Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/fbcwD46wBu3sV2waymycL7HBw0w.roa
File: fbcwD46wBu3sV2waymycL7HBw0w.roa (raw, json)
Hash identifier: E3BtypHTqPSP3fsYXZp+1pYUiJsd9n+waXNonMlRW68=
Subject key identifier: 7D:B7:30:0F:8E:B0:06:ED:EC:57:6C:1A:CA:6C:9C:2F:B1:C1:C3:4C
Certificate issuer: /CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Certificate serial: 018CC2DAE3928BEA0ECDD608BB8A4A98AFE7
Authority key identifier: FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/fbcwD46wBu3sV2waymycL7HBw0w.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206013
IP address blocks: 2001:67c:10e4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e3:92:8b:ea:0e:cd:d6:08:bb:8a:4a:98:af:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffe4146018a763a42a51556359bf15bf85e39ac6
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7db7300f8eb006edec576c1aca6c9c2fb1c1c34c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:68:72:23:d4:2a:71:69:9d:61:7e:06:fd:a9:
c5:bf:ed:62:90:9e:7d:53:ca:71:2a:f3:5b:6c:1c:
11:3c:eb:b8:ed:df:54:3d:71:78:63:c9:18:8b:67:
99:8a:27:49:12:e4:4e:02:7e:e5:de:82:6b:d7:e9:
6b:b5:0d:54:7a:2d:99:72:1e:66:10:4b:34:00:92:
72:88:2f:fc:7b:fc:8f:98:63:c7:ca:8b:63:d6:f0:
3d:0a:f8:e4:f3:2a:0f:9f:35:5a:8d:81:f9:8b:e4:
94:69:8d:da:50:57:7a:3f:8c:10:79:69:cb:9a:01:
e2:c7:95:3d:43:09:01:cc:2f:22:fd:18:45:d0:e2:
d2:c3:20:f5:50:b7:4d:20:5b:38:58:09:7e:02:b4:
83:46:59:dd:22:dd:b1:43:bc:eb:70:5f:4d:a6:b6:
ef:c1:ea:35:d7:d6:6a:5c:60:fe:74:46:49:9c:a0:
8b:ce:fb:f1:cb:c5:36:b4:b7:2c:17:e7:0f:e7:0c:
fa:c7:af:de:ee:cc:6b:ff:7b:ba:f0:30:91:6c:f4:
da:0f:a8:eb:ce:9d:83:a9:10:30:81:93:ba:ab:d9:
fa:55:18:3d:a7:ef:a9:e1:40:71:8b:b0:d5:f7:f1:
db:62:50:75:29:4b:ad:d4:05:e4:82:11:de:fe:2e:
cf:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B7:30:0F:8E:B0:06:ED:EC:57:6C:1A:CA:6C:9C:2F:B1:C1:C3:4C
X509v3 Authority Key Identifier:
keyid:FF:E4:14:60:18:A7:63:A4:2A:51:55:63:59:BF:15:BF:85:E3:9A:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_-QUYBinY6QqUVVjWb8Vv4XjmsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/fbcwD46wBu3sV2waymycL7HBw0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/220113-44f1-4dc5-b0bc-a656058c531f/1/_-QUYBinY6QqUVVjWb8Vv4XjmsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:10e4::/48
Signature Algorithm: sha256WithRSAEncryption
10:17:7b:84:b2:ef:78:63:5f:40:de:37:b3:9f:5f:da:48:61:
c2:91:90:2d:23:c5:d0:1a:f6:c5:68:01:fd:c0:ea:97:dd:00:
dd:8b:7a:7f:da:f9:c5:b8:67:93:5f:21:c0:fd:d9:5a:4f:36:
f7:7d:39:55:f7:9b:a7:9d:67:e8:cd:5a:2f:8f:0d:9f:69:fe:
ec:4a:50:55:f1:1c:c9:06:fe:b1:3c:61:e8:91:00:00:64:d3:
d5:54:d2:6b:46:ce:b3:e5:23:8b:1c:9e:d1:0a:48:58:26:72:
07:a3:32:03:b5:31:3f:22:8f:74:9c:25:c9:fe:a0:f8:67:38:
21:04:f0:d0:cb:4d:95:1e:8a:7d:7a:24:13:b9:2f:10:b9:6e:
f2:d0:25:23:be:be:2a:8b:6a:7b:d1:a1:eb:20:20:5a:bb:ac:
74:9a:12:03:e0:eb:c7:30:b1:d4:40:33:83:58:63:b2:f2:11:
5d:5c:ce:93:73:6b:1f:33:f9:2b:6f:e4:4c:f4:13:e8:e9:5f:
7b:a9:21:9b:45:29:f8:fa:23:5b:77:42:05:7b:55:29:94:32:
c1:02:07:dc:28:56:8d:ed:e1:a3:ce:d3:e7:f4:ed:89:59:c2:
dc:29:dc:a3:c6:30:64:f9:9d:cf:83:c1:d1:be:8f:20:b4:6b:
8f:a5:30:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:56:26 2024 by rpki-client on console-fra.rpki-client.org