Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/FYVKqcf4TLt5l_nECN8Q3YrnHV8.roa
File: FYVKqcf4TLt5l_nECN8Q3YrnHV8.roa (raw, json)
Hash identifier: wVS2RJnxIK54lkzq6flASzNiEFd2go/wiBjtoCVLPnw=
Subject key identifier: 15:85:4A:A9:C7:F8:4C:BB:79:97:F9:C4:08:DF:10:DD:8A:E7:1D:5F
Certificate issuer: /CN=e1584910124af776e30e5acf055d6bae1761a536
Certificate serial: 01942825E0956DDD0467A8F5250AE0B7BFB7
Authority key identifier: E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/FYVKqcf4TLt5l_nECN8Q3YrnHV8.roa
Signing time: Thu 02 Jan 2025 17:52:38 +0000
ROA not before: Thu 02 Jan 2025 17:52:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 2a13:3c0:1::/48 maxlen: 48
2a13:3c0:2::/48 maxlen: 48
2a13:3c0:3::/48 maxlen: 48
2a13:3c0:5::/48 maxlen: 48
2a13:3c0:6::/48 maxlen: 48
2a13:3c0:7::/48 maxlen: 48
2a13:3c0:8::/48 maxlen: 48
2a13:3c0:9::/48 maxlen: 48
2a13:3c0:10::/48 maxlen: 48
2a13:3c0:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:e0:95:6d:dd:04:67:a8:f5:25:0a:e0:b7:bf:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1584910124af776e30e5acf055d6bae1761a536
Validity
Not Before: Jan 2 17:52:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15854aa9c7f84cbb7997f9c408df10dd8ae71d5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:a9:e1:c5:87:cd:f6:f2:6f:f4:9a:b8:bd:
6e:bc:04:a4:b8:4a:49:3f:7e:c9:ca:5a:fc:37:b7:
c2:b1:bf:bd:74:ba:e3:47:31:fa:7d:f9:64:27:85:
61:5d:4f:e7:49:b9:3b:8e:2f:1e:57:7e:de:bd:bb:
e4:f5:e3:dc:48:c1:a0:ec:d8:99:ca:fd:8b:07:0d:
71:09:77:18:f3:2b:35:b1:d3:2b:c3:99:1d:b3:12:
f6:1e:02:5e:c2:a1:df:5d:56:15:0f:b2:49:a2:1f:
2f:25:13:71:5d:55:52:d4:aa:ee:cd:b1:61:e9:57:
9d:40:eb:a4:3f:8c:7c:d3:72:d0:24:93:c8:6e:ea:
86:36:cc:84:2c:ef:89:bf:01:18:d0:4b:50:01:66:
5c:01:c6:21:41:2f:89:c1:ae:e2:fb:b5:25:90:59:
8f:9c:9f:c0:b8:90:b3:7a:1e:99:55:cf:3f:05:c5:
31:68:a8:5e:c0:d7:9c:cd:26:d7:08:f6:12:6a:42:
5f:89:0c:19:21:b8:ce:8f:a0:43:63:4e:0b:25:ff:
56:22:34:16:3d:f7:dd:eb:18:89:c3:fb:e2:dc:5c:
a7:16:a2:0b:1f:9d:fd:d4:6b:01:b8:af:52:bb:8b:
7b:ae:d6:07:56:4a:d5:fd:03:51:8e:b0:96:f8:1e:
0d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:85:4A:A9:C7:F8:4C:BB:79:97:F9:C4:08:DF:10:DD:8A:E7:1D:5F
X509v3 Authority Key Identifier:
keyid:E1:58:49:10:12:4A:F7:76:E3:0E:5A:CF:05:5D:6B:AE:17:61:A5:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4VhJEBJK93bjDlrPBV1rrhdhpTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/FYVKqcf4TLt5l_nECN8Q3YrnHV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/7215e0-9ab8-4a13-a605-31ab32ff7c68/1/4VhJEBJK93bjDlrPBV1rrhdhpTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:3c0:1::-2a13:3c0:3:ffff:ffff:ffff:ffff:ffff
2a13:3c0:5::-2a13:3c0:9:ffff:ffff:ffff:ffff:ffff
2a13:3c0:10::/47
Signature Algorithm: sha256WithRSAEncryption
23:e3:35:07:75:35:38:fe:3d:b5:2b:be:d4:57:30:21:dd:13:
e3:15:cf:99:7f:58:93:0b:a2:a9:0d:35:6a:0c:77:86:ed:82:
7c:7a:1c:86:7a:91:fe:0d:73:f4:db:9c:cf:49:aa:6e:b6:e5:
b0:0c:b4:69:6c:fd:35:46:a3:ee:1f:a2:84:24:d9:77:ee:b8:
44:65:c1:11:2a:27:6c:fb:41:e4:42:42:74:e3:96:c7:55:be:
54:dc:d9:c8:cf:49:d8:0f:bf:96:63:da:79:21:46:83:5b:1d:
a1:cb:54:10:69:7a:ef:49:bb:03:f8:73:77:0f:03:01:13:e9:
76:6d:c0:92:03:be:ec:e7:cf:37:75:53:69:c0:2d:94:78:12:
b7:02:8a:24:d7:d8:bd:04:01:c8:2d:10:59:9d:f4:c2:62:ce:
06:58:d8:d3:12:f7:2f:f8:03:c9:3f:20:d4:86:a4:67:9d:fb:
f8:8b:4e:89:a7:ca:7b:8d:66:06:b6:ea:f6:06:22:de:4f:8f:
ca:e0:ff:5a:7a:1d:49:cd:90:63:eb:43:59:70:6a:b4:0d:3a:
db:4e:c2:94:ce:a2:0c:b2:23:43:56:b2:97:be:ed:40:34:72:
04:96:29:cd:f0:de:1f:d6:21:10:b3:ba:24:a6:bd:f2:b0:26:
8d:db:05:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:35 2025 by rpki-client