Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FIL9xHcCqaTnSDdl05M_-0nKiXA.roa
File: FIL9xHcCqaTnSDdl05M_-0nKiXA.roa (raw, json)
Hash identifier: VBkjza2sT4RCxR2Qdw6kwg82prOHEx8E1MLQWYmxU5w=
Subject key identifier: 14:82:FD:C4:77:02:A9:A4:E7:48:37:65:D3:93:3F:FB:49:CA:89:70
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01963A78180D1652AE7089EABA1E55336C6B
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FIL9xHcCqaTnSDdl05M_-0nKiXA.roa
Signing time: Tue 15 Apr 2025 17:21:10 +0000
ROA not before: Tue 15 Apr 2025 17:21:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213542
IP address blocks: 2a09:17c0:8743::/48 maxlen: 48
2a0e:f600::/48 maxlen: 48
2a0f:1581:100::/48 maxlen: 48
2a0f:3d80:49ff::/48 maxlen: 48
2a0f:df45:25b::/48 maxlen: 48
2a0f:df45:fe5e::/48 maxlen: 48
2a0f:e7c3:1::/48 maxlen: 48
2a0f:ea43:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:78:18:0d:16:52:ae:70:89:ea:ba:1e:55:33:6c:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Apr 15 17:21:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1482fdc47702a9a4e7483765d3933ffb49ca8970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:85:74:8e:f5:ae:54:e1:83:a1:cf:88:bf:61:
34:ac:58:07:35:77:02:21:57:ed:2b:9d:33:b7:1d:
f5:a9:95:b5:09:ff:35:fd:51:43:75:53:80:3b:57:
99:35:80:0b:20:c5:d8:fb:24:0b:1d:f9:44:4c:c4:
ed:ac:2d:b6:67:2f:6f:f7:4d:05:0c:71:27:8e:10:
2d:89:cd:89:8b:68:97:65:b4:f5:5a:d0:5b:81:7f:
ca:6e:6b:18:9b:33:88:65:f1:ee:c3:b9:6b:48:33:
e6:c6:53:24:36:68:6b:80:6b:d3:2d:f7:1a:02:3f:
86:f1:85:a0:3e:61:75:d9:b6:64:4c:4f:d8:48:01:
6e:8b:04:4f:2a:46:85:0e:b2:8f:5d:7e:74:cb:db:
17:de:f6:14:dd:18:1f:34:28:2e:3d:ca:f1:08:70:
ba:4d:ed:71:5b:fa:24:6c:ab:0a:a8:57:ce:dc:f2:
b3:ff:59:ef:98:30:a6:ae:bd:8f:bf:38:42:0c:da:
f5:d4:42:a2:5b:29:54:bf:85:b3:56:4c:a3:ea:8e:
53:ac:19:b9:a8:65:14:07:2e:f5:1b:df:4e:83:86:
d6:13:ee:48:f2:53:96:05:7a:c9:8d:dc:0b:cb:91:
89:54:32:6f:70:a8:a5:ae:fd:65:f8:30:d1:59:f8:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:82:FD:C4:77:02:A9:A4:E7:48:37:65:D3:93:3F:FB:49:CA:89:70
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/FIL9xHcCqaTnSDdl05M_-0nKiXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:17c0:8743::/48
2a0e:f600::/48
2a0f:1581:100::/48
2a0f:3d80:49ff::/48
2a0f:df45:25b::/48
2a0f:df45:fe5e::/48
2a0f:e7c3:1::/48
2a0f:ea43:1::/48
Signature Algorithm: sha256WithRSAEncryption
44:b4:25:1a:7e:52:b7:51:ae:7d:0a:09:51:be:a6:18:2b:54:
00:15:64:77:a4:fe:9b:a3:a7:94:02:ca:6d:54:27:1a:36:49:
71:b1:b5:1b:3c:82:06:12:2a:8c:bc:21:ba:c6:53:cd:a6:d0:
14:07:34:8c:e7:0b:3a:27:50:db:1a:b1:39:ef:1a:46:8f:b8:
3d:bc:39:bf:59:c7:40:23:09:9b:b7:e0:77:c4:50:5e:de:77:
c6:5d:43:30:c3:81:ff:b4:62:64:4b:64:2d:ec:3e:4f:b6:bf:
88:a5:0e:b7:53:9e:9f:39:6b:ff:90:a1:2c:79:97:22:67:28:
93:73:80:67:b5:f4:2e:46:07:2d:ec:31:61:1c:5f:a9:f9:a0:
f5:4e:ec:d3:52:ac:84:ff:91:a8:c4:9e:63:70:bf:8d:06:9d:
e0:c8:72:ff:9e:01:41:8b:9e:92:a4:b2:0f:f7:3c:63:9d:04:
5a:46:5a:dc:7d:17:d8:66:a1:33:37:84:4e:29:62:c0:bb:8f:
97:bb:cf:1f:d2:65:3a:1f:3d:d4:2e:aa:80:40:53:89:9d:62:
ff:d4:8f:ad:a4:76:d8:9c:70:de:38:57:f1:dc:dc:1d:f9:ab:
bb:fd:e7:43:da:f0:fe:97:9d:ba:a3:02:02:a2:6b:18:af:f2:
b0:90:59:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 15:58:12 2025 by rpki-client