Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Q9aroViSTNyftnih3yMmSfZmsbY.roa
File: Q9aroViSTNyftnih3yMmSfZmsbY.roa (raw, json)
Hash identifier: 5LV9jsogGdw75bsK1cxklhdtKH4/i6QHyICTiSxlbc4=
Subject key identifier: 43:D6:AB:A1:58:92:4C:DC:9F:B6:78:A1:DF:23:26:49:F6:66:B1:B6
Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Certificate serial: 019584CE98571FA6943BFF954625EE8D786E
Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Q9aroViSTNyftnih3yMmSfZmsbY.roa
Signing time: Tue 11 Mar 2025 10:44:46 +0000
ROA not before: Tue 11 Mar 2025 10:44:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60631
IP address blocks: 45.159.149.0/24 maxlen: 24
45.159.150.0/24 maxlen: 24
87.236.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:ce:98:57:1f:a6:94:3b:ff:95:46:25:ee:8d:78:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b
Validity
Not Before: Mar 11 10:44:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43d6aba158924cdc9fb678a1df232649f666b1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4e:e3:04:b5:b9:33:cb:1d:3e:8f:dd:db:63:
0d:c2:d5:67:5e:65:2d:5a:09:f0:09:60:94:ee:85:
26:ff:d6:34:3f:14:7d:73:2a:ab:da:0a:24:da:5a:
ac:45:f4:56:43:db:88:95:88:b2:ca:9c:20:8c:fc:
5c:a1:05:24:1b:f8:d0:b7:94:7a:86:44:01:ff:08:
70:2a:eb:bc:a7:0e:ae:69:af:c5:96:68:47:28:0d:
86:f9:c2:f8:55:07:56:f1:51:23:bb:22:66:ad:37:
ef:04:64:e9:dc:d0:4a:52:5c:04:80:d9:ad:e4:ff:
21:be:fb:57:5a:af:86:22:31:a6:21:64:17:f7:f4:
9c:a5:c9:12:1d:7f:04:2a:ec:bd:fd:6f:f4:41:ad:
2f:d2:f2:ce:c7:7f:00:c6:57:99:30:33:1d:34:af:
50:ca:37:18:3a:35:3d:07:31:af:7d:0e:99:59:06:
64:d2:fc:d9:ae:21:26:77:0d:b4:89:cb:93:da:68:
6e:0f:61:6a:9c:39:2e:36:30:3e:50:53:5e:f5:3f:
0b:62:60:aa:88:21:85:b3:11:de:2e:95:28:b1:b8:
f5:d9:3d:27:41:42:68:0f:6a:4a:15:d1:60:cd:bf:
cf:06:35:d0:86:24:e6:e0:cf:58:72:a4:d6:73:9d:
c5:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D6:AB:A1:58:92:4C:DC:9F:B6:78:A1:DF:23:26:49:F6:66:B1:B6
X509v3 Authority Key Identifier:
keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/Q9aroViSTNyftnih3yMmSfZmsbY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.149.0-45.159.150.255
87.236.38.0/24
Signature Algorithm: sha256WithRSAEncryption
30:bf:3f:6e:1b:b6:25:f4:dc:78:f7:6d:15:89:5a:b8:9d:7d:
0c:3e:d1:16:86:ae:db:a4:48:a1:4d:df:c3:fe:27:c6:47:0c:
7b:78:07:b0:13:31:9a:dc:da:fd:c2:34:5d:34:d2:94:89:27:
91:ae:43:f4:05:6b:3f:38:ff:d9:31:2e:c3:23:77:46:46:a6:
23:81:29:04:34:8a:c1:24:52:4a:51:b5:eb:f0:00:3d:04:24:
23:e7:c8:44:ef:da:40:1f:ec:a6:28:a8:f3:d3:46:12:4e:98:
51:44:4e:c8:6b:a7:9d:4b:bb:a7:98:71:be:a9:0c:90:ce:3e:
70:ac:ec:1a:f1:a1:93:42:45:45:de:2c:18:f1:25:f6:e7:ab:
34:6b:07:a7:4c:9c:51:14:1d:b8:70:7a:fe:2c:f5:7d:b0:d6:
9a:5d:47:03:fc:06:8c:80:b0:53:a1:6e:cf:a0:8e:c5:ac:39:
49:b7:59:2f:fa:bb:18:b5:9f:8e:e0:94:ce:85:05:58:36:79:
96:00:c1:e7:43:40:99:6e:4f:23:6f:d8:8a:6a:82:03:7d:98:
2d:3b:5d:c0:ae:4d:c8:d0:c8:8f:89:41:32:a7:c4:44:05:8a:
15:5f:23:93:cd:fe:ba:3b:7f:13:b9:bf:2f:2b:f2:6c:e4:13:
54:6b:c6:e7
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Apr 6 14:46:53 2025 by rpki-client