Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/FU5ckiwSRF9khD7WupXiavmIPzs.roa
File: FU5ckiwSRF9khD7WupXiavmIPzs.roa (raw, json)
Hash identifier: 84Hh9Rd/Utxajq2oO+DHR2ECiOMAuLuEnM4faDd74uM=
Subject key identifier: 15:4E:5C:92:2C:12:44:5F:64:84:3E:D6:BA:95:E2:6A:F9:88:3F:3B
Certificate issuer: /CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Certificate serial: 019420683CC787D5A0406FCFF87401DF20C3
Authority key identifier: 05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/FU5ckiwSRF9khD7WupXiavmIPzs.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47692
IP address blocks: 185.245.228.0/24 maxlen: 24
185.245.229.0/24 maxlen: 24
185.245.230.0/24 maxlen: 24
185.245.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3c:c7:87:d5:a0:40:6f:cf:f8:74:01:df:20:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0545279d87f8c0f38c390a33cf1699551dc30fe4
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=154e5c922c12445f64843ed6ba95e26af9883f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:fc:3d:9e:28:c3:f6:d0:f2:e6:85:79:8e:c9:
24:8c:71:83:5a:96:da:79:cf:03:92:98:e1:11:d9:
7a:ed:37:ab:2b:cd:7a:60:a6:1e:f9:79:0a:f9:68:
f8:e0:e2:3f:b5:a4:1c:48:c7:05:dc:04:ca:33:d2:
4c:a9:87:73:27:dd:d3:80:14:2a:36:e8:f2:9d:c2:
35:52:36:e8:01:26:c2:cb:f6:7a:9c:98:91:88:26:
e7:e9:58:82:c6:84:5b:c0:b4:81:f9:04:73:7b:0e:
de:e1:46:a3:0b:20:91:55:65:5b:10:17:dc:10:ec:
b6:c9:98:d8:43:d6:a8:94:be:a1:9f:30:9b:5e:af:
87:ca:00:10:15:d7:7c:44:01:6d:8a:fb:65:14:86:
5c:4e:1c:4e:d7:bf:7c:80:55:0a:80:22:39:7c:15:
52:76:9a:6c:fe:c4:ac:0d:5e:52:8d:ae:c5:8b:f5:
e3:89:55:4b:7d:87:1e:c5:eb:0a:ad:d5:d1:42:43:
d4:d4:57:c3:64:0a:c7:b8:ef:76:51:1b:b2:56:aa:
87:ba:24:77:6e:31:df:ec:e4:52:10:f7:6a:ee:d7:
a9:da:3d:c4:5e:92:20:e8:17:f8:dc:8c:80:84:d6:
a2:b5:69:1d:83:1c:f8:0d:6a:f6:80:e2:48:18:55:
13:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4E:5C:92:2C:12:44:5F:64:84:3E:D6:BA:95:E2:6A:F9:88:3F:3B
X509v3 Authority Key Identifier:
keyid:05:45:27:9D:87:F8:C0:F3:8C:39:0A:33:CF:16:99:55:1D:C3:0F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUUnnYf4wPOMOQozzxaZVR3DD-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/FU5ckiwSRF9khD7WupXiavmIPzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/768378-d79b-45c7-a290-9d386d046fb0/1/BUUnnYf4wPOMOQozzxaZVR3DD-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.228.0/22
Signature Algorithm: sha256WithRSAEncryption
28:1f:a6:89:72:f5:1c:45:d6:b8:27:de:cd:4c:06:a8:dc:26:
54:9a:cf:6d:9f:c1:5b:b6:78:b5:99:3b:ef:d3:94:7e:2b:36:
80:68:ea:3e:64:90:f3:a0:bd:e3:2c:24:1f:8d:a2:6f:4f:6b:
0b:7c:89:23:0e:be:dd:30:85:67:13:a7:cb:1f:ca:49:84:1a:
03:71:bf:6b:77:55:b8:6d:9f:79:af:92:19:ee:7d:28:e5:4b:
8e:cc:c4:07:84:18:71:2c:34:d5:3d:bb:c3:13:a4:4c:67:b3:
d4:69:39:87:98:34:4a:64:ea:26:57:1f:da:68:72:32:d1:ba:
39:04:ca:c6:b8:6e:30:08:91:f5:82:f0:30:e6:c3:56:bc:d8:
8e:21:62:0d:ad:65:3e:f1:a7:5b:63:9e:58:66:37:bd:bf:af:
9e:46:fa:12:af:40:85:dd:9d:e7:48:09:41:eb:bd:ef:f4:6b:
ee:ae:59:89:2e:01:93:a0:47:ef:9c:1e:46:dd:37:3d:4f:b2:
e6:64:12:1c:c4:61:2d:6f:18:cb:e2:bf:a7:d6:37:ac:d2:6e:
9f:af:3e:fe:1e:bc:ca:6b:21:8f:82:49:de:41:30:49:d3:30:
d7:b9:a4:c7:b8:e1:db:51:ba:09:ae:c9:c8:bc:ce:6a:78:7a:
62:05:1f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:13:06 2025 by rpki-client