Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FAFOi_MWA5Fo0z_m3gqA-yNR33M.roa
File: FAFOi_MWA5Fo0z_m3gqA-yNR33M.roa (raw, json)
Hash identifier: icR2KPf1nufIDLG/nPNr5vKSnrpkA3b1gplItzO6jeQ=
Subject key identifier: 14:01:4E:8B:F3:16:03:91:68:D3:3F:E6:DE:0A:80:FB:23:51:DF:73
Certificate issuer: /CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Certificate serial: 019427B5CA757238C7D8462EF41CA285797B
Authority key identifier: 15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FAFOi_MWA5Fo0z_m3gqA-yNR33M.roa
Signing time: Thu 02 Jan 2025 15:50:12 +0000
ROA not before: Thu 02 Jan 2025 15:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199405
IP address blocks: 185.5.224.0/22 maxlen: 22
2a03:840::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ca:75:72:38:c7:d8:46:2e:f4:1c:a2:85:79:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153c9e8487c98b453f974f20317ece3d70f4d5dd
Validity
Not Before: Jan 2 15:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14014e8bf316039168d33fe6de0a80fb2351df73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9c:b3:6e:79:d6:39:4b:9c:c5:e4:a0:a0:4b:
ef:ec:a5:aa:0f:8a:88:86:16:8b:b5:9a:f6:f8:ad:
70:04:8a:ab:26:21:c0:29:c2:be:c1:38:a5:0b:74:
2a:37:dd:78:ca:27:d4:c1:df:7b:f4:58:61:8b:c7:
16:8c:97:98:f9:f3:5b:3b:3e:33:b5:ce:b6:5b:a2:
a0:fd:41:0d:e8:cb:1b:52:83:89:86:5c:ba:58:c8:
5b:f9:bd:c1:ea:0b:e8:eb:51:09:5c:b1:3d:1f:f1:
0f:f4:1b:e3:3a:96:be:34:99:4a:6a:d2:a3:62:90:
48:da:5d:68:00:c1:31:80:b8:15:58:80:ba:54:c7:
aa:49:aa:a5:70:78:c7:a2:75:bf:fa:06:f9:7d:3c:
34:c8:4b:99:48:3d:f9:27:aa:db:9d:09:0c:a1:b0:
68:b4:a6:f2:5d:17:d8:cf:ea:ad:da:ae:2c:e5:9f:
26:de:64:8e:4c:08:57:11:a4:13:5b:30:5b:55:ad:
95:e0:cf:e4:74:72:08:b9:95:f4:e5:58:fb:ff:cc:
68:43:92:36:91:1d:06:8b:ce:f2:2a:90:e4:c8:ca:
3c:08:03:26:f0:c2:0f:54:39:a4:b3:d0:c2:da:17:
ba:9f:ea:0c:21:be:78:eb:dd:7c:a3:26:99:f2:c5:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:01:4E:8B:F3:16:03:91:68:D3:3F:E6:DE:0A:80:FB:23:51:DF:73
X509v3 Authority Key Identifier:
keyid:15:3C:9E:84:87:C9:8B:45:3F:97:4F:20:31:7E:CE:3D:70:F4:D5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTyehIfJi0U_l08gMX7OPXD01d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FAFOi_MWA5Fo0z_m3gqA-yNR33M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/0ff633-eb4a-4e18-ad56-0d018dbcc7cb/1/FTyehIfJi0U_l08gMX7OPXD01d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.5.224.0/22
IPv6:
2a03:840::/32
Signature Algorithm: sha256WithRSAEncryption
30:29:e4:16:9f:3d:3d:f8:22:95:96:54:74:a5:64:55:6f:39:
75:e4:74:d6:18:71:ed:82:04:c5:e4:75:a1:33:b5:1e:5d:0c:
ea:b9:58:79:66:c5:0b:6f:e4:bd:9d:a8:20:e9:00:a0:12:4d:
71:87:74:16:ab:aa:ab:e8:0c:21:e3:7b:01:ee:df:94:fe:58:
ec:ce:b8:69:8b:42:ed:8f:7f:11:bd:63:9b:33:3e:43:d1:c2:
41:9e:62:1f:83:f0:b0:05:04:ae:2c:9c:0b:67:bb:0e:49:d3:
de:42:66:7c:05:f0:c3:11:15:b0:6f:e0:4c:e8:c8:e1:2e:27:
60:cd:eb:3b:07:3a:4d:d5:6f:bc:ed:20:30:3a:28:d7:a9:24:
af:fa:6d:91:19:3d:2c:31:5d:cd:11:14:a3:b4:3c:90:36:17:
20:56:84:83:6d:a2:83:7b:ca:78:ef:21:c9:cd:6f:71:73:4c:
34:e9:6c:87:0d:b9:fb:25:66:aa:4c:a9:dd:c7:b1:86:3e:e5:
18:b4:86:dd:27:3b:66:1c:20:e0:84:a9:a2:1d:b2:5e:ff:63:
ff:8d:bd:08:01:b6:4c:01:4b:09:e4:8d:4b:13:fb:de:e8:e0:
08:be:77:06:3b:d5:d8:35:3b:31:79:30:4e:d0:f4:17:88:f7:
a2:6d:89:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 17:22:22 2025 by rpki-client