Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/FUCX9OW5znsVvJDFK2DPDP4kaXw.roa
File: FUCX9OW5znsVvJDFK2DPDP4kaXw.roa (raw, json)
Hash identifier: 7Yn8lQlQu+p9EOSUqkrA7N+uYFCRbQJhJNvyuVgdZVs=
Subject key identifier: 15:40:97:F4:E5:B9:CE:7B:15:BC:90:C5:2B:60:CF:0C:FE:24:69:7C
Certificate issuer: /CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Certificate serial: 01942067F507A059C007135F2D9910CD86E6
Authority key identifier: AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/FUCX9OW5znsVvJDFK2DPDP4kaXw.roa
Signing time: Wed 01 Jan 2025 05:47:51 +0000
ROA not before: Wed 01 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39614
IP address blocks: 185.228.176.0/22 maxlen: 24
213.139.240.0/22 maxlen: 24
2a09:7180::/29 maxlen: 48
2a0c:1d00::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f5:07:a0:59:c0:07:13:5f:2d:99:10:cd:86:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aafa45a62c5e850ab9c8726a59a9bfa992d371b2
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=154097f4e5b9ce7b15bc90c52b60cf0cfe24697c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:31:00:92:34:89:d2:de:5d:9d:db:82:ee:40:
af:99:ee:98:f7:2a:a5:37:e1:d2:85:0e:b9:91:24:
bc:1b:7f:f3:ff:9b:d2:f6:7a:6c:c1:80:cf:57:c9:
41:ab:9a:42:95:12:47:1d:07:82:87:fb:c1:93:d0:
96:a2:47:37:80:13:7f:fc:84:73:d0:98:06:71:ad:
61:fc:91:18:05:5f:75:97:35:c7:47:a8:18:59:04:
fb:b8:c9:61:da:9d:85:bc:6f:75:81:cf:87:b7:5a:
87:62:ff:00:7e:b5:90:36:6a:8e:3d:59:3e:34:97:
ad:d0:28:3f:a5:d9:36:bc:1d:98:00:37:21:b1:98:
df:64:4f:a0:dc:90:42:48:8d:77:13:37:ca:dc:29:
48:b2:e0:33:7e:5e:f4:3e:49:6e:da:7c:0b:74:76:
dd:93:65:46:e4:81:92:28:f7:70:c7:70:7c:33:ad:
38:64:fd:49:f2:1f:1b:45:3c:c5:3a:59:9f:e0:9d:
82:8a:95:43:b2:c3:03:40:0e:cb:c1:a9:a7:29:67:
31:94:1e:08:09:60:33:8c:74:0f:40:66:16:ee:6a:
fa:7c:cb:c2:8d:1e:e8:42:0c:54:3e:ee:5d:da:60:
9c:c8:74:74:1c:f3:0e:42:83:b6:e6:da:eb:3a:af:
f5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:40:97:F4:E5:B9:CE:7B:15:BC:90:C5:2B:60:CF:0C:FE:24:69:7C
X509v3 Authority Key Identifier:
keyid:AA:FA:45:A6:2C:5E:85:0A:B9:C8:72:6A:59:A9:BF:A9:92:D3:71:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvpFpixehQq5yHJqWam_qZLTcbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/FUCX9OW5znsVvJDFK2DPDP4kaXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/97a9aa-6970-49c8-8d0a-2b3ddbcb7238/1/qvpFpixehQq5yHJqWam_qZLTcbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.228.176.0/22
213.139.240.0/22
IPv6:
2a09:7180::/29
2a0c:1d00::/30
Signature Algorithm: sha256WithRSAEncryption
22:ed:75:5d:71:6e:e0:31:8f:2f:ed:ca:da:09:81:12:a2:a1:
f1:48:4e:b8:17:8c:6a:8f:38:03:5f:0f:6b:ce:b5:77:ad:2e:
79:47:24:52:c4:16:5e:bb:72:25:fd:67:ed:ee:9b:79:83:6b:
5b:7c:e8:81:5f:e2:f8:16:1a:59:49:1f:31:dd:0d:26:03:be:
c8:2e:30:52:1a:cd:ad:c4:d2:b8:cc:ed:fe:fc:80:f0:28:28:
20:e4:a9:15:a3:47:66:80:12:b5:8a:e4:c8:c4:3a:d1:52:a1:
1d:13:ae:fe:40:48:e2:da:21:fe:29:61:68:f9:0a:39:26:cd:
7a:ca:17:81:f2:02:6f:0e:b9:19:01:3a:1b:7c:6b:f9:04:02:
bb:6b:92:94:2d:b3:24:95:18:e6:c3:cc:7f:06:60:3e:0f:cf:
ae:c1:87:4e:04:05:ac:62:26:21:5e:a7:36:70:27:86:83:e1:
83:67:1a:51:02:00:3e:14:84:12:47:06:d9:05:da:a6:9f:25:
00:f0:5a:4d:8b:08:68:36:45:55:3a:8e:1c:d2:fb:dd:1f:a2:
91:eb:6a:13:9f:68:af:40:a8:d8:8d:c8:17:97:3a:cc:bf:1c:
0a:ff:fe:3a:80:b4:57:b2:80:35:6a:71:ef:bc:1a:22:1e:98:
b7:c9:23:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 00:16:09 2025 by rpki-client