Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FK63OI1xMKypLJUjhawJk2wGpPQ.roa
File: FK63OI1xMKypLJUjhawJk2wGpPQ.roa (raw, json)
Hash identifier: I2TCJUyXSUIolPcRSsC5IaOierSmkgLW5vJsZ6rfk68=
Subject key identifier: 14:AE:B7:38:8D:71:30:AC:A9:2C:95:23:85:AC:09:93:6C:06:A4:F4
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 01941F8C4BD9B122FA81DB8407A234F7BCFC
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FK63OI1xMKypLJUjhawJk2wGpPQ.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61298
IP address blocks: 2a12:bec0:180::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4b:d9:b1:22:fa:81:db:84:07:a2:34:f7:bc:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14aeb7388d7130aca92c952385ac09936c06a4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:58:fe:74:59:c3:7a:51:10:a6:15:e5:81:b1:
8d:27:6d:e0:8b:52:a7:da:46:2b:a9:17:be:44:76:
eb:69:ee:f4:b9:6b:69:19:88:e8:98:e5:5e:47:3f:
59:15:e9:c9:6b:7a:8f:50:dc:ee:72:49:c9:f9:ea:
3f:a9:9d:70:e5:6c:ba:b6:e9:67:0b:f4:05:59:6f:
78:8e:5b:3f:ba:e8:f8:fc:bb:66:c6:5f:bd:db:eb:
c8:f1:fd:7a:94:31:26:98:e2:da:7a:ce:bf:a8:bd:
63:d0:fb:6d:88:f3:1c:7c:2c:2e:09:93:c7:81:ff:
eb:06:8f:a3:b8:b1:30:ca:d9:01:da:8f:2b:d1:d5:
1b:a3:02:2d:5a:54:90:9e:e1:88:bf:bb:0a:91:3e:
3f:69:82:a2:be:0e:aa:ff:4f:e1:1b:8f:0a:81:48:
04:ab:eb:40:99:60:66:1b:cf:21:db:af:1a:f7:57:
fc:5a:56:b1:55:e0:d6:13:d7:fd:22:10:06:ce:9e:
0d:48:c8:68:89:20:a5:8d:7c:a9:ae:6e:98:07:6b:
03:13:2b:a9:08:29:95:3c:68:95:b3:30:3e:b2:3e:
6c:ac:8a:3e:d0:86:b3:60:75:95:97:55:1f:4a:b2:
66:bf:ff:a7:e5:0e:17:ea:35:9c:4a:9a:e5:4e:c3:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AE:B7:38:8D:71:30:AC:A9:2C:95:23:85:AC:09:93:6C:06:A4:F4
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/FK63OI1xMKypLJUjhawJk2wGpPQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:180::/44
Signature Algorithm: sha256WithRSAEncryption
88:2a:f5:21:d9:76:10:09:0e:81:d4:dd:77:1a:48:c3:80:d9:
02:8a:3d:dd:1c:ab:de:90:23:6f:81:97:6a:1e:44:a0:ff:4e:
12:c5:1c:35:56:35:39:40:b6:09:1f:55:55:c4:b0:70:2c:4a:
a4:ff:5b:82:d6:13:71:08:e7:41:4c:7d:15:63:15:bd:1c:4b:
39:d7:e4:b0:62:70:e3:ba:86:e2:62:ba:f6:94:75:ba:a0:5e:
c2:47:f5:ea:ad:cf:0a:c4:2c:01:c8:fd:1e:c5:0f:7c:14:d5:
5b:62:05:38:50:91:d3:3c:ab:22:32:74:bc:af:28:5a:75:6f:
d0:f9:a2:1c:f3:0a:26:4c:c3:b1:4e:c4:a3:61:01:1b:6c:01:
82:23:44:8a:3c:62:7b:9f:6d:25:23:e0:57:ac:ff:4e:a9:68:
e6:4f:4d:46:b1:56:94:39:33:dd:90:79:8c:8a:95:de:0a:4f:
c5:68:99:ae:a9:c7:a5:d5:da:d4:32:3f:a4:46:3c:d4:02:b7:
be:f4:8e:bd:de:7a:11:53:0c:21:14:ac:4c:cc:19:71:7c:f2:
d1:1e:d7:b3:ef:f1:2a:46:45:86:14:10:67:fd:97:01:7f:cc:
c8:51:41:81:23:f4:c5:6f:69:b5:7f:3a:1e:ed:b3:99:26:33:
27:33:23:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:44:40 2025 by rpki-client