Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fxbboUgWTe7bt2NQsHYT6Ld9iT8.roa
File: fxbboUgWTe7bt2NQsHYT6Ld9iT8.roa (raw, json)
Hash identifier: 2S2V5T20cFwrtXS50a3stvQvnPZoGPxy9VpFHGqCU70=
Subject key identifier: 7F:16:DB:A1:48:16:4D:EE:DB:B7:63:50:B0:76:13:E8:B7:7D:89:3F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425221338A227CB437CCD186B1BF7B460
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fxbboUgWTe7bt2NQsHYT6Ld9iT8.roa
Signing time: Thu 02 Jan 2025 03:49:37 +0000
ROA not before: Thu 02 Jan 2025 03:49:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203691
IP address blocks: 2a0e:b107:1c0::/48 maxlen: 48
2a0e:b107:1c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:13:38:a2:27:cb:43:7c:cd:18:6b:1b:f7:b4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f16dba148164deedbb76350b07613e8b77d893f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a8:65:3e:71:85:ee:26:ba:63:05:69:c9:31:
ff:24:e2:29:26:8f:24:4f:12:58:5f:6e:53:93:bd:
06:f5:c9:63:1e:a2:8d:79:4b:89:c0:2c:61:4f:c9:
0c:c7:6c:fa:87:cc:50:62:c7:e1:85:89:38:e5:dd:
7b:53:b5:5b:b3:96:15:33:93:83:08:af:af:26:42:
71:13:41:b0:92:36:10:46:a7:09:2c:4c:2e:20:7e:
0d:7a:97:73:b2:7a:49:61:01:78:40:ee:72:c4:54:
7d:ec:19:80:0d:5a:16:52:d7:cf:1c:99:76:8d:b7:
9c:93:6e:94:09:04:56:62:18:cc:f4:9d:1f:27:83:
06:d3:ba:97:a2:e9:e4:d9:a4:7d:fc:00:71:1b:4b:
d7:4a:56:6a:62:13:66:a4:a2:93:a2:94:95:5e:12:
fc:ba:75:9f:08:a8:5e:8e:a4:2e:21:17:0a:76:16:
da:6e:19:93:c4:07:33:16:be:f5:38:5a:94:4a:47:
c0:82:bb:0b:c4:a5:ea:6c:36:8b:e9:49:38:79:d5:
4a:94:cc:e2:a7:57:a1:4c:81:f6:a7:b1:d7:40:48:
fd:48:8d:ba:e5:2a:72:64:4a:61:10:b0:97:e3:08:
3f:0d:83:f5:8c:a6:1b:0f:49:e3:bf:39:a5:7e:c3:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:16:DB:A1:48:16:4D:EE:DB:B7:63:50:B0:76:13:E8:B7:7D:89:3F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fxbboUgWTe7bt2NQsHYT6Ld9iT8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c0::/47
Signature Algorithm: sha256WithRSAEncryption
bf:29:5f:52:6d:c6:47:a9:51:1e:f8:97:2a:1d:56:47:45:8e:
3f:d4:cc:70:ed:82:e3:e7:5d:16:12:66:65:68:d7:64:f5:1e:
b4:1c:38:52:d9:23:d4:f0:74:36:de:eb:33:32:4c:0f:da:81:
69:d7:d5:10:51:0f:a4:0d:cb:19:15:9e:2c:d1:f6:d7:1e:0c:
1c:05:c0:7f:53:1d:35:b6:c3:af:43:e7:b1:09:e2:c0:52:15:
6b:fc:21:2f:1f:fb:8f:d2:75:ab:1c:5b:26:3b:b6:6a:97:88:
be:b4:2f:fb:60:f2:bb:52:bf:7b:15:4f:94:6e:b5:8e:9d:8f:
ef:c0:61:7a:45:e3:b1:20:69:01:55:b0:f1:a8:b4:74:1f:14:
2f:9e:8b:f5:f5:45:b3:94:46:f5:1b:28:9b:6d:73:eb:04:3b:
70:01:a2:ba:38:87:45:c6:0f:31:41:92:f8:b3:e0:e6:77:9c:
ea:45:43:ec:96:bc:6d:9b:3b:09:b1:24:7f:98:e5:04:bb:16:
d6:6b:5d:11:c9:38:9e:04:db:bb:5b:44:88:35:f0:f4:e1:b8:
0e:f3:d3:b0:c3:9c:1e:99:d1:94:38:88:24:67:ae:5b:50:09:
c6:2e:ce:84:71:f0:fa:47:78:90:42:a5:4a:b3:30:8f:ef:97:
1f:74:7c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 19:28:26 2025 by rpki-client