Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/Fe73gwKx3TfChZQCePRdIEAemH0.roa
File: Fe73gwKx3TfChZQCePRdIEAemH0.roa (raw, json)
Hash identifier: qBzf7ILpA60OZzhZbHEoimpJXoZWWGpm51oGlU43AdU=
Subject key identifier: 15:EE:F7:83:02:B1:DD:37:C2:85:94:02:78:F4:5D:20:40:1E:98:7D
Certificate issuer: /CN=0fdee7944ac4da3111295d81e29deba00c163a96
Certificate serial: 01941FFA3CFADDA28512BD2B0A06E3E947CE
Authority key identifier: 0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/Fe73gwKx3TfChZQCePRdIEAemH0.roa
Signing time: Wed 01 Jan 2025 03:48:00 +0000
ROA not before: Wed 01 Jan 2025 03:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199249
IP address blocks: 2001:67c:12bc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3c:fa:dd:a2:85:12:bd:2b:0a:06:e3:e9:47:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fdee7944ac4da3111295d81e29deba00c163a96
Validity
Not Before: Jan 1 03:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15eef78302b1dd37c285940278f45d20401e987d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c9:ac:a7:fc:21:0b:1f:9c:05:56:b9:67:d2:
8d:a3:54:73:88:d0:3c:70:87:46:13:2d:c4:90:bf:
fd:32:8d:66:94:8c:a6:97:3d:7c:41:7b:e6:20:eb:
4f:80:fa:06:a2:d4:fd:e3:75:b1:b6:e3:c4:00:ee:
58:a9:ff:68:4a:ec:be:5f:b4:a4:9c:64:ef:e5:b1:
7d:2e:6f:9c:a2:a0:b8:91:fc:7b:7d:99:fc:1d:0d:
e6:38:b2:e3:c8:ac:0d:43:68:e9:7f:08:ad:96:20:
40:83:96:58:b5:8e:d1:ed:af:e0:82:e9:47:d6:1c:
06:76:0c:1a:83:c8:ad:27:f3:f6:2b:9b:0b:fa:f0:
de:75:dd:64:fc:7a:9b:37:ac:b7:91:4e:8e:01:00:
98:e3:de:c3:2d:2a:1d:50:4b:a8:6e:ae:08:e0:48:
8a:4a:12:91:3e:eb:56:20:4e:2c:17:12:aa:6e:e9:
fa:98:43:f1:c3:62:a3:e8:4d:90:30:70:63:23:e2:
09:3b:fc:dd:4c:0f:07:8e:87:85:84:e6:68:06:be:
70:75:24:ec:6b:dd:fa:f0:e6:63:5c:09:df:20:5f:
d7:cc:5f:f7:ed:84:18:a0:5b:7b:f6:05:d1:58:1a:
66:89:79:4f:e5:73:b6:5d:63:c7:88:9d:85:06:1f:
88:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EE:F7:83:02:B1:DD:37:C2:85:94:02:78:F4:5D:20:40:1E:98:7D
X509v3 Authority Key Identifier:
keyid:0F:DE:E7:94:4A:C4:DA:31:11:29:5D:81:E2:9D:EB:A0:0C:16:3A:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D97nlErE2jERKV2B4p3roAwWOpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/Fe73gwKx3TfChZQCePRdIEAemH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/544bea-f1ec-4666-81c0-78a4d65693fe/1/D97nlErE2jERKV2B4p3roAwWOpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:12bc::/48
Signature Algorithm: sha256WithRSAEncryption
86:0b:cb:7a:8a:da:3f:15:aa:b3:42:50:1c:a1:93:13:82:04:
a9:17:d0:00:8d:e4:dc:6a:02:aa:e0:38:e2:95:da:9f:db:39:
90:0c:7d:ea:2f:4a:34:7e:c2:54:3a:21:86:d3:86:60:4a:f3:
49:6d:ba:6f:a4:33:22:7e:95:b4:55:09:46:a4:28:53:6e:52:
a6:21:95:02:34:07:41:08:0f:2a:c0:ca:c0:70:1b:9b:6a:59:
c7:49:d0:15:8c:8c:3b:2e:0b:f4:98:a5:41:7a:b7:64:ef:47:
08:4a:75:f4:21:f7:17:16:1f:fb:18:fc:e8:ee:bc:09:c9:95:
89:15:19:9f:a8:44:28:ac:2c:c8:8d:40:38:cf:ab:8b:be:8e:
4e:60:02:46:2e:be:83:4f:e6:05:c1:0f:d3:df:27:2c:a5:b8:
f4:72:7d:07:d8:df:0a:d9:99:6f:79:98:d4:79:fb:2d:d6:fb:
fe:ff:01:16:03:40:c3:37:9f:8d:b4:47:df:b4:ed:b6:7b:a2:
30:ca:83:2c:e8:57:80:f6:42:d0:f6:f9:26:3e:1a:32:82:f7:
f5:7c:a9:82:aa:6a:b0:b7:f1:f3:cc:a0:37:24:05:40:cb:ee:
98:85:81:5f:2d:5c:fb:b0:e8:2f:99:81:83:c3:97:ed:a2:d5:
e7:4a:cd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 00:44:11 2025 by rpki-client