Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/FNcoFmyMsrmKFW3pVuTLoiKb9Y0.roa
File: FNcoFmyMsrmKFW3pVuTLoiKb9Y0.roa (raw, json)
Hash identifier: L2M1ZIYqNE7da9VzHmMG0LiaV1K9e8NQgXmk4Xn6knE=
Subject key identifier: 14:D7:28:16:6C:8C:B2:B9:8A:15:6D:E9:56:E4:CB:A2:22:9B:F5:8D
Certificate issuer: /CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Certificate serial: 019421B1FDFD414533AC8A99F918557CF227
Authority key identifier: 3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/FNcoFmyMsrmKFW3pVuTLoiKb9Y0.roa
Signing time: Wed 01 Jan 2025 11:48:20 +0000
ROA not before: Wed 01 Jan 2025 11:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211146
IP address blocks: 2a0b:f500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.mft
rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:fd:fd:41:45:33:ac:8a:99:f9:18:55:7c:f2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ea99f00000beeb9f1b2854ba50ec7b88126dba9
Validity
Not Before: Jan 1 11:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14d728166c8cb2b98a156de956e4cba2229bf58d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:b3:d9:76:65:d5:f1:7c:08:b5:f6:38:0f:b4:
bb:0c:3e:ab:45:ae:8c:a3:3c:f5:17:c8:a6:ea:6d:
cf:88:90:34:08:9e:3b:f9:2b:5a:4d:0f:6e:b2:58:
98:0b:da:59:64:a9:11:13:b9:73:3d:b3:49:a4:ae:
ce:14:08:ec:8f:97:b8:26:44:28:39:a6:fe:09:d6:
69:2c:79:42:f7:0c:25:7e:61:83:56:9f:5d:5c:6f:
69:08:8f:37:26:89:de:ee:2e:8d:81:f5:41:0e:3c:
c3:6f:e3:f8:23:56:71:ae:0d:a5:36:83:9b:0c:8e:
e0:6a:5d:1b:dd:74:ad:9b:51:97:88:46:7a:00:69:
e9:b5:8f:9e:e9:54:45:1a:69:1b:36:b1:82:fa:77:
d9:89:ad:8a:56:ae:8d:c0:a8:27:15:71:06:cc:51:
2c:42:2f:eb:a3:88:80:b7:0e:04:29:80:44:8e:c3:
51:e5:bb:0b:67:11:98:f4:d9:38:2b:6b:17:b9:96:
61:28:05:e4:01:b4:03:9c:8f:2e:cb:ea:8e:de:8f:
b3:8a:64:25:0c:35:24:11:94:1e:43:ab:a3:7e:17:
da:d0:ac:4d:7b:99:52:86:24:4c:58:43:d7:e4:0f:
86:b7:6a:60:b1:b5:d7:cb:8f:79:58:38:a5:1f:ca:
c2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D7:28:16:6C:8C:B2:B9:8A:15:6D:E9:56:E4:CB:A2:22:9B:F5:8D
X509v3 Authority Key Identifier:
keyid:3E:A9:9F:00:00:0B:EE:B9:F1:B2:85:4B:A5:0E:C7:B8:81:26:DB:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PqmfAAAL7rnxsoVLpQ7HuIEm26k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/FNcoFmyMsrmKFW3pVuTLoiKb9Y0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/581e68-4d45-40eb-89d9-8816fba8be12/1/PqmfAAAL7rnxsoVLpQ7HuIEm26k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:f500::/29
Signature Algorithm: sha256WithRSAEncryption
7c:5d:9f:43:22:5d:07:f4:b2:f8:fb:6a:b9:a0:de:df:92:e5:
f9:bd:98:7f:62:51:15:12:c2:43:ab:f4:b6:7f:f3:09:c4:8c:
8e:ef:a4:bd:4d:3a:0a:b4:c7:c5:08:cc:e1:a9:39:25:45:0e:
f0:c0:80:20:22:dc:51:4e:e7:c0:84:12:46:9a:75:71:02:f0:
74:63:df:7e:74:f7:a9:87:23:e0:e9:cf:84:5d:5c:b6:66:a6:
39:b2:7b:c1:84:36:41:44:ad:ee:a1:03:91:17:cf:ff:bf:87:
de:f8:3e:d6:49:1a:65:dd:d6:f0:69:eb:e7:ef:78:9f:26:6d:
0c:48:be:73:3a:08:3a:dd:94:4d:d4:b6:39:ca:9b:87:f1:88:
61:26:5e:45:d4:ea:66:32:7d:00:9b:7c:13:ef:65:86:fd:86:
1a:ac:24:48:1d:1f:b5:a8:62:ff:5d:3f:1f:e5:20:56:d9:b7:
56:9a:59:e6:95:02:60:d7:cb:f6:c4:4d:00:33:b0:33:31:96:
e6:11:f0:ca:8a:d5:15:48:21:aa:62:67:7b:6c:9d:ad:48:44:
75:59:03:04:5c:64:33:7f:09:65:db:7e:a3:6f:c5:53:1f:e8:
46:d7:38:1d:ea:11:d6:e0:8a:a9:b9:50:66:96:c5:7f:6b:bd:
6e:db:08:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:35:01 2025 by rpki-client