Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/V4fEP3mKAgRZldstTINNuk_J6BQ.roa
File: V4fEP3mKAgRZldstTINNuk_J6BQ.roa (raw, json)
Hash identifier: 8GFsD/JurXta37HamqakliSVJtpBqW+/i/sWeLhcYfE=
Subject key identifier: 57:87:C4:3F:79:8A:02:04:59:95:DB:2D:4C:83:4D:BA:4F:C9:E8:14
Certificate issuer: /CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Certificate serial: 019425FDA6F70BA0C27697987FE2FCB75C45
Authority key identifier: A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/V4fEP3mKAgRZldstTINNuk_J6BQ.roa
Signing time: Thu 02 Jan 2025 07:49:27 +0000
ROA not before: Thu 02 Jan 2025 07:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 37468
IP address blocks: 185.148.112.0/22 maxlen: 24
185.148.112.0/23 maxlen: 24
185.148.113.0/24 maxlen: 24
185.148.114.0/23 maxlen: 24
2a07:6040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.mft
rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a6:f7:0b:a0:c2:76:97:98:7f:e2:fc:b7:5c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4434d6691e6e27c282caa37aff90f2bc54bf1e3
Validity
Not Before: Jan 2 07:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5787c43f798a02045995db2d4c834dba4fc9e814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:0e:50:5f:db:38:fe:b5:3a:86:84:11:b3:88:
ea:f7:4a:37:6b:dd:f1:c1:c0:4f:1a:df:ac:11:f8:
7c:cf:41:9b:70:58:05:3e:1d:92:bb:5f:eb:59:d0:
cf:c1:72:54:e6:24:7e:95:da:59:3b:f3:28:0b:80:
ff:f0:c9:eb:30:c0:07:40:c6:f2:ee:57:c5:fb:8e:
80:51:e9:3e:a1:f2:11:92:88:43:65:00:6c:57:47:
bd:76:15:d1:fb:1b:28:a2:ea:17:e4:ca:23:03:18:
a8:03:c4:08:db:3e:a2:f8:d7:3f:f2:95:37:5d:15:
23:d0:b7:81:5b:66:5b:3d:e0:64:85:26:53:d7:d5:
3c:c2:87:14:bc:04:7d:1f:ab:9e:7e:1f:fe:05:ad:
97:ee:73:d4:ae:a6:92:09:a9:d8:02:91:5a:5b:41:
f7:d3:83:e0:b5:1f:ba:c5:02:01:63:3d:37:62:86:
90:a4:ac:3a:4d:35:73:05:33:2f:aa:2d:de:54:a1:
d8:7a:49:79:94:59:eb:05:c7:09:b4:29:fc:b3:cc:
5f:9d:0e:88:fc:b5:88:9d:ce:fe:09:88:a6:38:86:
73:93:ac:f6:09:3b:3f:a4:d5:7d:4c:64:89:48:e2:
e4:14:c1:51:54:27:23:40:2b:b3:06:3e:45:96:5c:
32:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:87:C4:3F:79:8A:02:04:59:95:DB:2D:4C:83:4D:BA:4F:C9:E8:14
X509v3 Authority Key Identifier:
keyid:A4:43:4D:66:91:E6:E2:7C:28:2C:AA:37:AF:F9:0F:2B:C5:4B:F1:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pENNZpHm4nwoLKo3r_kPK8VL8eM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/V4fEP3mKAgRZldstTINNuk_J6BQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/45b2d9-e861-43ef-bcc0-e9975a0bdea7/1/pENNZpHm4nwoLKo3r_kPK8VL8eM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.148.112.0/22
IPv6:
2a07:6040::/29
Signature Algorithm: sha256WithRSAEncryption
8e:ae:48:52:dd:d0:af:16:11:63:94:44:05:d5:20:42:7d:0a:
f3:cc:e9:15:14:05:04:92:dd:ac:29:ac:7a:37:dd:4c:a4:5f:
43:78:5d:99:03:55:50:af:7d:00:4b:5b:15:8d:e6:64:98:1b:
57:f3:dd:f8:f8:d9:18:2e:bf:bc:f2:9c:50:47:7c:4c:b3:c4:
be:7b:51:8a:34:34:63:55:ff:2e:76:e1:78:bc:d5:c6:da:5e:
d8:d1:dd:86:1a:ea:47:f2:9b:66:ee:a1:c4:a3:de:7d:1e:44:
cc:6e:ca:74:39:c1:30:96:55:7c:e8:16:c6:44:57:fd:79:c4:
9d:24:a2:86:6e:93:e8:66:6c:27:84:63:b4:f5:9b:f0:12:6c:
a1:c8:f2:61:35:a8:52:36:5c:25:a9:90:b2:12:a7:f8:5d:ab:
08:8b:46:fd:28:cb:85:e0:06:90:76:15:f7:66:61:c7:fa:dc:
d0:af:c0:56:23:35:cc:e6:e4:61:f8:da:4d:f2:10:f5:fc:61:
ac:ff:c4:7b:78:dc:d4:4e:7d:0d:1d:17:ab:6c:80:af:11:0e:
43:b0:47:5d:39:26:d4:31:47:f8:51:b8:32:49:aa:db:7d:b4:
30:e8:b3:54:88:19:25:26:f2:e6:5c:22:ed:99:4d:b3:60:67:
80:1a:8a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:19 2025 by rpki-client