Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fxjbXiQopGh2dFNHIaQjTBB2yBg.roa
File: fxjbXiQopGh2dFNHIaQjTBB2yBg.roa (raw, json)
Hash identifier: DU25H22qdkXIZDY5pOy01vClUGuiFGzP/r6X76y/Iz0=
Subject key identifier: 7F:18:DB:5E:24:28:A4:68:76:74:53:47:21:A4:23:4C:10:76:C8:18
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019425223133B05C6E79A24E4148BB289C89
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fxjbXiQopGh2dFNHIaQjTBB2yBg.roa
Signing time: Thu 02 Jan 2025 03:49:45 +0000
ROA not before: Thu 02 Jan 2025 03:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208753
IP address blocks: 2a0e:b107:381::/48 maxlen: 48
2a0e:b107:382::/48 maxlen: 48
2a0e:b107:383::/48 maxlen: 48
2a0e:b107:384::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:31:33:b0:5c:6e:79:a2:4e:41:48:bb:28:9c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f18db5e2428a4687674534721a4234c1076c818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:43:1a:1d:8e:2c:49:9a:24:cb:43:4f:e3:
71:a6:32:e1:1c:af:24:16:d5:ce:63:db:e6:02:d7:
4a:84:0c:6b:c4:4d:35:83:45:5e:5b:b4:01:5a:8d:
74:22:8e:52:38:ba:6d:a9:ea:79:71:df:89:d9:c6:
44:98:62:3d:33:ec:e5:61:75:a2:69:3d:c9:ae:d6:
fd:6c:9f:99:bd:d9:5a:52:29:95:b0:c3:5f:e7:8c:
12:49:6b:bb:40:e0:51:3b:73:28:37:a9:1b:cf:c3:
5a:34:59:54:f1:91:ce:ca:f6:59:89:f7:9c:3b:28:
49:09:ce:99:8c:30:ad:1b:d8:1f:4d:cf:30:e1:3e:
10:08:e8:25:36:d7:8b:f1:e1:d3:c9:46:33:1e:e1:
57:e6:c8:41:05:a5:a4:01:e9:d5:94:f3:fc:67:a7:
f6:64:29:33:4f:9a:8e:03:2c:7e:eb:f3:6b:b8:4b:
cf:f2:03:af:06:42:ac:40:ca:af:2a:76:93:0b:78:
3a:a5:64:e1:cf:ac:70:fb:85:03:47:07:52:b3:55:
ee:6e:ea:a8:9d:34:5f:00:a3:4f:d8:bf:6e:1c:96:
32:5f:a3:1b:2b:a1:f5:d6:08:28:51:de:bb:80:2f:
60:17:d2:31:8d:8f:25:81:57:f1:a8:1f:6d:8d:68:
f0:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:18:DB:5E:24:28:A4:68:76:74:53:47:21:A4:23:4C:10:76:C8:18
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fxjbXiQopGh2dFNHIaQjTBB2yBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:381::-2a0e:b107:384:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
a8:63:fa:6b:d6:75:2f:b4:06:fc:15:57:3e:64:41:f5:f2:1b:
c6:d1:ff:a9:01:46:85:fe:66:44:90:48:5d:a6:47:06:05:9d:
cc:6b:0c:01:56:cf:89:84:f1:ec:3e:b7:a0:61:42:db:9f:6c:
98:ce:dd:c6:ca:3d:a4:f2:e6:17:ee:14:4d:7a:44:72:66:f5:
9b:bf:12:16:df:ba:bb:18:e3:e9:48:28:68:50:8f:67:43:9f:
15:64:da:d5:a1:29:2e:15:49:40:c9:2f:28:2c:a4:71:f3:1a:
46:ac:c8:ba:f9:de:d2:e3:3b:ce:64:20:a8:e3:74:59:88:90:
9f:d6:7d:0d:70:1d:5f:17:f6:8b:30:dc:6c:fa:35:d9:fd:ec:
3c:4d:5c:4a:32:7a:cd:e8:3e:45:0a:1b:22:db:3f:7f:ba:33:
25:6b:30:e7:d8:d9:b7:bb:cc:86:a2:de:67:d4:11:cd:e6:73:
45:1b:1b:60:a3:1f:c8:ae:7a:71:98:56:9a:e5:68:be:03:04:
1c:a0:64:98:f2:c8:b3:6e:60:16:18:76:77:31:8d:09:3c:73:
0e:9e:4c:15:c5:65:8c:4e:8a:34:9d:76:93:59:eb:64:b4:71:
c4:3a:6f:bf:18:a9:07:6e:ed:e8:42:70:ad:f8:ed:c6:f6:68:
b7:5c:0d:b1
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Mar 15 07:41:36 2025 by rpki-client