Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/FIF6mjIjRWT5SS7m8A6SC0XW270.roa
File: FIF6mjIjRWT5SS7m8A6SC0XW270.roa (raw, json)
Hash identifier: le9oplmZoqUEh6w8LPvC5vUImP/20WTi6YYgZ3H7Gho=
Subject key identifier: 14:81:7A:9A:32:23:45:64:F9:49:2E:E6:F0:0E:92:0B:45:D6:DB:BD
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018CC424676AAE0F9CB9953576775C2CB0AB
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/FIF6mjIjRWT5SS7m8A6SC0XW270.roa
Signing time: Mon 01 Jan 2024 08:29:29 +0000
ROA not before: Mon 01 Jan 2024 08:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216354
IP address blocks: 2a0f:7803:fec0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:67:6a:ae:0f:9c:b9:95:35:76:77:5c:2c:b0:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 08:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14817a9a32234564f9492ee6f00e920b45d6dbbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:88:a8:35:17:75:ed:d1:0e:14:59:5f:f4:4c:
db:05:68:d1:85:66:d6:99:78:43:a9:5f:70:df:4a:
04:45:58:21:2b:aa:f0:85:a8:ee:c0:eb:0c:e4:58:
3f:95:dc:84:e2:42:60:b5:e4:76:57:53:15:e4:2e:
18:1f:d0:03:84:c8:d7:ce:12:91:cd:c5:bb:37:58:
c7:cc:8d:60:62:fe:41:02:bd:4e:90:49:da:17:75:
52:af:0f:de:6d:fd:60:09:25:41:e1:0d:67:99:1a:
60:b0:79:3e:a0:68:49:d6:00:65:36:d9:92:0c:7e:
4a:66:36:0b:21:d8:91:c8:81:3c:b6:a2:d6:eb:df:
80:7d:d6:e6:76:28:28:18:ef:a2:1d:fb:52:73:1a:
7c:a6:19:48:93:ac:1e:0f:b2:7d:00:e1:d4:9f:67:
f0:df:a8:8c:df:33:94:84:c8:92:20:1f:9a:a9:c0:
fe:a8:d9:e1:ce:ec:98:50:6b:68:fa:ad:86:fb:82:
f2:1e:3b:22:75:b4:c7:8b:ca:35:66:bc:ce:72:b4:
49:23:44:96:f7:45:6d:23:60:5e:d1:1e:ef:05:55:
58:c4:40:36:f6:e1:26:3f:1d:82:cf:0b:6f:ca:e1:
26:eb:8d:a1:aa:2b:6a:09:bc:14:82:e9:ff:ad:98:
8e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:81:7A:9A:32:23:45:64:F9:49:2E:E6:F0:0E:92:0B:45:D6:DB:BD
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/FIF6mjIjRWT5SS7m8A6SC0XW270.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fec0::/44
Signature Algorithm: sha256WithRSAEncryption
24:0e:20:34:48:03:7f:82:ca:52:0a:83:a4:ed:cf:3f:79:b6:
5f:31:e7:bd:3a:b5:0c:77:5a:c0:0e:67:73:fa:52:1d:48:3d:
b1:ca:e5:4d:f8:81:08:78:2b:5c:f0:15:20:00:33:a2:c0:e5:
47:3f:dc:5e:88:78:b3:b6:07:3e:f6:4e:32:2a:75:36:56:63:
a7:af:96:f8:00:82:7c:f6:0e:8a:ab:18:5d:7f:2b:45:02:1d:
76:13:ae:00:03:f2:65:f5:ce:d2:77:6f:ae:1d:d8:79:8c:32:
53:73:40:24:07:db:e4:d9:69:f1:3f:42:b6:f6:67:fd:c9:0e:
34:ff:8f:fc:86:f6:ed:84:b8:6e:45:ba:f0:f0:21:99:da:8b:
35:14:44:58:b1:7d:82:37:85:f5:3e:8d:a6:c2:96:a9:0b:1c:
5c:2e:9b:21:82:bd:36:49:28:41:09:7d:57:a7:1f:2d:03:87:
ae:43:1f:fd:a3:6c:71:0d:8c:4e:7b:fe:2e:be:ce:ed:9e:06:
8d:a6:b0:20:6f:17:cf:87:47:24:96:ac:8a:d5:65:d0:30:31:
95:2e:fe:75:b7:61:8e:6b:ed:6b:77:88:38:85:9c:4c:67:e0:
9a:cf:58:2f:21:41:de:00:fb:0a:10:36:c6:0b:5e:43:9b:0f:
8a:01:7a:0b
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzEJGdqrg+cuZU1dndcLLCrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmY2VhZDM5MDYyNWVkYmExNDA4MTA4ZGY1N2NlYTQ3MTYw
ZDcwZTUwHhcNMjQwMTAxMDgyOTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNDgxN2E5YTMyMjM0NTY0Zjk0OTJlZTZmMDBlOTIwYjQ1ZDZkYmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhoioNRd17dEOFFlf9EzbBWjRhWbW
mXhDqV9w30oERVghK6rwhajuwOsM5Fg/ldyE4kJgteR2V1MV5C4YH9ADhMjXzhKR
zcW7N1jHzI1gYv5BAr1OkEnaF3VSrw/ebf1gCSVB4Q1nmRpgsHk+oGhJ1gBlNtmS
DH5KZjYLIdiRyIE8tqLW69+AfdbmdigoGO+iHftScxp8phlIk6weD7J9AOHUn2fw
36iM3zOUhMiSIB+aqcD+qNnhzuyYUGto+q2G+4LyHjsidbTHi8o1ZrzOcrRJI0SW
90VtI2Be0R7vBVVYxEA29uEmPx2CzwtvyuEm642hqitqCbwUgun/rZiOHwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFBSBepoyI0Vk+Uku5vAOkgtF1tu9MB8GA1UdIwQY
MBaAFM/OrTkGJe26FAgQjfV86kcWDXDlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYt
ZjViNmE3MThmNGI1LzEvRklGNm1qSWpSV1Q1U1M3bThBNlNDMFhXMjcwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNS9jNDY0N2EtNjA0Mi00ZmU4LWEyNzYtZjViNmE3MThmNGI1
LzEvejg2dE9RWWw3Ym9VQ0JDTjlYenFSeFlOY09VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg94A/7A
MA0GCSqGSIb3DQEBCwUAA4IBAQAkDiA0SAN/gspSCoOk7c8/ebZfMee9OrUMd1rA
Dmdz+lIdSD2xyuVN+IEIeCtc8BUgADOiwOVHP9xeiHiztgc+9k4yKnU2VmOnr5b4
AIJ89g6KqxhdfytFAh12E64AA/Jl9c7Sd2+uHdh5jDJTc0AkB9vk2WnxP0K29mf9
yQ40/4/8hvbthLhuRbrw8CGZ2os1FERYsX2CN4X1Po2mwpapCxxcLpshgr02SShB
CX1Xpx8tA4euQx/9o2xxDYxOe/4uvs7tngaNprAgbxfPh0cklqyK1WXQMDGVLv51
t2GOa+1rd4g4hZxMZ+Caz1gvIUHeAPsKEDbGC15Dmw+KAXoL
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:27:27 2024 by rpki-client on console-ams.rpki-client.org