Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/fhuc_3KPKc5cf0pl1kgIK1Xcc9E.roa
File: fhuc_3KPKc5cf0pl1kgIK1Xcc9E.roa (raw, json)
Hash identifier: XmTkPgXA8Hw9NZtLI2VgONEXnO354/0qir5UdqJykDk=
Subject key identifier: 7E:1B:9C:FF:72:8F:29:CE:5C:7F:4A:65:D6:48:08:2B:55:DC:73:D1
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 019666A857846F155180F60FE637C91CE130
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/fhuc_3KPKc5cf0pl1kgIK1Xcc9E.roa
Signing time: Thu 24 Apr 2025 07:17:10 +0000
ROA not before: Thu 24 Apr 2025 07:17:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133466
IP address blocks: 149.226.192.0/21 maxlen: 24
192.48.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:66:a8:57:84:6f:15:51:80:f6:0f:e6:37:c9:1c:e1:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Apr 24 07:17:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e1b9cff728f29ce5c7f4a65d648082b55dc73d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ed:0d:90:29:f0:cb:64:28:fc:d2:3d:4a:cc:
bc:dc:6b:16:8b:81:b3:d0:44:97:8b:4d:bd:7e:8c:
34:39:80:b0:30:25:a7:05:bb:ec:35:d4:fb:1e:71:
58:57:65:1a:8e:6e:83:d5:0a:2e:0e:c8:60:87:af:
c8:7a:a2:f2:d4:ff:1f:5d:c7:4a:b1:aa:6d:52:82:
6b:09:c1:cb:26:29:65:2c:b1:9c:d6:d1:75:5a:2d:
e6:5b:96:00:cd:03:8e:b6:f3:fa:45:30:07:ce:7c:
7d:64:1d:94:ae:86:15:ca:75:2a:de:21:9d:19:bf:
8c:60:1b:a3:ca:67:6e:92:7e:49:39:d0:a5:a9:06:
a6:5f:60:fe:f1:c6:8c:e7:53:80:75:b2:29:ab:a4:
08:fc:0c:d3:33:45:d4:56:35:02:b6:88:13:aa:88:
35:5c:9d:b4:eb:12:25:08:cd:50:7d:2b:4d:62:09:
d9:f6:0b:a1:7d:f7:51:e7:a6:3a:28:d6:9d:63:8a:
e2:fc:9a:b6:4a:b4:61:e8:66:47:7a:44:01:a2:f2:
a8:fb:19:6d:52:94:4f:54:19:df:f5:e0:6a:60:5e:
df:e6:5b:19:5d:a5:31:42:03:88:ad:40:8c:2b:cf:
0f:ff:73:11:62:ae:0c:d7:e2:96:09:37:41:eb:ae:
63:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:1B:9C:FF:72:8F:29:CE:5C:7F:4A:65:D6:48:08:2B:55:DC:73:D1
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/fhuc_3KPKc5cf0pl1kgIK1Xcc9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.226.192.0/21
192.48.31.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:24:42:f3:7f:f7:d8:c4:58:e2:0a:cd:f3:59:b1:43:61:c5:
e2:c4:53:7f:ca:19:b4:64:6f:99:a7:68:44:e3:6b:be:bf:9d:
88:5e:b4:f7:a1:9f:da:c4:a4:fb:5a:df:6a:08:8a:96:65:75:
04:9a:f7:a7:d8:bc:2a:05:db:b6:47:90:e2:be:fc:d1:92:03:
01:10:3e:b9:69:4f:79:2f:46:04:de:62:b8:b9:77:2f:08:6a:
db:45:74:a1:75:fa:60:66:98:4c:6f:04:78:6d:13:53:6d:35:
6c:3d:01:53:d8:a6:99:f0:7a:d0:10:17:f7:76:57:4f:49:af:
c9:95:8c:4f:49:22:be:36:0e:9e:c1:72:66:bf:57:30:cf:f7:
74:b8:43:7f:52:a8:db:94:93:ba:2b:2d:c7:15:ef:27:7c:c5:
99:0d:89:de:df:b9:73:41:5a:fd:44:a4:b6:1c:1c:6a:ce:28:
59:8e:0d:53:25:9d:29:c3:30:c1:7f:5d:41:29:73:e6:8a:47:
a9:bd:f3:7b:0a:f2:85:63:ae:7f:d7:81:98:c0:bb:4d:d6:44:
04:ac:1b:d0:ba:2d:a7:b6:fd:23:0d:4c:42:c6:8d:4c:f3:ac:
1a:08:35:8d:21:35:9d:15:8e:29:92:a6:43:78:b0:b3:c0:11:
49:78:9b:a5
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZZmqFeEbxVRgPYP5jfJHOEwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5NDkyOGEzOTYyN2NkNWVlNWY5NzViZDg5N2MyZDc3NWFi
Mjk5NDAwHhcNMjUwNDI0MDcxNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTFiOWNmZjcyOGYyOWNlNWM3ZjRhNjVkNjQ4MDgyYjU1ZGM3M2QxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqu0NkCnwy2Qo/NI9Ssy83GsWi4Gz
0ESXi029fow0OYCwMCWnBbvsNdT7HnFYV2Uajm6D1QouDshgh6/IeqLy1P8fXcdK
saptUoJrCcHLJillLLGc1tF1Wi3mW5YAzQOOtvP6RTAHznx9ZB2UroYVynUq3iGd
Gb+MYBujymdukn5JOdClqQamX2D+8caM51OAdbIpq6QI/AzTM0XUVjUCtogTqog1
XJ206xIlCM1QfStNYgnZ9guhffdR56Y6KNadY4ri/Jq2SrRh6GZHekQBovKo+xlt
UpRPVBnf9eBqYF7f5lsZXaUxQgOIrUCMK88P/3MRYq4M1+KWCTdB665jqwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH4bnP9yjynOXH9KZdZICCtV3HPRMB8GA1UdIwQY
MBaAFIlJKKOWJ81e5fl1vYl8LXdasplAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEt
MTU5M2Q0MDQ1Y2JjLzEvZmh1Y18zS1BLYzVjZjBwbDFrZ0lLMVhjYzlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC82OWM3ZDEtYzQzZC00YmNkLThlNmEtMTU5M2Q0MDQ1Y2Jj
LzEvaVVrb281WW56VjdsLVhXOWlYd3RkMXF5bVVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDleLAAwQA
wDAfMA0GCSqGSIb3DQEBCwUAA4IBAQC0JELzf/fYxFjiCs3zWbFDYcXixFN/yhm0
ZG+Zp2hE42u+v52IXrT3oZ/axKT7Wt9qCIqWZXUEmven2LwqBdu2R5DivvzRkgMB
ED65aU95L0YE3mK4uXcvCGrbRXShdfpgZphMbwR4bRNTbTVsPQFT2KaZ8HrQEBf3
dldPSa/JlYxPSSK+Ng6ewXJmv1cwz/d0uEN/UqjblJO6Ky3HFe8nfMWZDYne37lz
QVr9RKS2HBxqzihZjg1TJZ0pwzDBf11BKXPmikepvfN7CvKFY65/14GYwLtN1kQE
rBvQui2ntv0jDUxCxo1M86waCDWNITWdFY4pkqZDeLCzwBFJeJul
-----END CERTIFICATE-----
Generated at Sat May 10 19:22:28 2025 by rpki-client