Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/dEvm44MVXindQlOEmPEQUDFIhOs.roa
File: dEvm44MVXindQlOEmPEQUDFIhOs.roa (raw, json)
Hash identifier: dVgBBC/Rmim2eB3c1PNCO34aKUguzhPQDH4vqUewLA0=
Subject key identifier: 74:4B:E6:E3:83:15:5E:29:DD:42:53:84:98:F1:10:50:31:48:84:EB
Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Certificate serial: 01971216D21FFCCADEFC704E2ABA8DEFADB4
Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/dEvm44MVXindQlOEmPEQUDFIhOs.roa
Signing time: Tue 27 May 2025 14:12:54 +0000
ROA not before: Tue 27 May 2025 14:12:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53007
IP address blocks: 153.112.195.0/24 maxlen: 24
153.112.203.0/24 maxlen: 24
192.157.16.0/23 maxlen: 23
192.157.16.0/24 maxlen: 24
192.157.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:12:16:d2:1f:fc:ca:de:fc:70:4e:2a:ba:8d:ef:ad:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a
Validity
Not Before: May 27 14:12:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=744be6e383155e29dd42538498f11050314884eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:09:4d:2c:00:2b:12:6f:ef:3d:81:4b:6c:0d:
be:4c:92:87:55:96:bc:76:15:fd:ff:b1:82:fa:15:
ab:48:a4:de:32:1e:d1:9e:cf:11:43:44:1a:36:5d:
4a:ca:c9:78:27:3c:1b:9a:cf:2c:e0:cc:ab:e0:8c:
c9:92:e8:c4:ca:d9:3e:6d:15:04:82:6c:84:53:fa:
50:7b:40:2e:9c:d6:8f:f9:80:bf:a5:43:fb:ab:53:
36:24:2d:b9:24:cc:e5:42:9a:d3:de:58:0f:26:32:
0c:fe:57:62:5a:01:8a:39:44:cb:32:89:52:3f:2b:
41:0e:54:cf:36:82:a7:e2:05:68:3b:20:3b:15:78:
27:ff:82:fa:68:8b:3e:34:f3:a8:de:16:bf:b3:80:
8d:4e:a7:cf:b5:1f:f6:70:41:df:d2:89:8b:bc:3a:
5d:bb:a7:c0:87:8e:4f:81:77:4f:82:57:8a:e8:64:
ea:30:6c:99:70:e0:81:8b:93:7b:63:9e:2e:4b:f1:
a3:d4:95:19:da:5e:90:7d:b8:11:ff:98:54:86:80:
7d:cb:56:fe:1c:57:74:e4:39:d6:35:22:cd:5c:71:
bb:b8:07:fb:92:25:f3:70:49:d8:ed:43:0d:c6:06:
f1:be:86:fb:82:26:5f:f6:5f:82:e6:d5:16:87:8c:
85:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4B:E6:E3:83:15:5E:29:DD:42:53:84:98:F1:10:50:31:48:84:EB
X509v3 Authority Key Identifier:
keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/dEvm44MVXindQlOEmPEQUDFIhOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.112.195.0/24
153.112.203.0/24
192.157.16.0/23
Signature Algorithm: sha256WithRSAEncryption
27:c7:5d:62:4d:69:0d:27:00:09:aa:3d:13:7b:79:a0:20:8e:
14:3f:9c:8a:29:69:30:b7:cf:d0:13:6e:d3:ad:52:cc:6e:88:
a1:84:ce:df:e9:86:0c:b8:a6:de:56:7f:55:0b:26:9b:d2:60:
39:1d:90:ec:a4:3a:ad:ef:33:dd:91:c7:d5:c9:ec:40:10:54:
59:54:d4:09:de:e7:d2:8e:d2:cc:fa:b5:d2:67:f9:83:3b:8d:
96:4c:a3:40:33:2e:76:8c:cb:0f:4c:35:37:64:ec:75:39:f7:
4c:b5:18:20:4b:fa:70:75:8b:aa:29:e7:58:95:e7:6c:5f:45:
5d:7a:a3:a8:60:94:56:fe:a6:81:03:6a:a0:05:2b:33:17:d6:
7e:53:2c:2d:c2:77:01:eb:8c:b7:fe:3a:47:f2:07:ca:af:18:
6c:fa:82:2e:ad:f7:30:de:d0:de:95:8f:cc:64:77:cd:4d:dd:
24:e1:68:90:0f:0f:7c:0a:cd:b6:ac:31:66:8e:91:5b:91:7e:
f1:a2:dc:a5:03:84:0f:75:f6:d3:56:bd:1b:c6:e5:29:6e:b5:
74:95:17:24:bb:02:64:40:13:32:7a:e5:f6:77:b8:88:13:d9:
2b:2d:56:bc:7f:0c:d8:46:64:6e:a1:11:d4:f4:85:b1:52:dc:
0f:01:60:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:02:22 2025 by rpki-client