Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/f9FMqbsGCQTR2I_pSghMmyxXvQo.roa
File: f9FMqbsGCQTR2I_pSghMmyxXvQo.roa (raw, json)
Hash identifier: z+cFX5s0n92Drw/RVVSHwoX4sUW+bw76H7mDsPuHcRQ=
Subject key identifier: 7F:D1:4C:A9:BB:06:09:04:D1:D8:8F:E9:4A:08:4C:9B:2C:57:BD:0A
Certificate issuer: /CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Certificate serial: 01942747C3E43708E0EE2A48679C6DDDF418
Authority key identifier: C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/f9FMqbsGCQTR2I_pSghMmyxXvQo.roa
Signing time: Thu 02 Jan 2025 13:50:02 +0000
ROA not before: Thu 02 Jan 2025 13:50:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203478
IP address blocks: 2a05:b0c6:600::/48 maxlen: 48
2a05:b0c6:642::/48 maxlen: 48
2a05:b0c6:653::/48 maxlen: 48
2a05:b0c6:688::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:c3:e4:37:08:e0:ee:2a:48:67:9c:6d:dd:f4:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c228348e9054973d7a5f8193bd4e5c44f67399e1
Validity
Not Before: Jan 2 13:50:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fd14ca9bb060904d1d88fe94a084c9b2c57bd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:81:4d:dd:cc:f7:8f:5a:6c:aa:ac:f3:56:1b:
ca:ea:64:80:0f:4d:d9:b7:4e:72:9a:b7:43:1c:aa:
1c:70:61:4f:d0:88:66:5d:b3:23:90:60:5d:d7:cb:
19:7f:10:38:b2:ce:8e:d6:63:68:a1:de:1f:bc:bf:
ee:df:28:4c:80:9a:84:6f:3f:92:a2:bc:5b:aa:72:
91:fe:d0:01:c4:3a:5a:02:4c:43:6d:97:56:e7:62:
88:ba:15:e6:6d:e8:ea:65:b5:97:50:72:43:90:e4:
1e:0d:60:2a:e2:ba:5e:fe:03:48:01:5f:cf:bf:8b:
91:58:44:71:a7:b0:80:47:78:f9:99:20:76:ec:49:
fc:d2:b4:71:ae:45:98:78:9d:25:3a:6b:70:35:32:
ab:2b:f9:e1:01:a7:6f:ba:be:5e:00:4e:e8:5a:b9:
03:d8:89:97:ab:a4:fd:dc:38:16:16:b3:79:8d:44:
06:f4:69:87:38:5c:2b:f3:11:13:e5:7a:e5:7f:0b:
5d:f5:5c:85:eb:9c:48:64:f5:d5:ec:f3:3a:72:4d:
15:dc:da:73:20:ff:77:a6:dd:b4:ab:f5:64:d2:b1:
7b:bb:09:6c:cc:19:77:ea:a0:ec:1f:b6:0c:55:83:
85:b9:9b:3a:bb:b3:2b:8e:26:bb:8d:5d:d9:b8:7c:
c5:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D1:4C:A9:BB:06:09:04:D1:D8:8F:E9:4A:08:4C:9B:2C:57:BD:0A
X509v3 Authority Key Identifier:
keyid:C2:28:34:8E:90:54:97:3D:7A:5F:81:93:BD:4E:5C:44:F6:73:99:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wig0jpBUlz16X4GTvU5cRPZzmeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/f9FMqbsGCQTR2I_pSghMmyxXvQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/f16794-91ad-4984-9c6c-e88fff82d553/1/wig0jpBUlz16X4GTvU5cRPZzmeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:b0c6:600::/48
2a05:b0c6:642::/48
2a05:b0c6:653::/48
2a05:b0c6:688::/48
Signature Algorithm: sha256WithRSAEncryption
0f:be:66:51:ce:45:7f:12:d5:99:1d:14:60:6b:cd:b8:eb:43:
db:73:32:13:f1:fe:bc:58:22:e6:33:f8:84:a0:ab:79:46:ce:
bf:bf:db:d0:8f:1a:df:29:d5:7e:e6:11:18:fe:39:08:73:78:
b9:94:e5:e5:23:57:db:62:69:2b:b6:f2:1f:a7:33:f5:bd:a8:
f4:47:8c:ca:43:d6:11:8b:81:6c:86:62:df:c3:ef:c7:c5:50:
72:66:d5:37:b1:80:75:50:63:05:fe:54:1d:fc:9e:b5:04:f5:
23:13:12:af:3f:d2:a8:54:ab:16:cd:c6:f4:91:9a:20:a7:b1:
b6:8d:87:f2:54:7c:c4:ce:14:d6:f2:3a:1b:bf:08:a4:76:49:
e2:d0:74:2e:04:ca:cb:23:ba:be:98:4f:3a:c7:5b:09:63:bb:
d9:6a:e7:28:70:9a:cd:48:69:2d:ee:da:5d:6b:1d:6d:49:2f:
04:98:92:79:66:22:e4:da:a4:33:fc:8f:fd:1a:fc:59:36:c4:
db:63:6a:6f:3a:6a:67:94:35:29:f5:82:94:4f:d1:da:c3:a1:
1c:e8:59:f3:e4:ef:b6:4b:da:e7:21:26:df:d9:ad:6c:62:de:
69:51:c0:22:60:9b:98:3a:ca:30:ae:a7:7d:07:af:49:ed:dd:
51:23:53:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:22:23 2025 by rpki-client