Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/FWCesaIMOwFzF-S6nRbdJ3PoGE0.roa
File: FWCesaIMOwFzF-S6nRbdJ3PoGE0.roa (raw, json)
Hash identifier: bxcDYvFZ5Dt/XzJzEZDtabo8yRK70xHEONN+N/HaSrs=
Subject key identifier: 15:60:9E:B1:A2:0C:3B:01:73:17:E4:BA:9D:16:DD:27:73:E8:18:4D
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 019787AABE81E9074BE10DFE34187AA3AAEC
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/FWCesaIMOwFzF-S6nRbdJ3PoGE0.roa
Signing time: Thu 19 Jun 2025 10:10:03 +0000
ROA not before: Thu 19 Jun 2025 10:10:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214433
IP address blocks: 151.237.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:aa:be:81:e9:07:4b:e1:0d:fe:34:18:7a:a3:aa:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jun 19 10:10:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15609eb1a20c3b017317e4ba9d16dd2773e8184d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:6d:ab:68:65:47:37:84:4a:ad:79:28:b9:41:
ad:6f:2a:2d:2d:56:d1:22:e0:90:57:59:87:be:57:
dd:91:e4:35:12:f9:d7:45:73:f9:fa:6b:20:eb:94:
a2:4a:14:ea:cb:ab:45:1d:6b:23:66:29:1a:5b:77:
f4:53:e4:4d:bc:e5:9a:5e:34:34:a5:60:66:81:d2:
32:73:b1:88:65:a6:e8:a5:31:4b:03:aa:ad:6c:a1:
6f:77:3c:52:9f:d6:86:af:8c:75:6d:03:98:c1:f6:
3c:e4:43:b8:69:cc:04:ff:18:e5:f0:1d:44:b5:29:
f6:03:49:87:d0:48:b9:78:f3:65:c0:d2:af:3a:3e:
60:ec:b2:68:b9:f6:35:65:69:11:5a:ed:28:96:83:
6c:a6:16:f8:48:9d:5f:dc:3f:d3:1a:5f:a3:c3:91:
1d:84:ca:de:72:bb:83:82:0c:de:02:30:f4:ee:69:
3b:c5:18:07:9c:a9:f2:04:c7:38:00:55:68:b9:bb:
3e:29:db:19:ce:87:48:a3:44:b4:ca:88:04:8b:00:
29:86:91:7c:dd:c8:70:03:17:24:64:be:39:14:76:
54:a3:73:29:57:43:1f:48:41:21:df:90:3a:73:80:
3c:5a:83:91:fe:5a:9c:86:88:4c:6e:ca:ec:6b:e3:
a5:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:60:9E:B1:A2:0C:3B:01:73:17:E4:BA:9D:16:DD:27:73:E8:18:4D
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/FWCesaIMOwFzF-S6nRbdJ3PoGE0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.237.25.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:2b:b2:66:e8:fa:a7:a9:8b:a4:2b:3a:21:00:61:bf:a6:06:
7b:75:b2:51:25:a0:8f:b4:08:b1:90:a6:f6:11:fc:2e:df:e4:
bc:6e:45:07:79:d5:60:25:f0:da:51:32:01:74:54:b9:e3:c3:
01:e5:30:82:fa:e1:91:1b:67:fe:22:a2:d3:31:d3:f1:f5:3d:
de:7c:2e:2a:ac:d2:2c:9e:46:37:30:b1:35:c5:02:7b:38:f7:
b9:cb:e8:5d:28:fe:2a:55:30:bf:60:60:63:25:71:59:47:21:
dd:60:76:72:ac:4e:9e:65:2a:92:69:27:bf:ff:92:70:30:1a:
d4:bb:e2:79:57:a5:12:60:a9:b9:1c:fb:71:26:49:6a:4e:b0:
4b:82:38:35:f9:80:2a:af:9c:46:0a:c4:05:8f:9c:26:5a:9b:
44:6b:39:ba:80:22:15:78:89:fa:8a:41:f3:29:99:e7:6b:ba:
95:b2:b8:40:18:2f:8d:ff:e5:17:23:06:74:08:ac:57:45:95:
74:4b:59:34:6c:e7:54:04:7b:03:f5:89:39:d9:f9:db:04:43:
84:1d:06:a8:b2:32:68:84:ea:79:4f:9a:31:c3:fb:8c:63:02:
db:dc:1a:cf:d1:ca:a5:89:1a:0f:53:c8:51:12:ff:f6:ec:e8:
91:b8:a8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:04:04 2025 by rpki-client