Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa
File: FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa (raw, json)
Hash identifier: Xc41MAtSc+ruCG6VKyrq0wjruSgKp5EwL1g2WUQj6WQ=
Subject key identifier: 14:15:F4:17:23:C1:7E:03:39:4B:0B:D2:69:6B:77:F8:D7:FE:DD:48
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 019421B20B2C729A588ED8AC7FB2C7B3E63B
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa
Signing time: Wed 01 Jan 2025 11:48:23 +0000
ROA not before: Wed 01 Jan 2025 11:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50345
IP address blocks: 2001:67c:1058::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0b:2c:72:9a:58:8e:d8:ac:7f:b2:c7:b3:e6:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Jan 1 11:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1415f41723c17e03394b0bd2696b77f8d7fedd48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:e1:19:e4:4d:6a:45:1f:e8:db:88:0d:b2:d0:
fa:e4:a5:40:2b:7c:36:b9:8f:e8:18:d0:c9:4a:95:
79:f6:60:ba:88:58:0d:80:78:3d:7c:a5:65:79:e3:
2d:b5:11:3a:b1:43:ff:51:af:8a:93:55:ad:63:04:
59:2c:b7:1e:08:98:c4:7f:17:56:43:8d:91:4d:46:
87:92:a4:10:a0:11:53:a4:1a:11:e7:2a:ed:8c:c3:
97:d0:88:0f:e5:d1:e8:95:ad:f7:f4:d5:be:85:c1:
29:55:cf:05:bc:09:90:d4:a1:ba:05:43:f1:40:06:
40:7b:86:ee:f9:ad:a8:a6:b0:cd:e8:c2:c6:99:61:
e7:73:20:e6:d4:98:4c:0e:b7:35:61:09:4d:09:23:
ce:c0:e4:08:20:da:3a:5b:67:cd:ac:0b:cf:4e:6a:
53:be:41:b3:4f:25:41:fb:b8:df:34:ac:72:62:3e:
93:45:35:e1:78:ea:9f:9c:f4:1e:7c:96:35:0e:6e:
3f:cd:de:1e:d9:3e:4c:3d:2c:3c:4f:e7:7d:99:ce:
21:d1:e7:65:eb:bb:f2:c6:0a:6b:50:f5:83:ee:01:
ab:c4:00:65:0d:30:cc:d7:72:9e:68:0d:eb:a2:d7:
2f:a6:fa:2c:f2:4f:64:7e:0d:0f:b6:5a:9a:72:5f:
2e:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:15:F4:17:23:C1:7E:03:39:4B:0B:D2:69:6B:77:F8:D7:FE:DD:48
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/FBX0FyPBfgM5SwvSaWt3-Nf-3Ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1058::/48
Signature Algorithm: sha256WithRSAEncryption
2a:d8:43:da:5b:d6:72:7d:c6:5f:2c:ab:b6:e2:94:3d:74:0e:
5e:ef:77:8f:4c:68:6e:25:9c:8f:21:24:b7:4a:7d:91:16:1a:
e9:a9:83:a6:0e:c9:db:88:80:5d:b8:79:92:63:0b:51:78:b4:
03:97:05:8c:be:e4:98:0e:2b:9f:76:ff:99:b5:50:d5:62:9e:
6b:a9:b0:3a:10:5c:11:20:9f:bc:89:fe:2d:73:0d:2e:3b:60:
c5:91:04:dd:b6:94:53:19:60:bc:1c:ba:3a:a2:03:8f:ec:08:
c4:f5:ef:6a:7f:f0:d4:b8:8b:d9:22:29:e4:36:f5:75:9e:87:
51:f9:91:5c:8f:b0:1c:d4:6e:f4:d7:09:02:15:74:6a:d0:f3:
77:e7:00:fe:55:e0:20:dc:ad:5f:1e:e7:cf:6c:8e:17:98:53:
f9:6a:92:0d:13:e5:12:7e:11:52:c4:42:b8:3a:04:16:95:a5:
e5:68:37:12:7d:ed:33:d8:f0:85:d5:ae:08:df:79:29:4c:e4:
01:ad:e6:3a:bb:c1:31:8d:08:12:08:2a:60:1e:7c:20:e7:e2:
f7:22:56:8a:02:74:38:be:c1:d9:ee:2d:90:55:11:fb:eb:2c:
7f:12:66:51:68:55:f8:c9:55:52:b8:28:5b:93:42:41:61:fc:
8c:06:44:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:41 2025 by rpki-client