Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5ma4J1GhPZY6ONVTosMJtc48E08.roa
File: 5ma4J1GhPZY6ONVTosMJtc48E08.roa (raw, json)
Hash identifier: Fc9RTG86aJu9HWkHZDuA9/jpYufYEmU/nBj83QS3t10=
Subject key identifier: E6:66:B8:27:51:A1:3D:96:3A:38:D5:53:A2:C3:09:B5:CE:3C:13:4F
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0197EF6DF08712A1E1917F7B339B937F0D02
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5ma4J1GhPZY6ONVTosMJtc48E08.roa
Signing time: Wed 09 Jul 2025 13:44:08 +0000
ROA not before: Wed 09 Jul 2025 13:44:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201949
IP address blocks: 87.120.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ef:6d:f0:87:12:a1:e1:91:7f:7b:33:9b:93:7f:0d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 9 13:44:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e666b82751a13d963a38d553a2c309b5ce3c134f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:45:64:8d:db:a8:ae:3a:6f:17:bb:53:5d:38:
67:98:1f:95:0a:59:87:69:e8:c7:2a:3f:55:9e:52:
1d:a0:d8:22:26:16:b8:e3:3e:97:b1:7e:cf:23:f6:
88:ff:3d:43:e6:ee:64:32:23:d9:7c:aa:7e:ae:d8:
83:36:a1:0c:b0:35:45:59:2b:22:d1:ad:35:93:30:
59:4b:ed:f5:30:57:ec:72:e2:5c:f2:f9:dc:ca:ac:
13:cb:82:0f:c3:9b:ac:36:b2:1a:24:66:86:a9:f5:
d9:cb:f4:62:be:88:17:a8:76:ef:d9:09:b5:7d:10:
0e:c7:ff:63:bb:47:7a:73:17:67:8f:1e:bb:83:83:
3b:8a:01:c6:80:27:72:06:b4:c2:44:7e:90:d6:b3:
4e:e3:0f:29:42:cb:55:50:3a:1a:9d:e5:26:da:2f:
5b:01:3c:4d:44:8c:f6:2a:e4:ea:96:9e:a7:51:ac:
7b:89:e9:a2:e9:d6:f9:7b:c4:23:d3:03:e0:20:a3:
66:f6:ab:3b:1c:e2:c8:61:f3:71:ca:93:69:77:5d:
40:77:e9:a2:a6:dc:85:9a:2b:e2:99:1a:41:af:7f:
68:00:a5:c5:5e:dc:ca:e7:d1:cf:87:1f:07:f9:03:
20:4a:f4:39:87:82:26:51:61:0c:45:a6:be:54:85:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:66:B8:27:51:A1:3D:96:3A:38:D5:53:A2:C3:09:B5:CE:3C:13:4F
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/5ma4J1GhPZY6ONVTosMJtc48E08.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.33.0/24
Signature Algorithm: sha256WithRSAEncryption
00:f7:49:9d:e7:1b:98:b2:13:2e:36:31:32:58:fd:70:f7:df:
89:3e:bb:4d:81:87:0e:d1:48:6c:c0:8e:f1:b2:9f:0c:0f:0c:
47:2e:34:f4:3b:ab:bd:f6:65:cf:03:34:c6:47:62:85:59:4c:
1b:15:e0:5f:46:53:fd:ef:2b:c1:c6:da:d9:c4:61:11:97:42:
3b:0c:1e:e4:bf:94:02:16:e7:81:d3:8f:da:71:5b:04:b7:ad:
cf:aa:37:76:17:34:a6:2c:f5:f9:52:98:a0:fa:f0:9f:21:c7:
71:ba:6d:c0:7a:d9:05:7f:17:2a:98:ff:6d:ee:4a:f7:d3:0d:
3a:e9:df:56:76:41:1a:b1:63:b6:17:63:74:ff:fe:34:95:5c:
0b:87:63:86:87:63:a3:50:3a:7f:bd:ed:52:ee:d3:03:df:d5:
81:53:1b:35:47:af:21:10:57:25:a5:16:d8:af:7e:f6:df:37:
63:9e:cd:44:d3:80:d5:de:ee:ae:0f:ff:db:96:6c:f7:f4:07:
9e:a7:8d:03:b1:8e:82:99:5d:bc:42:12:37:6f:c9:bc:1b:35:
99:65:0a:67:99:44:5f:82:26:6e:a3:a8:2f:29:27:b8:94:9a:
eb:08:84:56:6f:06:16:57:1e:51:b3:00:39:45:0a:6b:15:7e:
51:ba:82:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 02:04:29 2025 by rpki-client