Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/fcBtCebpi-4K7X5NIslu13uDUsk.roa
File: fcBtCebpi-4K7X5NIslu13uDUsk.roa (raw, json)
Hash identifier: NUsnoh1mbJaQ/OI9xchtIzhWSkl4onfdWCVKXM/qj88=
Subject key identifier: 7D:C0:6D:09:E6:E9:8B:EE:0A:ED:7E:4D:22:C9:6E:D7:7B:83:52:C9
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B6856876C8C5E97BB84D445209930A
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/fcBtCebpi-4K7X5NIslu13uDUsk.roa
Signing time: Thu 02 Jan 2025 15:51:00 +0000
ROA not before: Thu 02 Jan 2025 15:51:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61580
IP address blocks: 2.22.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:85:68:76:c8:c5:e9:7b:b8:4d:44:52:09:93:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:51:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dc06d09e6e98bee0aed7e4d22c96ed77b8352c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:52:9b:42:de:44:bc:47:0e:da:32:5b:f0:fe:
55:cf:f4:b7:21:0c:bf:7e:f6:5a:73:b8:00:6e:f8:
09:20:c1:46:da:60:5d:06:8b:87:1c:4a:ce:00:81:
da:5b:0c:a3:ea:0a:38:87:db:9c:50:5e:01:d3:11:
b8:d4:4b:be:fd:01:e6:1f:ec:0a:e8:6a:a0:fc:5e:
22:ae:52:9a:ad:3d:91:96:93:8c:22:dd:41:bd:c4:
46:5c:f1:2d:47:a1:f2:58:20:e5:52:e3:40:0d:98:
a0:f0:44:c6:f7:89:79:95:45:4b:0f:8a:a6:63:89:
92:33:6a:e2:95:26:65:93:ab:a5:03:63:17:df:d7:
88:66:7d:15:4d:3e:4f:36:bf:87:36:1c:77:5e:e2:
31:0a:60:69:6a:c7:c3:3c:29:cc:8c:6e:3e:87:e9:
d9:5c:80:fe:f2:b4:c4:e9:0d:60:5c:c9:d7:f8:64:
61:0e:e3:cd:b4:e4:a8:37:b1:55:ed:80:c7:81:e4:
5c:1c:cc:fe:be:74:87:6a:37:2e:5c:44:07:8b:6b:
42:24:c8:06:0a:5d:05:a3:f3:94:db:cd:0f:a4:5d:
27:82:94:3b:cb:87:19:d5:c6:f8:50:43:56:1f:34:
db:1c:5f:37:22:d8:38:a1:9c:24:97:42:32:23:bd:
23:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C0:6D:09:E6:E9:8B:EE:0A:ED:7E:4D:22:C9:6E:D7:7B:83:52:C9
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/fcBtCebpi-4K7X5NIslu13uDUsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.22.51.0/24
Signature Algorithm: sha256WithRSAEncryption
02:c1:71:83:d8:99:fe:54:07:cb:b7:c1:bc:59:f0:5b:6f:23:
fd:f7:a7:b5:ed:41:45:11:ff:2f:1e:c6:87:b5:c7:c1:47:b1:
d2:28:e1:f2:10:81:90:7b:14:d4:4e:ad:d0:07:7c:83:c7:87:
ee:b8:2c:52:a7:9e:54:26:38:0a:de:dc:c9:c6:26:07:16:b0:
87:31:6a:13:fe:df:c3:fc:51:95:31:12:74:39:ff:d2:f1:c1:
1b:6e:e7:25:d9:48:8d:5e:49:89:89:4f:eb:a9:29:22:21:a2:
99:d4:e0:55:8e:76:37:8b:5d:1e:ec:23:83:ad:33:2e:fe:b8:
24:08:1e:5b:33:f8:1e:df:9d:87:4f:70:82:2d:c8:52:8d:58:
61:03:9d:28:17:7a:6c:b6:d1:77:42:0d:fa:ea:ac:54:03:e1:
cc:a6:41:27:17:99:eb:93:8c:30:1e:d5:bd:c9:4f:6c:2e:4a:
67:04:0b:99:e7:1d:ce:66:4b:01:03:3e:af:e0:05:a9:0a:a5:
2a:23:45:cc:2b:49:7c:04:01:bc:aa:11:80:9d:d7:07:08:7e:
2a:3d:4f:a6:1a:b5:c9:25:74:00:d5:22:b8:52:e3:96:86:4b:
5a:e0:c8:8a:fa:57:a7:b0:2b:04:4b:2d:08:dc:b3:88:9a:e6:
37:87:69:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:10:39 2025 by rpki-client