Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eimfmg3jBbUserzdoIvcOhSBTOw.roa
File: eimfmg3jBbUserzdoIvcOhSBTOw.roa (raw, json)
Hash identifier: ytvv5FD6OzAKLzPji7YHqLJf5LTjx5UpXLhsY+SlnBk=
Subject key identifier: 7A:29:9F:9A:0D:E3:05:B5:2C:7A:BC:DD:A0:8B:DC:3A:14:81:4C:EC
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01991688E1BBEAA79978458132FCAC85B21A
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eimfmg3jBbUserzdoIvcOhSBTOw.roa
Signing time: Thu 04 Sep 2025 21:01:33 +0000
ROA not before: Thu 04 Sep 2025 21:01:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205531
IP address blocks: 45.147.44.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:88:e1:bb:ea:a7:99:78:45:81:32:fc:ac:85:b2:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Sep 4 21:01:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7a299f9a0de305b52c7abcdda08bdc3a14814cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:8b:f4:4b:22:f4:aa:98:63:7d:22:bd:18:ab:
8f:e5:f2:30:27:35:02:06:79:b5:54:0f:1c:75:3c:
a3:d3:c9:7a:7a:69:f6:46:56:76:28:a5:c4:b1:84:
f4:42:cc:37:4a:84:64:c8:0a:14:99:24:73:1f:53:
3b:de:1c:76:4d:e4:57:0f:ec:89:c1:92:fd:e1:a5:
7c:a0:42:b5:eb:fb:ce:3b:03:e2:5d:ab:6b:ca:c8:
ce:75:79:55:c9:aa:09:d4:72:c6:ee:2d:13:b2:15:
f0:76:9f:a4:a0:3d:01:dc:c7:13:b7:db:36:7d:d6:
b1:ba:8b:ea:af:5f:21:82:01:b3:8a:50:e1:02:a2:
fb:77:9a:2f:da:61:23:7e:48:72:c9:e5:9e:e4:58:
e5:1f:66:39:f3:ad:45:8b:28:7b:4b:0e:ef:c5:ed:
7c:7b:2e:7e:0a:df:d3:c0:73:9d:97:97:50:46:ed:
f2:bf:db:54:31:00:ae:0b:26:76:54:57:af:de:f6:
d8:e0:db:1b:30:3d:87:c7:11:13:46:8a:75:b0:6d:
aa:3e:c8:cc:97:27:9e:94:9d:99:f4:91:cd:b6:48:
fe:3a:07:91:f0:05:94:da:8f:01:01:21:6c:69:3e:
0e:7e:eb:03:e8:91:13:7a:4d:7b:ab:4f:01:64:99:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:29:9F:9A:0D:E3:05:B5:2C:7A:BC:DD:A0:8B:DC:3A:14:81:4C:EC
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/eimfmg3jBbUserzdoIvcOhSBTOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.44.0/24
Signature Algorithm: sha256WithRSAEncryption
83:b4:1e:21:86:23:eb:bd:fb:c5:62:1e:78:43:6c:ec:6c:90:
be:68:d9:ae:48:d5:cd:d0:96:75:38:50:06:81:4f:67:86:14:
7e:12:16:1b:aa:d5:98:44:cb:09:42:15:d1:69:29:b4:af:32:
c9:8a:8c:44:79:36:1f:29:a6:5e:be:59:8b:26:32:be:ee:72:
13:6a:5f:8d:ca:4a:93:86:02:74:c6:50:a2:41:2e:e6:85:00:
3b:24:e1:7b:dd:1c:3b:cd:76:25:29:08:3b:19:f7:14:99:db:
52:de:76:15:e1:d1:0b:75:38:a7:6e:47:1c:49:b7:e5:b1:1b:
9a:1e:dd:ac:a7:b3:30:dd:6e:c1:5b:59:eb:50:15:62:2d:a9:
a6:1d:20:d5:73:46:af:a1:a0:ea:97:62:8b:34:94:72:c9:b1:
ed:dc:2c:90:c0:dd:1e:3d:d2:28:1a:f4:3e:81:2b:6b:8a:18:
e3:86:b7:51:61:be:09:6b:da:ef:b8:a7:81:16:74:bc:a2:97:
72:3f:a7:14:48:df:29:46:63:3f:49:94:51:50:bf:a5:9d:c7:
71:f8:fc:8c:f7:07:51:73:5e:ae:4a:5d:6d:1b:f2:5c:ca:cb:
ec:c1:ba:9d:90:31:ee:a7:a3:95:71:d0:da:91:b9:94:16:37:
51:b8:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 13:47:10 2025 by rpki-client