Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/pFcInvEW15iKWvoPMx5EVwuCano.roa
File: pFcInvEW15iKWvoPMx5EVwuCano.roa (raw, json)
Hash identifier: nE+nXG0xZdbwspGUmTTrOhLDVrJyA6M8TZL//6qKpZc=
Subject key identifier: A4:57:08:9E:F1:16:D7:98:8A:5A:FA:0F:33:1E:44:57:0B:82:6A:7A
Certificate issuer: /CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Certificate serial: 0194252170CC49AA1584048B56BD77934236
Authority key identifier: 43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/pFcInvEW15iKWvoPMx5EVwuCano.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58185
IP address blocks: 5.44.128.0/21 maxlen: 21
5.44.130.0/24 maxlen: 24
185.102.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:70:cc:49:aa:15:84:04:8b:56:bd:77:93:42:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d94e06871609cc1f815a56de5c9faf6d57d584
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a457089ef116d7988a5afa0f331e44570b826a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:bd:85:01:18:44:89:dd:0d:16:a6:ba:c4:6e:
cf:a7:68:4b:0f:11:8b:d3:a7:85:98:e9:7f:58:66:
7f:40:1f:c9:19:59:74:a2:ae:be:2b:f0:60:5c:50:
3f:5e:1f:77:8b:57:3a:19:f8:b9:91:f5:47:0a:58:
6a:87:75:30:94:01:06:96:2e:e6:11:76:86:be:59:
e5:d0:a4:ba:1d:aa:1d:dd:71:75:bb:75:1a:e3:8b:
5c:75:ad:61:ff:80:e3:06:6d:47:3c:73:fe:5a:68:
34:ce:77:49:fb:99:95:f7:22:60:ed:e7:32:36:ff:
ed:63:ee:15:98:74:06:f0:70:ab:eb:c7:3f:fb:ac:
74:30:83:d7:2f:b1:4d:cc:7e:30:09:d3:5c:35:86:
c7:47:ee:0d:c9:a4:0c:9b:3e:50:2b:af:4c:2d:b2:
1c:18:52:8a:28:28:cb:fc:f4:f9:b7:ee:c1:71:1d:
2a:0f:74:a0:30:9e:58:45:96:c7:79:04:c4:c0:56:
d0:d3:ab:8b:c3:44:5b:84:51:3b:fe:4e:8f:49:60:
cc:5e:6b:69:58:b6:e1:90:78:9d:70:ee:93:b6:78:
27:02:17:54:11:a5:8d:01:36:d3:51:19:6b:6a:38:
70:15:d1:ea:d8:af:c2:84:71:3e:e3:6d:10:1b:d0:
6f:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:57:08:9E:F1:16:D7:98:8A:5A:FA:0F:33:1E:44:57:0B:82:6A:7A
X509v3 Authority Key Identifier:
keyid:43:D9:4E:06:87:16:09:CC:1F:81:5A:56:DE:5C:9F:AF:6D:57:D5:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9lOBocWCcwfgVpW3lyfr21X1YQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/pFcInvEW15iKWvoPMx5EVwuCano.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/3213d3-cd1a-464d-918d-2d626acb7833/1/Q9lOBocWCcwfgVpW3lyfr21X1YQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.44.128.0/21
185.102.144.0/22
Signature Algorithm: sha256WithRSAEncryption
42:56:90:f7:d6:04:a6:18:92:77:b5:03:43:10:23:1d:e5:a6:
e4:5e:a2:0c:5c:df:b5:67:46:a4:8b:8b:fc:6e:e6:d8:20:26:
42:88:de:9e:56:0b:70:25:2a:c7:47:c3:ee:5c:16:3a:ba:b1:
ba:2b:69:4d:71:29:c6:6d:8f:de:d2:9d:ea:0c:50:42:6a:a6:
60:ac:20:da:50:46:4f:8f:8f:f4:48:59:36:c8:fd:55:97:56:
01:4a:83:50:01:15:3f:85:2f:b9:90:28:d1:50:90:12:06:5a:
8b:f7:3c:e9:a2:d2:11:9a:0c:b5:48:0c:79:09:06:ec:2e:28:
63:93:2a:76:4c:a1:f5:24:ae:dc:5b:43:a3:03:ae:0f:c0:39:
a7:dc:74:36:ad:2c:1c:97:0d:20:63:c1:bc:4c:ee:67:49:b5:
e2:c8:05:9e:40:1d:2a:71:a6:92:68:d3:44:76:92:2b:04:40:
90:e0:c3:65:8c:7c:2f:4b:56:2c:f6:f4:e7:61:4b:d5:fd:8e:
08:e5:de:61:06:87:5a:4a:77:17:34:19:e7:8d:ab:17:de:65:
99:05:14:8c:72:5d:95:3a:72:0e:f1:0c:2e:14:c6:3a:7e:b4:
a1:46:59:48:d5:46:e9:50:9d:de:86:e4:6e:08:b2:e8:f4:60:
3c:a3:ef:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:06:03 2025 by rpki-client