Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/FVwdutw7NFu1BbmJwTuCXcvc_14.roa
File: FVwdutw7NFu1BbmJwTuCXcvc_14.roa (raw, json)
Hash identifier: m5b5TQzeQb/gop0Hx8V4hVEc9cB9H3Vuqes4y1yEy8w=
Subject key identifier: 15:5C:1D:BA:DC:3B:34:5B:B5:05:B9:89:C1:3B:82:5D:CB:DC:FF:5E
Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Certificate serial: 01942747E12B5993579BDB283CCAC5DC9818
Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/FVwdutw7NFu1BbmJwTuCXcvc_14.roa
Signing time: Thu 02 Jan 2025 13:50:09 +0000
ROA not before: Thu 02 Jan 2025 13:50:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207616
IP address blocks: 2a04:ff00:101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e1:2b:59:93:57:9b:db:28:3c:ca:c5:dc:98:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9
Validity
Not Before: Jan 2 13:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=155c1dbadc3b345bb505b989c13b825dcbdcff5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ac:48:3f:06:3b:d5:68:f2:a6:19:bd:74:2f:
33:50:a9:7b:36:29:85:69:76:6a:7a:4d:39:01:64:
8c:94:20:03:e3:57:df:82:41:a7:10:56:89:f9:50:
b3:5e:89:8e:fa:a9:a7:e5:3c:46:7a:92:4d:86:d5:
a7:9a:a3:6d:1f:b8:d6:ff:3e:87:d9:2f:dd:27:88:
ec:db:f5:60:03:2b:88:6d:f2:ea:56:f3:a1:56:75:
28:69:3c:2e:71:53:47:40:fb:e5:24:11:4a:ef:df:
9a:74:55:b4:85:98:3f:ab:05:32:4a:dd:1d:b4:88:
eb:c0:2c:ae:cd:c0:e1:3e:90:8b:cd:63:e5:8f:07:
f7:c7:de:bc:13:a1:9a:34:2f:33:77:50:2a:e2:09:
96:f4:62:15:c4:53:4a:e5:96:9f:d4:83:04:c6:9f:
c4:26:e1:87:28:89:83:7e:2a:cf:3d:9f:b8:c7:78:
2b:72:81:63:40:1f:94:b9:a1:f4:95:8e:84:f9:82:
cc:da:4c:70:ce:5b:2c:75:a4:5a:68:4b:6d:c1:75:
47:bb:2d:29:ce:88:ab:7c:b1:7e:d1:50:3d:43:f4:
52:a8:72:49:6b:ee:1b:c3:31:d1:6b:96:df:d9:6d:
cf:77:e5:9a:f0:98:13:76:19:95:e8:ee:ad:ce:4f:
48:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5C:1D:BA:DC:3B:34:5B:B5:05:B9:89:C1:3B:82:5D:CB:DC:FF:5E
X509v3 Authority Key Identifier:
keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/FVwdutw7NFu1BbmJwTuCXcvc_14.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ff00:101::/48
Signature Algorithm: sha256WithRSAEncryption
34:83:45:f3:be:7e:f2:22:c5:c7:65:ac:e0:1c:89:76:15:52:
d3:27:ad:c6:76:f0:05:d4:0e:98:be:10:36:2d:d4:63:8d:bc:
10:e5:43:28:d4:e5:e4:75:79:4a:cc:3a:75:f3:c4:2a:5f:96:
d3:a4:64:fb:95:4e:6f:bf:fc:6e:c6:f7:1c:ec:93:b2:29:b5:
db:a6:43:90:41:82:36:9c:fa:3f:2f:6b:93:ef:18:3e:07:04:
cc:a8:13:79:18:cd:47:66:1e:93:aa:3f:cb:2d:41:c4:14:3c:
12:f5:3b:16:71:6d:fc:c0:78:91:a4:7b:f2:2b:2f:23:14:93:
8e:e6:2c:e9:e7:f7:26:90:66:f0:23:68:8b:fc:e9:82:4a:ad:
3a:04:34:b5:6c:bc:94:48:69:01:72:96:9a:f9:ef:9b:a5:07:
6f:e9:52:f6:13:d1:78:da:f6:51:35:74:56:da:58:07:f6:b1:
67:7c:8e:aa:12:ec:c7:b3:54:f7:2a:d0:92:43:c5:39:a4:d5:
28:23:a6:bf:ab:55:83:92:aa:90:4e:48:a6:5b:da:15:33:16:
d8:f5:f4:85:62:72:95:25:fd:7a:84:5c:80:3a:a3:98:58:f0:
30:db:1a:32:4a:5c:92:4a:d3:57:90:77:0d:67:59:66:e6:4c:
02:7a:33:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:43 2025 by rpki-client