Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/FCnaaFMRUSsD-s93_AVnx22U1ao.roa
File: FCnaaFMRUSsD-s93_AVnx22U1ao.roa (raw, json)
Hash identifier: 4tCe1gcr3PUaM9byeRkhDZQavz/cazZjqikDLI+wcCg=
Subject key identifier: 14:29:DA:68:53:11:51:2B:03:FA:CF:77:FC:05:67:C7:6D:94:D5:AA
Certificate issuer: /CN=f97fdecadb3261334387cf091d02e0713b781d31
Certificate serial: 0194206807E7EDCBFD7C3A812C6622F09E50
Authority key identifier: F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/FCnaaFMRUSsD-s93_AVnx22U1ao.roa
Signing time: Wed 01 Jan 2025 05:47:56 +0000
ROA not before: Wed 01 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51185
IP address blocks: 45.13.144.0/22 maxlen: 22
45.13.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Apr 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:07:e7:ed:cb:fd:7c:3a:81:2c:66:22:f0:9e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f97fdecadb3261334387cf091d02e0713b781d31
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1429da685311512b03facf77fc0567c76d94d5aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0e:cf:62:fd:5a:9c:c1:b7:3b:1b:ec:50:81:
83:b4:cd:43:ee:f0:19:8c:e9:3c:e1:1e:52:ad:f5:
e4:40:67:5a:08:95:c2:78:bb:10:5b:f5:ce:41:a8:
a2:16:1c:f6:59:1e:cd:92:8e:7c:f7:04:07:34:43:
f9:f1:6a:88:50:c7:18:c6:d0:00:6e:46:55:68:a3:
15:d2:92:e6:5c:31:79:1a:4d:c7:ec:df:0d:1b:d1:
cb:43:c4:42:3e:de:4c:78:9d:a8:ea:39:bc:5b:73:
9b:92:83:f7:9b:7c:e2:74:4f:55:33:2a:44:af:b6:
58:a6:94:53:22:05:75:3b:fa:c6:b6:1d:95:42:5e:
28:0d:9e:57:5d:1b:99:3f:fe:d4:6b:2e:cf:33:a9:
93:5b:04:aa:7a:b6:65:2e:a8:a7:52:ad:f3:81:17:
74:26:34:eb:9d:26:38:61:50:59:b0:8d:24:de:6c:
49:9c:30:83:b1:e4:0c:35:58:84:e3:5c:a3:ac:9c:
d3:60:92:25:95:4b:5c:66:92:6e:f0:54:17:c0:36:
7b:47:30:51:1b:6b:55:22:8d:89:5b:fc:9c:8a:78:
92:59:e4:ac:c2:86:dd:14:93:5a:bf:80:1e:ca:08:
07:d9:78:36:23:b4:9e:69:07:d5:c8:1f:1b:76:45:
cc:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:29:DA:68:53:11:51:2B:03:FA:CF:77:FC:05:67:C7:6D:94:D5:AA
X509v3 Authority Key Identifier:
keyid:F9:7F:DE:CA:DB:32:61:33:43:87:CF:09:1D:02:E0:71:3B:78:1D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-X_eytsyYTNDh88JHQLgcTt4HTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/FCnaaFMRUSsD-s93_AVnx22U1ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/a8a364-7430-4da6-8f43-eb7bf2bddd08/1/1-X_eytsyYTNDh88JHQLgcTt4HTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.13.144.0/22
Signature Algorithm: sha256WithRSAEncryption
86:23:52:fc:a4:48:62:40:d3:fb:59:56:f9:f1:dd:c6:2a:b8:
b4:f0:9a:9a:99:0b:bb:7e:7d:26:e5:86:a2:16:1b:77:c2:73:
fa:1f:2b:4d:64:4f:e8:8d:18:03:7f:72:46:9b:47:0c:38:99:
ba:70:5d:ad:19:b5:2d:cf:06:0d:b7:d1:43:0a:b1:68:1c:34:
f6:e2:13:89:ea:e1:f7:c4:54:f1:b3:63:f0:70:0e:64:af:f5:
fb:48:1f:dc:85:8b:0a:e2:8d:7c:33:41:b7:fd:28:84:99:10:
e0:30:ea:c0:ea:5c:a6:dd:d4:4c:e8:07:d5:7f:d0:84:2d:35:
ef:1f:40:f0:79:54:91:c7:53:83:e6:4c:2f:56:b9:cf:13:8a:
6e:44:0d:d9:59:68:70:90:ce:59:9e:f3:e3:20:bd:97:b0:4d:
3c:87:7c:c8:42:43:42:7d:1d:00:8d:e6:7d:87:c3:80:1b:c0:
5a:c3:9d:ec:ce:f6:5a:b5:20:83:0d:d6:7c:b0:17:ff:b6:00:
bb:0e:87:c2:d8:5f:b5:3b:bc:7c:cf:90:e4:a1:f8:6c:bf:84:
7a:09:b9:21:fd:27:91:09:74:17:07:ee:08:79:63:5e:5d:9e:
e9:c7:ff:4a:90:61:bc:b1:8b:e8:dc:cb:50:5f:f1:d6:8e:ab:
39:91:dd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:44:05 2025 by rpki-client