Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1-7aN5Y6Foyja-HiqAj9gN6Rc6k4.roa
File: 1-7aN5Y6Foyja-HiqAj9gN6Rc6k4.roa (raw, json)
Hash identifier: jDZWxzV6WKasK/KOSHm608wpr9AiNLlJdvyr4xiSzWk=
Subject key identifier: FB:B6:8D:E5:8E:85:A3:28:DA:F8:78:AA:02:3F:60:37:A4:5C:EA:4E
Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Certificate serial: 01941FF9FF3F516AD1170D46AA4ECFE84B8C
Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1-7aN5Y6Foyja-HiqAj9gN6Rc6k4.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12389
IP address blocks: 2a04:c106::/32 maxlen: 32
2a10:d8c0::/32 maxlen: 32
2a11:b85::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:f9:ff:3f:51:6a:d1:17:0d:46:aa:4e:cf:e8:4b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbb68de58e85a328daf878aa023f6037a45cea4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0b:42:eb:4e:c7:93:d4:ad:05:fb:8d:20:83:
b4:1e:5f:c8:5b:81:dc:e8:e7:fc:e4:87:29:ca:28:
4a:ec:6d:49:2e:04:ec:7f:4a:f7:50:2c:55:63:e7:
a0:6a:a4:a8:7b:07:ca:b3:5c:d9:f9:2e:ca:19:6d:
8b:bd:dc:14:57:ae:ad:8f:a1:a9:c3:d7:a2:b1:1f:
d2:84:18:ed:c3:5a:18:c1:d5:ec:ad:0b:37:21:36:
f6:39:8d:3d:20:2e:77:2f:a0:a0:0b:de:9f:87:b7:
b6:76:30:a7:46:7e:cf:57:c8:d7:70:f0:82:07:41:
9b:57:82:76:a6:48:52:74:e7:a4:db:21:d5:3b:3c:
b7:7e:52:eb:3c:5d:7b:51:a4:af:ae:87:7b:a9:17:
3c:00:49:63:3d:29:b8:50:64:11:70:be:ba:0a:6e:
2b:ae:eb:ad:4b:22:29:53:42:19:d7:5f:8e:8c:83:
32:f6:61:c0:a1:2b:b1:9e:f7:d2:44:5d:0b:4d:77:
ca:e3:c1:9e:92:08:c0:71:61:f8:8e:a7:f3:dc:a9:
2c:62:44:ab:d2:4b:1c:ef:5b:5e:0a:6b:2f:32:48:
6b:7b:9c:bd:4c:50:2d:7b:83:b9:6e:4a:3e:7a:05:
04:b9:14:1d:ec:7b:b1:64:79:e7:45:1d:fb:34:c7:
bc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:B6:8D:E5:8E:85:A3:28:DA:F8:78:AA:02:3F:60:37:A4:5C:EA:4E
X509v3 Authority Key Identifier:
keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/1-7aN5Y6Foyja-HiqAj9gN6Rc6k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:c106::/32
2a10:d8c0::/32
2a11:b85::/32
Signature Algorithm: sha256WithRSAEncryption
8d:0d:ac:fb:ec:f3:8d:13:07:e5:fe:aa:f1:3f:e9:ad:63:00:
ff:b8:bd:56:b3:40:7c:17:58:11:68:90:f2:48:d4:9c:87:09:
20:aa:42:94:b7:57:08:8f:b6:aa:de:60:9c:ac:0d:0d:22:b2:
56:4c:04:50:d6:82:6b:58:54:52:a8:23:e4:c9:e1:0c:ce:df:
ab:14:e8:77:ff:6d:a1:e3:fa:da:14:48:fd:96:bf:00:62:e8:
87:80:12:08:e2:c4:82:9f:b8:a0:96:2f:16:32:04:03:a3:34:
d3:80:d0:d5:ff:b1:35:77:fe:83:dd:be:6f:0a:07:ed:9f:26:
04:90:bd:be:65:84:ec:27:eb:84:d5:d5:a8:93:3e:df:24:40:
61:2c:0e:fc:d4:c3:c6:d7:77:c4:38:5e:88:c6:32:7c:d7:04:
39:ee:29:ea:fc:97:d2:c5:98:3c:d3:b6:9f:73:65:76:c4:b5:
99:96:ab:f3:b1:80:05:83:92:a4:8e:46:01:a3:fd:07:01:93:
43:2a:a2:1c:d5:bc:01:8d:63:69:74:aa:67:6a:ab:e8:e1:08:
80:c6:2b:74:71:c3:93:4e:c0:b1:33:8b:e3:9d:9b:d8:a8:19:
fb:2a:0d:e1:d3:7e:74:55:e9:b5:98:37:9d:e1:82:26:77:b1:
cf:86:27:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:34:45 2025 by rpki-client