Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/fQHPEJqUdVp5UqVFRZ1g0Y99-5Q.roa
File: fQHPEJqUdVp5UqVFRZ1g0Y99-5Q.roa (raw, json)
Hash identifier: eirnjkyG4bJYmiDcYHGtnlfuQCFWvSfjnGiCY82vyyg=
Subject key identifier: 7D:01:CF:10:9A:94:75:5A:79:52:A5:45:45:9D:60:D1:8F:7D:FB:94
Certificate issuer: /CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Certificate serial: 0195EA07B9EF8AC0BF6A51668D82C1FFB92C
Authority key identifier: BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/fQHPEJqUdVp5UqVFRZ1g0Y99-5Q.roa
Signing time: Mon 31 Mar 2025 02:28:49 +0000
ROA not before: Mon 31 Mar 2025 02:28:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 45.87.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Apr 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ea:07:b9:ef:8a:c0:bf:6a:51:66:8d:82:c1:ff:b9:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf41addc9a4eea246d42f98c7c72b30b68d67a97
Validity
Not Before: Mar 31 02:28:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d01cf109a94755a7952a545459d60d18f7dfb94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:32:2c:8e:64:39:78:06:6e:4c:b7:16:bd:13:
ba:c1:49:b8:da:e3:dd:d7:86:41:02:6d:fe:df:1a:
68:62:ab:e4:a8:7e:14:72:ff:dc:6b:be:72:f5:06:
28:2f:b8:e9:9d:c9:3d:1b:d7:2c:0b:43:2e:7a:e2:
4d:59:3c:c6:81:e7:14:d0:fc:81:a1:c5:41:56:67:
aa:f2:58:ca:19:bf:55:83:5c:0e:58:cd:59:ae:7f:
37:75:be:78:2b:45:1b:93:94:7b:ce:dc:e2:21:8c:
86:c1:97:d8:5e:57:bf:ad:09:55:28:9a:96:65:a8:
04:1b:fd:07:63:43:52:90:22:49:dd:09:49:61:f8:
a9:41:3a:10:a0:d4:51:6b:29:51:31:c7:a7:0b:4a:
98:41:83:91:f0:2f:4c:80:86:69:44:f7:ee:ef:7e:
7b:2e:76:d8:21:d0:79:54:84:e5:27:2e:ad:7c:5d:
9d:4d:56:3c:fe:14:03:cd:67:88:6b:5b:3d:ac:42:
ae:db:24:cc:8b:d3:04:b9:63:a1:82:18:ba:6b:8a:
a8:9d:d1:db:89:85:ab:2d:5f:4e:a3:e9:7b:2e:b3:
18:5f:cf:7e:dd:2f:ca:a2:6c:d7:b6:a6:4c:59:6c:
70:a2:e4:8f:91:58:11:a5:b4:65:76:02:45:c8:33:
8c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:01:CF:10:9A:94:75:5A:79:52:A5:45:45:9D:60:D1:8F:7D:FB:94
X509v3 Authority Key Identifier:
keyid:BF:41:AD:DC:9A:4E:EA:24:6D:42:F9:8C:7C:72:B3:0B:68:D6:7A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0Gt3JpO6iRtQvmMfHKzC2jWepc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/fQHPEJqUdVp5UqVFRZ1g0Y99-5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/70fcb3-8302-41e4-836a-eead508be4ee/1/v0Gt3JpO6iRtQvmMfHKzC2jWepc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.101.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:82:3d:56:b2:70:24:b4:ae:11:46:dd:a4:87:d0:11:8b:cc:
27:95:1d:9c:ad:f9:b6:11:da:e0:d6:43:95:5f:08:3f:73:4d:
b5:83:94:9a:da:65:dd:02:1e:f8:72:8b:a0:73:51:2f:a3:f2:
88:01:ba:bf:cb:07:9f:a6:e7:cb:cc:35:b0:b9:3e:9a:e4:5b:
67:d0:2c:7f:07:6b:74:ad:6d:7c:3c:ca:26:c1:46:18:28:49:
37:44:ed:01:dd:46:7d:d2:76:31:ab:5e:bb:5e:db:10:75:a6:
8d:4e:cb:98:a3:c2:05:56:20:64:75:ca:60:e3:99:16:80:0f:
f0:be:ce:00:39:d2:bd:ca:1f:25:64:4e:66:d6:9d:76:63:27:
bc:21:63:51:e3:4d:fd:72:e2:cc:f5:11:2a:c7:ea:55:2c:9c:
d0:1a:d1:4b:50:e1:62:c8:2b:95:51:a7:3f:42:98:90:4c:3e:
ef:65:46:15:65:1e:7b:ac:a2:9d:c6:f9:94:22:91:e2:0a:49:
64:4c:d6:b5:29:a7:2a:f9:f6:09:80:95:f6:0a:3d:3d:6a:cc:
ba:c7:0a:29:b4:4e:79:47:80:99:9f:94:ef:c0:ee:0a:c4:22:
d0:aa:16:56:01:40:44:d1:7e:28:8b:40:81:57:66:60:42:58:
4d:72:b4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:00:21 2025 by rpki-client