Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/44V-jFpveDwCvRSgY1bGyBKxKMg.roa
File: 44V-jFpveDwCvRSgY1bGyBKxKMg.roa (raw, json)
Hash identifier: SBBRS+535H/ER4FEKoyxl+HX5+uiiatZ4OyNmO8omfM=
Subject key identifier: E3:85:7E:8C:5A:6F:78:3C:02:BD:14:A0:63:56:C6:C8:12:B1:28:C8
Certificate issuer: /CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Certificate serial: 0194258F0F1980804E31FEE6218E710E104E
Authority key identifier: 5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/44V-jFpveDwCvRSgY1bGyBKxKMg.roa
Signing time: Thu 02 Jan 2025 05:48:40 +0000
ROA not before: Thu 02 Jan 2025 05:48:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41957
IP address blocks: 195.245.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 23:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0f:19:80:80:4e:31:fe:e6:21:8e:71:0e:10:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da3941c27cfe5c234c4bf221ecb2a579b2deaab
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3857e8c5a6f783c02bd14a06356c6c812b128c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:77:28:6f:bb:73:30:9e:8d:bf:0a:89:dd:31:
b0:42:ab:b9:a2:ec:06:a9:6e:48:f1:e8:96:d3:3b:
51:45:b0:cb:09:49:9e:ce:7d:eb:5e:99:3a:aa:3f:
40:1f:67:1b:8b:f5:8f:38:a8:79:0b:37:be:6a:c5:
98:60:e0:2d:80:80:09:c9:7d:db:52:f0:ca:f7:0a:
74:85:6b:a6:c9:ea:da:43:d3:f3:45:fd:b6:a0:cb:
ec:91:ce:63:9a:1a:2e:be:18:94:ba:49:b1:99:b2:
6c:3a:14:d5:93:99:a8:63:01:6d:97:36:6e:ea:8c:
b0:3f:4f:75:ae:d8:4d:a3:31:a9:54:15:61:f0:3a:
8c:a9:4c:a0:4d:67:e7:68:de:0b:b8:9c:7a:da:05:
6e:fc:f0:3c:5c:0e:83:8b:14:ea:4f:c5:b4:73:36:
91:d9:d7:2f:32:fa:2b:95:ea:14:41:af:6d:3d:f1:
82:40:21:17:f9:b8:2f:e5:7a:d8:d3:35:a2:9c:8b:
d9:71:6f:e7:c8:96:b2:a7:4e:f1:dc:e3:97:a7:bd:
0f:2d:c3:c5:2a:cb:6c:16:ff:60:19:cb:de:bf:f7:
64:5d:ae:4a:70:20:fe:8e:7c:0d:b6:89:d5:30:be:
e4:e5:65:58:46:4f:a2:b3:f7:6a:73:f4:ff:d2:98:
50:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:85:7E:8C:5A:6F:78:3C:02:BD:14:A0:63:56:C6:C8:12:B1:28:C8
X509v3 Authority Key Identifier:
keyid:5D:A3:94:1C:27:CF:E5:C2:34:C4:BF:22:1E:CB:2A:57:9B:2D:EA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaOUHCfP5cI0xL8iHssqV5st6qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/44V-jFpveDwCvRSgY1bGyBKxKMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/30ed3e-c4c4-4de8-b4f1-f11a39f26c3b/1/XaOUHCfP5cI0xL8iHssqV5st6qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.245.238.0/24
Signature Algorithm: sha256WithRSAEncryption
36:42:4c:fd:3f:24:08:36:a5:da:1a:b7:97:1d:b4:66:11:60:
31:a1:16:81:92:e2:7b:25:53:fb:26:18:e0:cb:d4:07:3e:b8:
ed:80:37:b9:27:81:84:51:2e:f5:48:39:ec:79:11:4d:b2:57:
6b:ac:e6:de:51:7a:8b:b5:b3:26:b1:da:51:20:ae:31:6a:e7:
f7:1e:33:c1:d9:0b:e5:bf:56:09:df:25:82:0b:a6:a0:46:6b:
34:fe:df:77:bd:16:a8:ac:b1:c4:eb:e5:ce:0a:f6:80:a2:65:
87:10:d6:f3:e2:a8:87:01:59:d2:38:c9:18:4c:69:73:eb:02:
e7:66:24:a8:d3:6f:d2:ed:e5:b1:33:a5:26:bf:4a:7e:72:72:
74:d0:4a:54:7c:19:dd:9a:f0:c7:4a:83:38:98:ea:81:14:d2:
58:a0:06:00:c7:62:9c:f2:80:3b:67:19:ac:10:42:0b:6f:04:
bb:08:da:0a:cc:3a:ef:76:5d:05:5d:49:9f:76:b4:6f:26:a1:
d0:e9:86:6e:07:b7:1f:dc:06:16:50:14:3a:78:e1:a9:28:63:
38:1a:0f:b0:42:77:86:f0:9a:22:39:1d:ef:69:01:ed:6d:75:
2e:e7:b6:bd:ce:62:09:f5:b8:3e:24:7c:3d:24:ed:5c:35:ee:
97:cc:9a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:04:57 2025 by rpki-client