Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44355.roa
File: AS44355.roa (raw, json)
Hash identifier: 7ZlcSV1LvATFxJpTwnv3C2RoRymNWp8rkJdlLWjtfk4=
Subject key identifier: 78:05:A0:8C:8B:E4:EF:45:12:D1:D2:B5:96:77:03:BC:46:FC:2A:94
Certificate issuer: /CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Certificate serial: 3361CE900B397C565BC813382D52BBEF9215864E
Authority key identifier: C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44355.roa
Signing time: Fri 02 May 2025 16:34:17 +0000
ROA not before: Fri 02 May 2025 16:29:17 +0000
ROA not after: Fri 01 May 2026 16:34:17 +0000
asID: 44355
IP address blocks: 193.57.167.0/24 maxlen: 24
2a0f:85c0:2::/48 maxlen: 48
2a0f:85c0:400::/48 maxlen: 48
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft
rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:61:ce:90:0b:39:7c:56:5b:c8:13:38:2d:52:bb:ef:92:15:86:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4ce7d8902405ba4598f84b6a41c27d722834b1c
Validity
Not Before: May 2 16:29:17 2025 GMT
Not After : May 1 16:34:17 2026 GMT
Subject: CN=7805A08C8BE4EF4512D1D2B5967703BC46FC2A94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:27:48:a6:ba:a0:d3:67:1b:dd:c4:19:89:61:
e0:26:94:5f:a8:74:ba:5f:cf:e0:e8:16:4b:7c:93:
0f:5a:61:16:4e:f4:bb:ee:24:42:1d:d5:0b:b4:64:
5a:e9:fd:9c:91:d3:49:b2:43:6c:7f:bc:a1:c1:ca:
a8:ef:6a:3a:8f:41:46:a1:06:53:88:0d:4a:ae:1b:
09:a8:f7:0e:9a:92:d5:71:9e:95:f7:4a:93:67:a3:
e8:73:ee:bf:dd:ee:13:81:9b:f7:5f:c1:99:f9:a3:
0f:f2:ae:56:27:4f:4c:7f:6f:9a:0d:82:6b:a7:6d:
9c:bb:41:bd:f7:8b:31:03:90:5c:4a:8c:29:15:12:
dc:92:f9:af:1e:6a:e0:26:52:55:73:a8:a4:80:f4:
a1:e0:90:fa:a1:d2:66:b5:c6:c1:b8:7b:d7:af:ce:
94:3a:28:3c:d3:a8:76:6d:54:b2:8d:9b:bb:85:fc:
c2:32:10:bf:62:cc:c1:c4:28:e7:30:02:7e:ba:d5:
76:3a:30:ca:9e:84:eb:7b:55:c8:08:9d:92:e3:6c:
f7:8c:36:79:a8:6d:ab:36:94:9d:a6:6d:0f:70:e9:
ce:9d:c8:09:d2:80:49:10:67:01:90:01:8b:8b:99:
30:6e:c9:e8:11:84:8e:c4:04:08:49:30:2e:51:04:
bb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:05:A0:8C:8B:E4:EF:45:12:D1:D2:B5:96:77:03:BC:46:FC:2A:94
X509v3 Authority Key Identifier:
keyid:C4:CE:7D:89:02:40:5B:A4:59:8F:84:B6:A4:1C:27:D7:22:83:4B:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/AS44355.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.57.167.0/24
IPv6:
2a0f:85c0:2::/48
2a0f:85c0:400::/48
Signature Algorithm: sha256WithRSAEncryption
6f:f3:99:9d:09:e5:97:3f:4b:9a:4b:b2:f2:75:19:d6:8f:1a:
39:bb:ae:10:3d:66:24:af:30:d1:ad:21:c4:10:6e:3a:18:08:
1d:e3:93:22:95:90:a5:cf:db:4d:74:31:54:1d:1b:c9:f3:4b:
4a:de:bf:75:4a:37:fb:54:75:82:fe:6b:b7:6a:e6:f1:25:19:
0e:6a:82:bb:f4:42:8d:af:65:ce:40:a9:04:74:b9:7c:2c:b9:
e4:cd:44:0d:e3:f4:0f:8d:3b:13:ba:e3:7d:39:c9:e9:9b:ae:
75:b6:59:89:a3:54:56:62:3a:fb:49:d2:a0:85:08:32:63:62:
90:fe:49:16:ab:1e:72:7c:fc:d4:25:fe:17:fb:35:2d:ea:c2:
19:69:5e:19:ef:5f:2e:16:cf:ee:10:d6:b4:bb:8a:d7:59:b4:
20:84:b6:24:5d:bb:27:e1:3a:be:dc:64:f7:39:5d:de:d8:8a:
8f:1d:0a:84:a2:55:f8:cf:92:dd:3d:ed:9d:52:26:61:63:1b:
44:da:39:50:01:7a:3e:ae:4a:60:11:3b:cb:9e:34:2f:cf:77:
41:9b:a4:2e:c7:ed:a8:55:18:8f:58:5a:9a:ba:75:a4:0a:cd:
40:01:39:b0:ae:10:19:1b:dd:83:54:c1:65:ff:de:e9:b5:5c:
92:4d:7e:bc
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgIUM2HOkAs5fFZbyBM4LVK775IVhk4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYzRjZTdkODkwMjQwNWJhNDU5OGY4NGI2YTQxYzI3ZDcy
MjgzNGIxYzAeFw0yNTA1MDIxNjI5MTdaFw0yNjA1MDExNjM0MTdaMDMxMTAvBgNV
BAMTKDc4MDVBMDhDOEJFNEVGNDUxMkQxRDJCNTk2NzcwM0JDNDZGQzJBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTJ0imuqDTZxvdxBmJYeAmlF+o
dLpfz+DoFkt8kw9aYRZO9LvuJEId1Qu0ZFrp/ZyR00myQ2x/vKHByqjvajqPQUah
BlOIDUquGwmo9w6aktVxnpX3SpNno+hz7r/d7hOBm/dfwZn5ow/yrlYnT0x/b5oN
gmunbZy7Qb33izEDkFxKjCkVEtyS+a8eauAmUlVzqKSA9KHgkPqh0ma1xsG4e9ev
zpQ6KDzTqHZtVLKNm7uF/MIyEL9izMHEKOcwAn661XY6MMqehOt7VcgInZLjbPeM
Nnmobas2lJ2mbQ9w6c6dyAnSgEkQZwGQAYuLmTBuyegRhI7EBAhJMC5RBLu/AgMB
AAGjggIjMIICHzAdBgNVHQ4EFgQUeAWgjIvk70US0dK1lncDvEb8KpQwHwYDVR0j
BBgwFoAUxM59iQJAW6RZj4S2pBwn1yKDSxwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV
HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvODRkNTE4MTAtMTk4Ny00NzAxLThmMWYtODQyNTExMTk2
NGY0LzAvQzRDRTdEODkwMjQwNUJBNDU5OEY4NEI2QTQxQzI3RDcyMjgzNEIxQy5j
cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw
ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3hNNTlpUUpBVzZSWmo0UzJwQnduMXlL
RFN4dy5jZXIwegYIKwYBBQUHAQsEbjBsMGoGCCsGAQUFBzALhl5yc3luYzovL3Jz
eW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5Lzg0ZDUxODEwLTE5ODct
NDcwMS04ZjFmLTg0MjUxMTE5NjRmNC8wL0FTNDQzNTUucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwOQYIKwYBBQUHAQcBAf8EKjAoMAwEAgABMAYDBADBOacw
GAQCAAIwEgMHACoPhcAAAgMHACoPhcAEADANBgkqhkiG9w0BAQsFAAOCAQEAb/OZ
nQnllz9Lmkuy8nUZ1o8aObuuED1mJK8w0a0hxBBuOhgIHeOTIpWQpc/bTXQxVB0b
yfNLSt6/dUo3+1R1gv5rt2rm8SUZDmqCu/RCja9lzkCpBHS5fCy55M1EDeP0D407
E7rjfTnJ6ZuudbZZiaNUVmI6+0nSoIUIMmNikP5JFqsecnz81CX+F/s1LerCGWle
Ge9fLhbP7hDWtLuK11m0IIS2JF27J+E6vtxk9zld3tiKjx0KhKJV+M+S3T3tnVIm
YWMbRNo5UAF6Pq5KYBE7y540L893QZukLsftqFUYj1hamrp1pArNQAE5sK4QGRvd
g1TBZf/e6bVckk1+vA==
-----END CERTIFICATE-----
Generated at Sat May 10 06:31:06 2025 by rpki-client