Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa
File: FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa (raw, json)
Hash identifier: bwymb63cONmt/c+6ZDVkw7Ek8DpIFx336RD8V0Gt1oQ=
Subject key identifier: 14:3C:57:F5:20:70:8B:A6:44:DC:C2:5E:3A:F8:3B:91:BE:E4:2B:7F
Certificate issuer: /CN=9a8c329d8763c29f29931abbb8195f975038298b
Certificate serial: 0194228D22869332CC75F0B740023B9F4C80
Authority key identifier: 9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa
Signing time: Wed 01 Jan 2025 15:47:42 +0000
ROA not before: Wed 01 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214030
IP address blocks: 2001:67c:f34::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:22:86:93:32:cc:75:f0:b7:40:02:3b:9f:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a8c329d8763c29f29931abbb8195f975038298b
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=143c57f520708ba644dcc25e3af83b91bee42b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0d:4c:1f:ab:7d:b7:90:94:45:a7:98:b1:8e:
db:a4:18:65:0c:0d:33:e5:66:37:9d:79:3c:00:f6:
73:92:f8:a7:21:2c:60:5b:06:4c:dd:06:9c:82:7d:
20:52:b9:44:48:a4:69:3b:6a:90:cf:5c:f8:5a:1b:
24:e9:9b:83:0d:ae:71:78:c5:c5:3a:f7:76:07:fc:
04:0f:43:ac:76:38:c4:e4:c3:b5:16:d5:98:36:09:
88:cc:12:e5:a0:e7:ea:6f:84:c6:94:17:ff:6e:f3:
96:e4:52:10:ef:e3:91:f5:96:20:ac:7f:13:fd:60:
d1:9e:6e:bd:73:e0:ee:9f:47:e9:45:56:32:1b:51:
4f:f6:21:df:ae:82:e5:8e:60:32:fe:24:b6:28:0a:
74:f9:6c:1d:55:07:d8:10:37:32:75:9f:ee:2d:c7:
1f:37:a5:2e:ec:8f:ae:a3:58:a2:6d:49:f3:30:22:
0f:1a:fd:09:5e:c0:27:80:b6:83:11:c0:f7:96:7c:
3f:32:c2:f2:e7:bc:43:88:cc:50:44:4a:36:b4:6e:
71:fe:bc:2f:61:3a:20:f1:88:2f:0d:14:91:fb:f8:
9a:6d:b4:81:93:7d:d1:f3:c0:4e:c5:c4:df:81:19:
b6:47:79:e2:27:2c:8d:7d:99:6a:21:57:7e:f8:d8:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3C:57:F5:20:70:8B:A6:44:DC:C2:5E:3A:F8:3B:91:BE:E4:2B:7F
X509v3 Authority Key Identifier:
keyid:9A:8C:32:9D:87:63:C2:9F:29:93:1A:BB:B8:19:5F:97:50:38:29:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mowynYdjwp8pkxq7uBlfl1A4KYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/FDxX9SBwi6ZE3MJeOvg7kb7kK38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0cd949-f4b7-48d9-a0c6-fda8a13ca1d7/1/mowynYdjwp8pkxq7uBlfl1A4KYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:f34::/48
Signature Algorithm: sha256WithRSAEncryption
c1:83:76:da:c1:8e:05:5d:ed:61:ab:a9:68:56:67:60:31:6b:
b8:93:cd:74:33:ec:9b:90:5c:7b:34:a8:39:83:62:bc:46:6b:
10:a6:ca:b6:45:b8:db:c8:b9:c6:35:dc:ce:60:2f:ea:07:06:
eb:27:77:20:9b:21:db:3f:96:77:46:43:29:c7:7d:f5:c7:1c:
51:0f:5b:fc:5f:e6:d3:23:61:5a:57:ed:46:da:cc:ef:50:1a:
23:0d:be:b1:15:98:8c:49:2d:08:bf:f8:7a:62:18:d6:e1:67:
a8:95:88:a2:0b:4c:ce:c2:e1:33:c5:65:0c:34:20:30:cd:67:
21:d1:0c:b0:f5:e9:24:db:c9:aa:f0:a8:31:6d:79:47:98:db:
d8:7c:2a:ce:38:a0:82:6e:fc:2e:00:fb:5d:1a:a0:92:4f:97:
eb:5a:58:e4:49:11:51:0a:14:fd:17:02:f2:68:54:b4:a8:cb:
ae:fd:b4:c1:30:58:87:24:1b:6b:7f:f5:f2:b5:38:1a:de:fb:
dd:78:c4:19:bc:e6:a3:17:b3:13:04:47:e6:c7:24:b4:9d:57:
e0:d1:ca:bc:e2:04:33:e6:5a:85:d2:01:e9:7a:7f:26:95:69:
0f:34:d7:f7:63:a7:ba:3c:cf:99:61:7a:ab:13:b3:a0:af:68:
19:7b:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:04:11 2025 by rpki-client