Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/X_b5fRlGB5_ZGnavxwWcohLpdb8.roa
File: X_b5fRlGB5_ZGnavxwWcohLpdb8.roa (raw, json)
Hash identifier: NV/i40dbe/RWF5a3GR2TEqHnwJD/Zk1jQKUldDbbe6A=
Subject key identifier: 5F:F6:F9:7D:19:46:07:9F:D9:1A:76:AF:C7:05:9C:A2:12:E9:75:BF
Certificate issuer: /CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Certificate serial: 019422FAF5FA72450AF2823C65D569FD95B3
Authority key identifier: FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/X_b5fRlGB5_ZGnavxwWcohLpdb8.roa
Signing time: Wed 01 Jan 2025 17:47:39 +0000
ROA not before: Wed 01 Jan 2025 17:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a0a:4540:220::/48 maxlen: 48
2a0a:4540:1000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 17:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fa:f5:fa:72:45:0a:f2:82:3c:65:d5:69:fd:95:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbac50f19d9930aeec09cd27f508fc502ea14d1f
Validity
Not Before: Jan 1 17:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ff6f97d1946079fd91a76afc7059ca212e975bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:a2:42:1f:1b:ae:36:eb:b6:90:05:89:95:
e7:54:16:08:81:e2:8b:6a:e1:b6:d0:b1:10:f6:85:
ef:ba:39:a5:3c:b9:ea:5e:9b:64:3b:a6:74:4e:14:
92:d8:45:21:03:c4:5a:69:34:cd:f7:24:e1:49:5b:
a1:69:00:aa:9e:b7:2e:9b:f2:32:84:c3:93:31:5d:
9f:ea:84:f7:85:5d:dc:52:fd:e2:26:58:40:97:74:
b5:a0:32:d7:76:79:b8:00:ab:d9:02:e8:e5:95:1e:
ba:30:15:18:af:bc:a7:06:fa:da:06:7b:e1:9f:0e:
6c:7a:7c:43:a4:de:fb:9a:9a:29:8c:06:50:71:87:
90:75:ad:00:be:8f:2e:bd:ee:09:b4:db:3d:28:4f:
16:e4:dd:ec:d6:d3:03:9a:83:05:b4:6e:fe:78:c8:
a3:f7:86:99:40:8d:da:39:f7:9d:34:51:e2:96:25:
88:4f:36:0c:38:8e:85:5f:f5:9f:4f:21:1f:20:34:
0f:59:d1:46:6a:be:5f:ca:aa:77:ec:fd:17:7b:7e:
14:d1:60:d2:92:75:86:98:a6:c8:5a:26:49:af:bc:
f7:7e:33:fa:f5:04:66:07:07:60:a3:81:ab:0d:45:
ca:88:08:5f:57:6e:b7:4e:1f:e6:e5:d6:77:a5:7d:
1c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:F6:F9:7D:19:46:07:9F:D9:1A:76:AF:C7:05:9C:A2:12:E9:75:BF
X509v3 Authority Key Identifier:
keyid:FB:AC:50:F1:9D:99:30:AE:EC:09:CD:27:F5:08:FC:50:2E:A1:4D:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/X_b5fRlGB5_ZGnavxwWcohLpdb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/8fc09d-7d25-425c-8b91-d62e454bf37f/1/1-6xQ8Z2ZMK7sCc0n9Qj8UC6hTR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:4540:220::/48
2a0a:4540:1000::/48
Signature Algorithm: sha256WithRSAEncryption
7e:47:c0:74:70:87:5e:d9:74:8a:30:ee:7d:43:4a:84:d8:06:
7f:3f:7c:c8:3d:39:34:73:15:de:d9:5b:7b:ce:db:a1:23:94:
d2:c4:53:39:64:30:74:95:9e:27:cf:22:ed:7d:9c:27:6c:7d:
5a:86:c2:24:08:36:44:a4:a6:35:b2:98:cb:83:2c:bc:3e:cf:
82:e0:17:2d:b0:f5:3f:70:d5:d2:26:76:1a:74:88:b4:51:8f:
48:d6:9b:59:6b:3f:40:71:f7:17:e0:d7:b5:96:12:20:0a:c1:
1c:75:33:e9:57:8e:ff:4d:6f:c3:a4:43:e6:21:9f:ca:19:99:
12:dc:76:e1:79:71:e4:a5:33:73:b0:6d:89:e3:d5:97:a4:e7:
c2:09:ea:cd:b5:2c:6e:3e:60:4d:c1:c1:7d:e2:b7:01:f2:df:
f7:1f:34:a0:fd:d3:e1:8d:d1:fb:5d:91:87:4b:7d:dd:f8:8a:
83:5e:bb:15:65:8e:6f:e9:c2:82:8c:7a:c3:24:5f:c4:aa:0a:
92:05:c2:cd:74:c1:e8:d7:ae:b8:3d:2f:8f:46:41:44:9e:39:
b6:0f:45:26:68:b9:99:40:b9:78:61:f8:ce:80:b1:5d:10:66:
01:a3:df:af:78:4c:d9:e0:bd:06:52:48:98:33:0e:a8:88:9f:
67:7d:f0:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:54:19 2025 by rpki-client