Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/fcBmzXxTNoJDq7qClVh1I3bUJDI.roa
File: fcBmzXxTNoJDq7qClVh1I3bUJDI.roa (raw, json)
Hash identifier: Rz27ZyslfiAPhdKSZF8L+go6r59bumFsa2MQ/iOUla0=
Subject key identifier: 7D:C0:66:CD:7C:53:36:82:43:AB:BA:82:95:58:75:23:76:D4:24:32
Certificate issuer: /CN=51626068942586ce95702103bac899d23fcf7242
Certificate serial: 018CC49382DAAC583E0D6D7F492C3CD64418
Authority key identifier: 51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/fcBmzXxTNoJDq7qClVh1I3bUJDI.roa
Signing time: Mon 01 Jan 2024 10:30:50 +0000
ROA not before: Mon 01 Jan 2024 10:30:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204423
IP address blocks: 2001:678:61c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:82:da:ac:58:3e:0d:6d:7f:49:2c:3c:d6:44:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51626068942586ce95702103bac899d23fcf7242
Validity
Not Before: Jan 1 10:30:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dc066cd7c53368243abba829558752376d42432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b4:96:af:28:62:c0:83:99:d7:f1:2d:f6:75:
5c:ec:b4:24:28:84:7a:6e:29:78:e4:1d:43:22:9a:
3f:82:e5:d7:39:e1:c5:b8:ba:a7:74:af:9f:23:a0:
3e:ed:c7:52:cc:33:aa:60:e0:ff:6c:0b:e2:ce:be:
ee:68:e1:36:5e:a1:79:a8:49:d7:b1:42:da:5d:77:
da:0a:08:22:fa:d8:28:0e:ed:84:62:02:22:b4:61:
35:2b:ac:6b:16:af:ef:a4:a2:2b:47:af:64:8f:ee:
9e:15:33:01:e9:45:23:2f:fe:13:d8:e4:ca:8c:0d:
d7:1d:5e:ee:92:a0:8a:e3:8b:9a:80:c4:e9:3e:15:
cd:87:1e:f0:9e:22:73:23:58:17:03:80:37:ab:ca:
ce:82:e8:ee:b7:cd:fa:d9:fe:13:75:86:10:41:1b:
5d:45:1d:6d:91:54:cd:27:90:64:ef:72:43:51:7f:
dc:ef:20:91:93:68:9c:2e:ec:ab:80:91:5c:02:c6:
5c:e9:f7:c6:4f:a1:6b:dd:9c:77:75:19:57:5a:e3:
6f:19:d8:e7:3a:75:a7:84:bf:89:af:d6:12:dd:15:
eb:33:5c:46:3f:21:a2:10:c9:5f:fb:50:ed:4c:b9:
02:2a:aa:60:23:b1:7d:97:3c:8f:27:b8:c8:85:eb:
5d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C0:66:CD:7C:53:36:82:43:AB:BA:82:95:58:75:23:76:D4:24:32
X509v3 Authority Key Identifier:
keyid:51:62:60:68:94:25:86:CE:95:70:21:03:BA:C8:99:D2:3F:CF:72:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWJgaJQlhs6VcCEDusiZ0j_PckI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/fcBmzXxTNoJDq7qClVh1I3bUJDI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c62d00-ffa8-43be-a2bd-7bd9e5f467ad/1/UWJgaJQlhs6VcCEDusiZ0j_PckI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:61c::/48
Signature Algorithm: sha256WithRSAEncryption
1d:35:e0:28:86:62:3f:15:c1:de:0f:11:be:b2:66:ee:6c:81:
64:95:44:8f:dc:11:ae:d4:dc:dc:a9:8e:e7:b7:e1:da:72:6c:
f3:26:69:bb:b8:3a:fa:d9:a4:f6:ed:8b:ef:07:1a:ab:53:c3:
02:9b:3f:bc:0b:50:5b:79:4e:86:ae:7e:82:f6:34:3b:67:cd:
8f:b6:c6:e0:99:0c:aa:6b:f8:01:41:21:bf:48:be:8e:41:6f:
1e:d8:cf:c3:7a:23:1a:a5:dc:2d:ab:4e:49:18:f3:2d:2c:f4:
cf:75:36:25:0f:76:73:c1:fc:ea:cc:67:72:bc:31:f1:45:c9:
75:8c:0c:7d:eb:05:b1:b0:03:5e:fc:de:e8:21:8d:87:f0:8c:
bf:90:bc:4b:99:db:55:ec:d8:84:8a:8f:a0:0c:d8:86:f7:62:
e9:ed:af:10:87:de:84:46:8a:ae:8a:59:da:46:cd:a3:80:b4:
01:e9:61:ea:a3:64:6a:51:5a:1f:72:07:ed:86:a5:58:03:7c:
1b:73:b6:1d:72:74:2b:36:4c:68:ca:92:46:91:cf:22:db:94:
07:d9:4a:d0:8b:a1:73:d9:08:5a:17:fd:ce:3b:ba:90:9c:f1:
81:78:63:72:35:9a:cb:82:65:1c:5e:d9:0a:bf:c1:28:3e:00:
c3:7f:da:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:55:43 2024 by rpki-client on console-fra.rpki-client.org