Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/44dYsozRYENf4ubTHCTQ7hNPzoo.roa
File: 44dYsozRYENf4ubTHCTQ7hNPzoo.roa (raw, json)
Hash identifier: 9g/dOiyadhvu9EEQPUkgGuJzL/QnwS0iPrR2k3LdJdM=
Subject key identifier: E3:87:58:B2:8C:D1:60:43:5F:E2:E6:D3:1C:24:D0:EE:13:4F:CE:8A
Certificate issuer: /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial: 0194A8A7081BBC6CA22357F16B504F7BDBA6
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/44dYsozRYENf4ubTHCTQ7hNPzoo.roa
Signing time: Mon 27 Jan 2025 16:45:06 +0000
ROA not before: Mon 27 Jan 2025 16:45:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12637
IP address blocks: 45.143.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a8:a7:08:1b:bc:6c:a2:23:57:f1:6b:50:4f:7b:db:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
Validity
Not Before: Jan 27 16:45:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e38758b28cd160435fe2e6d31c24d0ee134fce8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:41:07:4c:a9:57:88:3b:bd:79:21:05:cc:
dc:08:7a:6f:a0:04:37:a6:3a:37:69:28:90:e1:37:
03:66:2e:04:24:28:e5:44:e6:25:af:6f:5b:b8:e4:
71:b4:2a:a8:a2:69:73:99:76:27:44:09:8a:8d:c2:
70:8d:1b:75:df:19:05:54:4a:b2:e5:2d:4c:ea:84:
eb:39:e1:d4:20:49:e7:53:d6:c0:a4:84:ef:01:1c:
cf:73:22:ad:ba:32:38:a0:c5:aa:91:56:5c:ed:64:
c0:d7:11:da:aa:96:c5:2f:aa:f9:f4:3a:ee:a1:6c:
4b:34:d2:68:7a:58:a1:43:ff:9c:4b:3f:91:77:04:
eb:6b:f6:ef:5d:05:29:49:53:d5:73:29:53:7c:fe:
8b:3a:0e:63:5f:80:e5:fc:35:a4:e8:15:d0:5f:bb:
a1:dd:db:46:1d:f7:5f:43:06:0c:cf:ba:0a:b7:de:
82:d8:6d:16:c8:9d:72:7a:60:9f:b7:2f:91:26:a0:
1a:71:00:b6:b5:bd:43:45:c7:65:12:9b:5f:41:96:
1f:04:5d:9b:ee:27:93:b0:5a:2f:e3:68:75:7d:68:
c6:12:e1:96:c7:2e:7b:32:0c:05:b4:74:b2:b2:83:
c2:34:2c:7f:b2:4f:a0:e8:53:f0:7a:de:75:52:5e:
81:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:87:58:B2:8C:D1:60:43:5F:E2:E6:D3:1C:24:D0:EE:13:4F:CE:8A
X509v3 Authority Key Identifier:
keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/44dYsozRYENf4ubTHCTQ7hNPzoo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.143.157.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:ef:50:4c:77:af:78:76:63:eb:c6:98:a1:53:e0:13:ae:c0:
1f:19:c2:ab:72:d8:56:c2:eb:4b:81:bc:b3:67:26:da:21:60:
39:1f:a2:50:6f:6c:20:36:6e:a1:ef:1f:ea:7c:63:26:df:93:
c3:b5:d7:14:3b:3e:29:d5:35:9e:fe:56:dd:10:f2:52:2a:19:
ce:f9:5d:78:e2:2b:19:f9:5a:a0:60:c6:f1:51:dc:a6:c1:82:
c9:b6:4a:0f:5c:90:57:01:64:ec:06:86:61:57:ea:b4:df:82:
12:4e:cd:de:70:19:ca:a5:12:41:92:f2:c4:d9:ea:cb:1c:6b:
52:83:17:2f:92:63:33:c0:34:b7:f8:0d:69:44:db:02:17:73:
77:ad:94:33:00:dc:42:ae:e3:6d:48:d6:0b:0c:a0:ee:42:0b:
8a:2c:22:13:c0:14:51:45:1c:fb:a8:66:4d:7b:4c:f6:4a:7a:
e8:46:f1:88:00:61:c4:d8:87:68:51:18:1b:06:44:df:7d:ca:
0c:2b:a7:2a:b6:f8:57:c8:61:3e:79:a8:b9:82:11:9a:93:93:
d8:86:22:59:5b:dc:fc:7a:2d:3d:4e:b0:8e:b3:22:e0:0e:bd:
7d:59:24:d1:d6:56:ab:d3:ef:cb:01:54:68:8e:62:a1:5f:37:
36:31:71:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:29:55 2025 by rpki-client