Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/V4pfu9jLQ6oLBdUsOWrdFcq1Yrc.roa
File: V4pfu9jLQ6oLBdUsOWrdFcq1Yrc.roa (raw, json)
Hash identifier: yDY9y35s4pP3mOfRyxPkvU+qk+1wOvcB+DMBcM6XFjA=
Subject key identifier: 57:8A:5F:BB:D8:CB:43:AA:0B:05:D5:2C:39:6A:DD:15:CA:B5:62:B7
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 019731887D5BAD55C91FCCA2636DC2F5A507
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/V4pfu9jLQ6oLBdUsOWrdFcq1Yrc.roa
Signing time: Mon 02 Jun 2025 16:45:17 +0000
ROA not before: Mon 02 Jun 2025 16:45:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.85.13.0/24 maxlen: 24
193.43.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:31:88:7d:5b:ad:55:c9:1f:cc:a2:63:6d:c2:f5:a5:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jun 2 16:45:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=578a5fbbd8cb43aa0b05d52c396add15cab562b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ac:d9:86:40:d0:6f:73:d6:c4:d0:bf:02:55:
04:ea:8e:22:11:e2:97:9e:25:2b:e0:e4:07:50:39:
f6:97:b2:e9:e6:74:d3:1d:09:9a:e6:d0:9a:cd:fa:
06:7a:86:fc:ea:10:1d:c6:49:77:76:9d:18:b5:2c:
9f:c8:eb:55:ac:d5:14:84:f9:4b:83:af:0f:06:df:
2c:89:10:b7:66:a1:99:f7:00:9e:e4:ab:3f:3b:d8:
7a:50:fb:ed:3c:4b:77:53:41:55:2a:4b:26:fd:87:
61:d3:f1:97:6e:d3:eb:79:a6:a7:48:d7:61:26:d6:
cb:95:5b:c5:e9:c9:e5:46:a4:94:f1:98:c5:76:f5:
f4:a1:17:e4:ad:05:87:b3:0b:cf:82:e1:d7:01:ad:
68:db:6d:a1:4c:52:c0:c0:07:50:a2:a1:95:47:6c:
21:c3:0b:b6:19:b1:d8:aa:4d:7b:c2:b5:a1:f0:9d:
95:68:31:2f:4e:04:e4:bc:7c:36:fc:13:bf:30:ea:
20:ef:f1:71:c5:26:8a:a6:f0:4a:40:5a:9d:d0:e3:
48:e4:1c:ff:57:ba:f2:99:79:b5:a6:96:7d:34:e5:
03:42:76:bb:b9:a1:99:b6:3a:ee:db:06:0d:53:ee:
f5:23:f1:df:63:9e:8f:1d:ba:0d:87:88:8d:fe:1a:
fa:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8A:5F:BB:D8:CB:43:AA:0B:05:D5:2C:39:6A:DD:15:CA:B5:62:B7
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/V4pfu9jLQ6oLBdUsOWrdFcq1Yrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.13.0/24
193.43.142.0/24
Signature Algorithm: sha256WithRSAEncryption
95:5e:a5:3b:0c:53:af:e7:d6:f6:45:04:43:42:f0:1a:87:f4:
b2:28:6b:7a:21:20:67:35:4d:64:43:db:78:f9:0a:60:aa:71:
9f:39:13:62:1f:3c:50:81:38:f0:c9:7b:37:73:f6:7f:62:62:
54:91:9a:17:7a:44:ae:d5:25:fc:92:64:fb:06:f0:eb:2b:f6:
7d:8a:f9:ec:cb:73:eb:24:58:26:b5:d3:60:0c:ec:54:41:a9:
c3:92:2c:83:28:d2:f5:e1:66:1f:8c:64:d3:21:30:e2:b6:1a:
1a:78:a0:51:83:c8:fa:c0:67:87:8a:b6:1a:24:df:38:1f:a3:
48:75:5f:61:4f:7e:22:61:fc:df:67:d7:07:bd:b9:86:68:7e:
4b:08:26:aa:31:77:0d:b2:0f:41:0c:77:c9:45:6a:1f:a7:88:
17:2e:d4:70:ea:2b:b5:d0:39:e9:99:b6:16:9d:60:79:6a:61:
9e:43:59:0c:5f:77:35:5b:48:f5:bb:61:ab:f9:a4:26:73:8b:
85:e4:da:b9:31:95:57:56:6d:fd:79:98:4a:b2:bf:e6:77:67:
99:d2:49:c1:11:8b:e8:62:cd:4a:65:87:28:92:eb:9d:99:9d:
39:15:5b:62:10:34:88:03:1b:fc:8c:b7:34:61:49:15:ee:90:
11:2a:3d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 19:00:25 2025 by rpki-client