa:84:ae:3e:b5:aa:86:c7:90:a3:7a:26:f2:64:8d:4c:17:3b:
7f:ea:88:95:fa:7a:83:d8:3b:7f:af:13:58:2e:ab:3a:85:86:
cd:d0:53:c9:7c:00:61:3b:97:72:f6:6a:a6:0a:a7:54:d1:f8:
47:d8:3f:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:03:23 2025 by rpki-client