Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/FhZSLFV8-vM046QI8Vb33R1E0e8.roa
File: FhZSLFV8-vM046QI8Vb33R1E0e8.roa (raw, json)
Hash identifier: f3eqnqdq9rWk7n9nPOwGunFqubODgfs5rafbqH5/HQw=
Subject key identifier: 16:16:52:2C:55:7C:FA:F3:34:E3:A4:08:F1:56:F7:DD:1D:44:D1:EF
Certificate issuer: /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Certificate serial: 019423D6D418B5571077534992F902FA3080
Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/FhZSLFV8-vM046QI8Vb33R1E0e8.roa
Signing time: Wed 01 Jan 2025 21:47:48 +0000
ROA not before: Wed 01 Jan 2025 21:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202619
IP address blocks: 2001:67c:26f8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:d4:18:b5:57:10:77:53:49:92:f9:02:fa:30:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Validity
Not Before: Jan 1 21:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1616522c557cfaf334e3a408f156f7dd1d44d1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:60:42:39:42:5e:dc:87:b2:52:ee:df:cb:
7a:57:4f:fa:46:dd:3d:2a:8a:e6:f2:c2:4b:85:7a:
b2:ef:a5:4f:32:27:fe:1f:e4:c4:d0:21:0e:9f:97:
9a:71:94:4f:0e:2e:8f:2c:dd:3a:54:45:8b:b6:69:
27:d5:1c:43:0d:70:0f:0f:48:fc:76:f7:bc:ac:84:
8d:40:06:6c:9b:70:4a:dc:e2:49:fd:72:b4:aa:5a:
ac:a3:9b:98:73:5e:ff:c6:50:ce:e1:2b:d5:86:83:
a2:90:a1:fb:c4:ed:f7:fd:cf:1f:58:cb:f7:7c:97:
13:17:88:77:62:71:5d:67:8a:43:9a:47:5a:4e:9d:
2c:5d:ec:5a:1e:0a:5b:af:0a:fd:69:39:10:cb:49:
2d:4c:11:20:21:8e:c9:d5:77:31:a8:9b:ba:93:9b:
8b:8b:38:72:1f:6e:7a:3f:89:e5:ea:9b:a0:b0:ae:
f9:a0:b2:e8:b6:97:a0:5d:34:c1:71:f0:67:33:92:
2e:e7:cf:5e:df:a0:a5:0d:42:4b:93:db:78:73:ae:
db:f9:ba:e4:66:5e:6c:5e:40:e6:88:48:bb:6b:c0:
f7:af:f2:3c:51:50:3c:d5:21:94:4c:eb:4f:29:b8:
d1:27:a2:00:cb:31:a5:d8:41:d4:f1:8e:5d:41:17:
04:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:16:52:2C:55:7C:FA:F3:34:E3:A4:08:F1:56:F7:DD:1D:44:D1:EF
X509v3 Authority Key Identifier:
keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/FhZSLFV8-vM046QI8Vb33R1E0e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:26f8::/48
Signature Algorithm: sha256WithRSAEncryption
17:a1:9b:7f:24:e4:ee:7b:05:b0:72:3a:33:96:c4:ef:72:2d:
08:45:cd:05:42:59:fb:36:5b:a8:ec:cd:7f:4e:98:55:a2:b3:
91:73:a6:41:dc:6a:20:31:c3:e4:03:51:af:96:aa:8b:21:8c:
5c:c3:96:19:6c:8a:1d:25:c2:99:7c:7e:4b:56:90:32:2f:fb:
cf:5c:4d:dc:85:e2:83:91:a9:29:fb:2a:ac:d6:5e:fa:91:8c:
31:a3:59:50:04:7c:e6:03:9a:b6:3d:12:a4:01:29:7e:a7:87:
d8:47:87:cc:8a:3b:68:ba:e1:89:cd:95:67:1f:d5:f0:fb:5f:
58:8b:38:e5:93:25:6f:04:d7:55:83:9d:53:e1:7e:85:c4:03:
a0:42:e4:07:cf:3d:c2:a3:8c:e9:77:a4:62:ce:99:33:30:a0:
02:f0:36:fc:f0:c5:9c:93:f3:17:51:30:d5:3b:b7:d3:4c:0d:
d7:7b:88:9e:40:1c:b9:58:4d:51:bf:74:5a:26:86:3f:4b:80:
89:c8:8f:22:aa:94:9d:b0:0d:be:f4:ea:9c:4b:1d:f5:a6:c5:
15:82:c6:64:22:06:f7:d3:ae:66:56:a3:db:ff:5c:a4:3f:34:
cc:ae:74:82:35:25:9e:c8:ee:7a:d7:30:f5:da:66:43:2a:d2:
70:68:ae:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:37 2025 by rpki-client