Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/FICKnMTDt6RllV7DRYxFFl_kXjI.roa
File: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (raw, json)
Hash identifier: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=
Subject key identifier: 14:80:8A:9C:C4:C3:B7:A4:65:95:5E:C3:45:8C:45:16:5F:E4:5E:32
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 019424B2750DD4235D1FE1A24B1C18DE66B7
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/FICKnMTDt6RllV7DRYxFFl_kXjI.roa
Signing time: Thu 02 Jan 2025 01:47:42 +0000
ROA not before: Thu 02 Jan 2025 01:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137
IP address blocks: 149.132.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:75:0d:d4:23:5d:1f:e1:a2:4b:1c:18:de:66:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Jan 2 01:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14808a9cc4c3b7a465955ec3458c45165fe45e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:bf:59:53:ee:6c:f1:17:7c:5a:66:72:d1:
af:bd:2c:4f:df:1e:89:d5:dc:f7:3e:f4:c4:db:4c:
e0:e9:50:99:b9:4c:f2:eb:b7:b8:67:2e:a2:93:fc:
e7:dd:9d:b0:80:4a:81:11:d6:78:3b:85:54:7a:35:
91:1b:b9:d2:4c:26:4e:c6:74:2c:4f:c5:e9:27:7d:
95:62:e7:56:f3:3c:22:a7:0b:de:20:74:0d:a2:07:
0f:ba:c8:47:49:11:fa:34:39:b4:7e:ba:e9:84:79:
87:64:22:3c:ed:77:a9:0d:76:90:10:60:a8:aa:9d:
bc:ad:e8:a4:36:ff:c4:0c:7d:1a:9f:4e:62:4c:2c:
a4:21:e0:85:90:f1:aa:14:d4:81:9e:f8:3b:4f:b8:
a4:91:1c:a0:10:ea:47:ad:10:79:e4:fb:a9:04:60:
64:cf:09:c2:78:96:27:49:4d:b5:06:b5:73:df:43:
b3:cc:0a:e0:20:0d:9f:c5:b8:ac:2f:f5:c1:6f:2e:
5a:df:05:d9:41:e0:ab:64:fb:5b:40:2e:fb:ec:a4:
52:fe:d7:f3:d3:44:ef:d6:07:f1:fb:66:c0:cf:ac:
d3:94:90:cd:fc:10:58:ff:ec:af:65:c8:9c:d7:99:
db:3f:7b:b0:69:dd:70:95:c5:57:4b:73:93:4a:e8:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:80:8A:9C:C4:C3:B7:A4:65:95:5E:C3:45:8C:45:16:5F:E4:5E:32
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/FICKnMTDt6RllV7DRYxFFl_kXjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.132.0.0/16
Signature Algorithm: sha256WithRSAEncryption
7c:f4:1c:b7:ce:6f:d2:d2:cb:4b:ab:ef:49:89:70:d4:7b:f7:
7c:eb:3f:3e:bf:a3:bc:04:e8:ec:fe:9a:1e:e6:24:72:1d:dd:
a6:5c:1f:11:8b:00:d7:6c:bf:25:39:75:24:29:7f:be:84:17:
c8:88:fb:e1:53:3f:55:20:aa:f7:1f:0c:03:dd:17:48:7e:00:
97:d3:a8:d7:7b:94:12:80:2e:0d:a4:52:d1:9f:43:62:72:b3:
f3:11:df:97:4a:59:89:ab:d9:90:ee:86:55:80:b9:3a:dd:99:
16:e6:a1:5d:24:b8:25:aa:6e:5b:82:59:78:7c:e8:99:f0:f9:
0b:ff:45:91:bb:a9:02:82:94:c3:0d:42:08:ba:46:c2:30:72:
f7:fb:c6:95:0e:dc:42:ec:6d:42:08:63:b3:41:8a:ff:88:0b:
34:51:02:a2:56:af:44:a7:00:dc:1d:8d:9b:02:02:8c:cc:7c:
58:74:4c:e3:9a:77:0d:19:29:4f:57:80:30:84:7c:53:d1:11:
94:b5:32:0b:97:bb:81:76:27:a4:61:8a:a1:8d:f4:50:30:01:
34:aa:77:52:83:5f:77:c3:81:b1:ba:3d:7d:4d:89:68:70:8a:
cd:8a:df:8a:d9:6b:19:c5:ee:bd:0a:48:f3:02:94:e9:0f:8c:
74:ec:29:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:38:02 2025 by rpki-client