Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa
File: FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa (raw, json)
Hash identifier: hGmrJi+yEKxJpja/Xd3IRoZdFVQbXeFaYaTLWxmyBv0=
Subject key identifier: 14:A5:FA:8B:A2:F3:24:64:1C:88:9A:7A:1E:5B:33:73:B2:9A:D9:70
Certificate issuer: /CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Certificate serial: 01942368EE3D0617C20AD3081DCC1D8E9B35
Authority key identifier: 67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa
Signing time: Wed 01 Jan 2025 19:47:46 +0000
ROA not before: Wed 01 Jan 2025 19:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 553
IP address blocks: 141.62.0.0/16 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 13:16:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:ee:3d:06:17:c2:0a:d3:08:1d:cc:1d:8e:9b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67f51a25d2f3922524a6a69b1d7d61cd3cc2a8da
Validity
Not Before: Jan 1 19:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14a5fa8ba2f324641c889a7a1e5b3373b29ad970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a4:44:26:44:e6:6b:c2:c4:fb:5a:b3:bb:e0:
68:ad:a1:70:62:69:3d:d7:52:b3:2e:18:a7:75:e6:
1e:67:e5:cc:04:7d:e2:a9:c5:d3:1d:b7:fc:a8:63:
d6:3e:7b:a2:ae:71:65:32:76:4c:3c:8b:27:f3:4b:
64:dc:95:c6:d1:64:31:42:de:56:47:ce:46:58:c1:
5a:db:f1:50:34:ec:02:0a:0b:43:46:ba:a4:33:b4:
32:cc:3c:3f:4f:8c:8e:f4:7f:17:6c:0e:9d:df:96:
c1:66:2a:8d:9b:cc:77:09:f6:de:d2:cb:b1:9f:68:
5b:05:12:f0:07:8d:48:52:43:74:b4:0e:7b:45:cc:
47:6f:19:9d:5b:d6:ec:da:41:5e:ca:36:18:f0:67:
22:3e:24:58:d3:9c:41:8d:e7:22:8e:08:10:12:94:
ec:91:28:8d:81:ee:b1:7e:4c:07:7e:9c:44:c0:2d:
ee:36:2e:c1:a0:37:3d:09:66:52:22:85:42:81:f6:
ee:ff:52:45:64:74:9c:1a:ea:c1:b9:54:34:2f:0f:
5d:82:36:54:cc:73:db:fa:dc:3c:91:25:8d:c7:57:
6a:e8:57:6e:43:f9:f9:58:de:8b:da:17:e6:1b:c1:
dd:98:d7:46:14:b9:db:a1:b3:e8:3d:63:37:c8:9e:
ea:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A5:FA:8B:A2:F3:24:64:1C:88:9A:7A:1E:5B:33:73:B2:9A:D9:70
X509v3 Authority Key Identifier:
keyid:67:F5:1A:25:D2:F3:92:25:24:A6:A6:9B:1D:7D:61:CD:3C:C2:A8:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z_UaJdLzkiUkpqabHX1hzTzCqNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/FKX6i6LzJGQciJp6Hlszc7Ka2XA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/544c39-0ef7-41ab-b156-5626b54d1a21/1/Z_UaJdLzkiUkpqabHX1hzTzCqNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.62.0.0/16
Signature Algorithm: sha256WithRSAEncryption
42:68:cb:40:ac:8c:b3:86:c4:dc:b3:6e:75:46:0b:83:93:7a:
bf:79:24:27:eb:b6:34:d9:bc:a6:a0:f2:1d:a6:22:39:5f:43:
74:58:7a:b1:30:f7:7c:04:09:94:d4:61:48:4b:a2:5b:cb:6d:
d5:5d:8d:9f:08:53:3d:6e:67:a5:f4:c2:44:cb:fa:26:df:37:
e9:fa:9c:b5:13:08:86:69:25:66:a3:a2:9a:dd:77:5d:99:c0:
24:98:a1:0e:ac:cb:ad:91:44:74:dc:34:11:fb:31:eb:55:25:
91:13:8d:08:7a:44:bb:d2:64:dc:a6:4b:d1:a7:84:90:fd:50:
0f:0d:60:41:59:84:6f:af:44:29:fc:e6:a1:f7:d6:48:16:13:
a5:47:9f:0b:58:69:59:76:19:37:01:25:72:ec:1d:39:89:ff:
c0:c1:37:0e:c6:07:7a:39:d7:c4:6f:7f:b0:7e:41:4e:cd:62:
f0:71:48:e7:63:2e:e8:61:f8:2a:72:4d:20:95:73:82:c8:75:
29:aa:ec:15:f3:cf:b6:b7:b4:d4:ce:a1:75:70:ec:01:b7:48:
a0:6d:a6:3e:a0:64:38:b8:a6:21:23:96:16:f1:76:c0:a0:31:
be:f2:58:1f:f9:82:f0:52:dd:e7:6c:72:eb:43:f9:85:11:d9:
47:70:3e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 05:46:28 2025 by rpki-client