Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/fjv84iNlQrNIDl434ECeTTwr0W4.roa
File: fjv84iNlQrNIDl434ECeTTwr0W4.roa (raw, json)
Hash identifier: szzjxRTRI27CfDncELIdzVynm65szTrVvcBwbAR/+k0=
Subject key identifier: 7E:3B:FC:E2:23:65:42:B3:48:0E:5E:37:E0:40:9E:4D:3C:2B:D1:6E
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 019541576BA45C390ED41A84D84CB9513D28
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/fjv84iNlQrNIDl434ECeTTwr0W4.roa
Signing time: Wed 26 Feb 2025 08:20:02 +0000
ROA not before: Wed 26 Feb 2025 08:20:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198919
IP address blocks: 45.152.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 22:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:41:57:6b:a4:5c:39:0e:d4:1a:84:d8:4c:b9:51:3d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Feb 26 08:20:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7e3bfce2236542b3480e5e37e0409e4d3c2bd16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:9e:65:6e:7d:d2:fc:01:e4:7e:fc:ba:23:
eb:47:4e:ff:a0:73:e6:c7:af:81:bd:5d:93:26:a3:
e3:f2:97:9b:bf:54:cb:d5:c8:37:9b:9c:5f:43:9b:
17:3b:c1:23:0a:fe:0e:cd:e2:64:01:59:95:b0:be:
21:9e:af:e1:97:2e:e8:d4:fa:e4:71:db:c9:a4:fd:
14:1f:51:a2:73:44:69:e9:3f:91:ce:fc:60:40:18:
25:18:7f:6b:d4:f9:65:da:6e:f7:66:a7:e0:52:86:
90:47:86:0c:b9:d3:40:00:3c:a1:f5:cb:fb:13:b9:
a1:4e:cb:f1:70:64:0f:e9:7a:b5:9d:74:e8:8f:db:
09:48:02:32:37:e4:bc:94:36:75:3f:73:e2:cf:82:
75:85:38:26:5c:8f:64:da:08:91:73:0c:ba:55:f8:
00:48:7c:68:ab:74:97:4c:ba:e5:c4:95:9e:2a:e6:
63:35:4b:b9:cc:1f:6c:e0:97:c5:be:fb:8e:eb:d5:
ec:bb:9c:1c:b7:09:1a:9a:1f:be:54:50:4a:29:58:
bc:1f:74:e4:27:f6:fa:0c:23:51:07:ff:f7:7c:41:
f7:d4:fb:c3:73:95:a4:36:7a:61:49:2a:d7:be:7c:
2b:67:d2:13:93:fd:16:c8:4f:45:3d:23:4d:b9:38:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3B:FC:E2:23:65:42:B3:48:0E:5E:37:E0:40:9E:4D:3C:2B:D1:6E
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/fjv84iNlQrNIDl434ECeTTwr0W4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.38.0/24
Signature Algorithm: sha256WithRSAEncryption
62:47:a4:ef:6a:c5:4a:64:93:9a:6d:e0:74:67:60:0c:17:4b:
6e:0a:02:a3:83:65:aa:5a:6f:60:71:77:8e:08:c3:24:9a:b4:
2f:62:ac:43:9c:38:5f:b6:d3:62:3d:7f:13:09:57:68:5a:9e:
6c:66:82:06:07:6e:f6:f8:6e:53:53:7e:3e:fa:f0:25:af:a1:
7a:8a:a8:f0:a7:96:14:3d:55:01:e8:77:76:8b:21:fa:8c:45:
15:e1:a2:dd:04:b2:6d:a5:c3:6d:62:ee:61:9a:d0:4a:df:4c:
e2:97:9d:ee:17:38:05:32:a8:4b:6a:12:d7:a1:78:ca:df:82:
69:b7:bb:ba:8f:c7:10:02:1b:90:73:78:93:97:2c:76:d0:c1:
85:fb:57:9f:a8:3d:80:a5:c5:14:5b:ca:cb:3e:1e:1f:45:f2:
ee:11:36:11:3a:32:87:0f:7e:2b:b3:fb:d8:4e:a2:18:e3:01:
12:1b:7a:e1:b9:0a:2b:93:8f:59:bc:df:a3:52:38:15:af:c2:
8e:5e:d4:03:bd:f3:8a:d3:eb:1e:da:85:23:24:f9:9a:cc:2a:
f2:8c:1e:9c:57:2a:a8:6c:e8:c2:1d:85:39:eb:e7:27:aa:80:
26:02:25:42:8f:ef:f1:c7:31:50:7a:3b:b2:4f:25:df:0d:57:
4b:b1:89:f5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVBV2ukXDkO1BqE2Ey5UT0oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTdjY2Q0M2FmZTgxNmU0OTUzMjI4YmYxNGE3NWRjMjkw
MTRiOGQwHhcNMjUwMjI2MDgyMDAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZTNiZmNlMjIzNjU0MmIzNDgwZTVlMzdlMDQwOWU0ZDNjMmJkMTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyGeZW590vwB5H78uiPrR07/oHPm
x6+BvV2TJqPj8pebv1TL1cg3m5xfQ5sXO8EjCv4OzeJkAVmVsL4hnq/hly7o1Prk
cdvJpP0UH1Gic0Rp6T+RzvxgQBglGH9r1Pll2m73ZqfgUoaQR4YMudNAADyh9cv7
E7mhTsvxcGQP6Xq1nXToj9sJSAIyN+S8lDZ1P3Piz4J1hTgmXI9k2giRcwy6VfgA
SHxoq3SXTLrlxJWeKuZjNUu5zB9s4JfFvvuO69Xsu5wctwkamh++VFBKKVi8H3Tk
J/b6DCNRB//3fEH31PvDc5WkNnphSSrXvnwrZ9ITk/0WyE9FPSNNuThWJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH47/OIjZUKzSA5eN+BAnk08K9FuMB8GA1UdIwQY
MBaAFLVXzNQ6/oFuSVMii/FKddwpAUuNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUt
NmJjNzU1NzhiNGMzLzEvZmp2ODRpTmxRck5JRGw0MzRFQ2VUVHdyMFc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi8xOTA4NDMtMTgwMy00NDYyLWE3OTUtNmJjNzU1NzhiNGMz
LzEvdFZmTTFEci1nVzVKVXlLTDhVcDEzQ2tCUzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZgmMA0G
CSqGSIb3DQEBCwUAA4IBAQBiR6TvasVKZJOabeB0Z2AMF0tuCgKjg2WqWm9gcXeO
CMMkmrQvYqxDnDhfttNiPX8TCVdoWp5sZoIGB272+G5TU34++vAlr6F6iqjwp5YU
PVUB6Hd2iyH6jEUV4aLdBLJtpcNtYu5hmtBK30zil53uFzgFMqhLahLXoXjK34Jp
t7u6j8cQAhuQc3iTlyx20MGF+1efqD2ApcUUW8rLPh4fRfLuETYROjKHD34rs/vY
TqIY4wESG3rhuQork49ZvN+jUjgVr8KOXtQDvfOK0+se2oUjJPmazCryjB6cVyqo
bOjCHYU56+cnqoAmAiVCj+/xxzFQejuyTyXfDVdLsYn1
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:40:23 2025 by rpki-client