Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/44aHSTc_N_J7ymJFhCAeUzS4V0M.roa
File: 44aHSTc_N_J7ymJFhCAeUzS4V0M.roa (raw, json)
Hash identifier: k12ZQud9YaZ6rTtvVFGbQETqfgsqw1EgkhzhgzETi5U=
Subject key identifier: E3:86:87:49:37:3F:37:F2:7B:CA:62:45:84:20:1E:53:34:B8:57:43
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 01963A1AB35AED1B49B6E0710088434777BC
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/44aHSTc_N_J7ymJFhCAeUzS4V0M.roa
Signing time: Tue 15 Apr 2025 15:39:10 +0000
ROA not before: Tue 15 Apr 2025 15:39:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59796
IP address blocks: 5.252.32.0/24 maxlen: 24
5.252.33.0/24 maxlen: 24
5.252.34.0/24 maxlen: 24
5.252.35.0/24 maxlen: 24
160.79.120.0/24 maxlen: 24
160.79.121.0/24 maxlen: 24
160.79.122.0/24 maxlen: 24
160.79.123.0/24 maxlen: 24
185.121.240.0/22 maxlen: 22
185.121.240.0/24 maxlen: 24
185.121.241.0/24 maxlen: 24
185.121.242.0/24 maxlen: 24
185.121.243.0/24 maxlen: 24
2a06:a180:10::/48 maxlen: 48
2a06:a180:30::/48 maxlen: 48
2a06:a180:40::/48 maxlen: 48
2a06:a180:50::/48 maxlen: 48
2a06:a180:60::/48 maxlen: 48
2a06:a180:70::/48 maxlen: 48
2a06:a180:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Apr 2025 14:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:3a:1a:b3:5a:ed:1b:49:b6:e0:71:00:88:43:47:77:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Apr 15 15:39:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3868749373f37f27bca624584201e5334b85743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:79:28:55:53:10:6e:3d:b7:a9:63:11:e7:ce:
ce:42:ca:15:6b:a0:01:0c:c0:6a:7f:d8:6b:3c:f4:
a7:50:cb:6c:81:9b:f7:1d:0a:ff:d2:34:3b:c0:9c:
4b:20:73:8e:24:c3:8e:bd:3b:4a:33:36:77:d8:d3:
4a:96:13:3a:57:b3:42:f4:17:ab:4d:04:95:dc:43:
42:08:d5:88:cc:f7:52:df:cf:4a:40:cb:00:44:3b:
0b:48:b0:90:46:ee:e2:1c:c9:fd:22:e5:09:17:24:
5a:c5:de:31:61:dd:ef:be:6e:47:89:cd:16:76:f4:
eb:60:39:7d:a6:4c:d5:1a:f7:aa:a6:7c:ed:61:af:
49:0d:d4:92:72:ae:03:ec:39:69:f5:ea:a0:24:2f:
3b:e5:a7:c6:11:06:9c:d8:a7:3d:13:e7:02:bd:f7:
0d:be:c0:c9:80:ae:b4:e9:6e:72:b2:ab:63:68:b5:
0b:8b:c9:c4:17:2a:e5:17:32:28:8c:63:93:7f:9c:
83:43:04:97:87:52:f5:73:f9:0f:26:a9:8a:03:32:
49:f8:7f:2c:c9:81:a5:d9:49:61:07:a3:fb:e3:a4:
9c:53:6c:d2:73:91:95:75:bd:df:37:15:a1:c1:35:
91:67:55:1e:69:35:2d:36:67:d9:3c:b1:2e:0d:82:
e1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:86:87:49:37:3F:37:F2:7B:CA:62:45:84:20:1E:53:34:B8:57:43
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/44aHSTc_N_J7ymJFhCAeUzS4V0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.32.0/22
160.79.120.0/22
185.121.240.0/22
IPv6:
2a06:a180:10::/48
2a06:a180:30::/48
2a06:a180:40::/48
2a06:a180:50::/48
2a06:a180:60::/48
2a06:a180:70::/48
2a06:a180:80::/48
Signature Algorithm: sha256WithRSAEncryption
91:ee:35:1b:10:88:e1:59:93:7c:4b:28:ae:9c:72:6c:a2:d9:
b5:61:9a:40:a1:38:fe:3d:cd:6c:98:df:95:26:de:59:f0:d3:
77:40:cf:a2:10:8f:bb:b7:ba:db:db:28:2f:1f:de:05:8f:0d:
fe:77:2c:b5:2f:f9:b9:7d:ce:91:06:40:92:a6:a8:e2:78:4d:
d2:fb:d7:b5:d3:10:a4:f4:0b:d1:23:a8:d1:d5:3c:d8:13:aa:
28:0a:df:97:82:25:33:1d:44:9e:29:46:91:10:a0:97:6e:3e:
e9:a9:e2:e5:2b:c3:84:03:4d:f0:93:85:82:03:6d:55:ac:47:
bc:9f:a1:29:92:00:b7:9a:4b:3b:94:ad:24:9c:ff:39:47:08:
25:4a:d1:7c:f2:42:2e:0c:0a:bd:44:d1:c0:16:ed:cb:b8:5c:
09:7e:8b:8c:a4:4f:ac:6f:d7:e2:2d:02:69:6b:c3:3f:a0:4f:
83:12:d7:23:50:8c:40:89:46:25:1b:f2:54:dd:ba:cb:93:58:
73:7c:8a:1f:47:d5:fc:e4:5f:53:70:c7:c8:bf:db:e8:4f:51:
a0:1d:28:29:a9:1f:8c:32:d5:2b:3b:c1:91:64:f5:31:4f:36:
fd:1b:e4:dc:a9:6f:22:ec:88:8e:e5:92:ce:6c:88:87:25:a4:
a1:9c:69:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:57:34 2025 by rpki-client