Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/FQ4rg7OhMvfEdjnYsqHvy-FHszM.roa
File: FQ4rg7OhMvfEdjnYsqHvy-FHszM.roa (raw, json)
Hash identifier: /fJa0fezuZDAtZ8VzWBuzJt3Rewcg04wkZkyVi4gEd8=
Subject key identifier: 15:0E:2B:83:B3:A1:32:F7:C4:76:39:D8:B2:A1:EF:CB:E1:47:B3:33
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 0194222030F8367190ECD61CF88487FEDCA5
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/FQ4rg7OhMvfEdjnYsqHvy-FHszM.roa
Signing time: Wed 01 Jan 2025 13:48:42 +0000
ROA not before: Wed 01 Jan 2025 13:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204406
IP address blocks: 2a0e:8f02:f04b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:30:f8:36:71:90:ec:d6:1c:f8:84:87:fe:dc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 1 13:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=150e2b83b3a132f7c47639d8b2a1efcbe147b333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a4:46:27:61:e0:55:a0:e1:5c:65:06:95:43:
bd:1c:82:d9:a0:dd:c4:87:0c:50:de:2f:09:8c:84:
09:ea:32:9a:00:73:76:29:d7:f5:eb:19:97:09:72:
37:3f:d2:a0:89:83:36:0a:ba:c8:7d:6f:67:40:a1:
24:70:eb:41:35:54:8c:52:be:b9:ed:57:63:99:17:
54:ce:e0:65:b0:2a:c1:c0:2a:21:15:10:81:06:49:
29:50:60:68:03:a0:a5:ca:cf:62:31:ad:e3:67:e9:
c4:b2:b5:15:2f:38:f3:5d:12:8d:f2:cf:bd:3a:9e:
af:9f:19:2a:6f:6c:42:90:7c:74:bc:59:13:66:61:
7a:8f:6d:82:e5:1b:22:e1:5c:46:47:3f:d2:ba:12:
cd:10:60:a2:1e:a3:51:13:5a:ed:a2:b6:ee:a5:65:
4b:07:e2:d6:4e:cd:1c:0b:fa:23:44:7a:7f:d2:77:
8e:0b:65:11:bd:7b:b4:08:79:a5:6c:4c:e1:93:07:
aa:db:73:74:56:a3:3d:fe:89:b8:8f:3e:88:c0:7c:
41:dc:56:05:d3:dd:f3:41:84:36:36:2b:32:51:45:
6b:b9:66:7b:1a:f9:9b:8c:fa:0d:03:a8:c7:8c:43:
9c:4f:d4:15:fc:e2:a3:d6:e1:f6:53:21:76:17:b8:
29:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0E:2B:83:B3:A1:32:F7:C4:76:39:D8:B2:A1:EF:CB:E1:47:B3:33
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/FQ4rg7OhMvfEdjnYsqHvy-FHszM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f04b::/48
Signature Algorithm: sha256WithRSAEncryption
34:81:50:d0:02:1c:21:f7:07:4a:19:ea:4a:fc:62:d5:91:fc:
47:8d:58:fb:73:25:46:1f:35:09:44:02:5a:6d:b5:65:c6:6f:
b1:4d:e2:81:97:d3:0e:6a:74:87:38:b0:81:96:ae:16:2c:f1:
a4:db:b8:10:68:62:53:5f:ca:51:2a:88:b9:89:74:e6:53:b4:
c4:8a:94:87:99:bd:9d:b1:25:83:27:dc:ae:e7:b9:40:37:2e:
de:8a:2a:f9:9d:9e:db:19:6b:10:af:50:e1:1a:f2:a5:c6:09:
61:9e:1e:fc:c8:c7:f0:32:81:e2:81:b2:c3:a9:56:bc:d2:27:
31:91:f6:70:a4:8c:df:1a:5c:3a:ad:26:c7:72:4f:8e:20:f3:
dd:4b:ce:6a:8f:f5:4e:b3:7d:66:37:a4:a2:87:b3:bc:76:e1:
3a:95:25:69:38:75:40:b5:b4:02:d8:07:e1:88:0d:90:01:cc:
0d:7d:81:be:e6:b7:55:a7:c2:0f:af:eb:6f:cf:99:8f:c2:30:
57:a5:52:28:31:1a:13:c5:63:b4:c0:c2:c0:fc:f8:4b:38:39:
1f:c8:3f:1e:1c:75:7f:1e:67:4d:37:a0:f6:83:8a:3c:42:89:
bd:9e:7f:2a:4f:e1:ff:ac:b3:c1:a9:1d:3f:0f:56:e3:43:b8:
a9:b1:b2:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 15:02:18 2025 by rpki-client