Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa
File: tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa (raw, json)
Hash identifier: V0DKhUKbNvI4aOcWkxFt+dLkw7F0CNEt1KU67bvkMmI=
Subject key identifier: B6:34:98:83:34:34:6D:88:C2:B7:23:1E:B1:40:A8:A9:C6:11:28:02
Certificate issuer: /CN=c782735aa98d4645d041093a7662a12379503a31
Certificate serial: 0194236A472634CE746495481E6FD84CF0B1
Authority key identifier: C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197263
IP address blocks: 91.225.80.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:47:26:34:ce:74:64:95:48:1e:6f:d8:4c:f0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c782735aa98d4645d041093a7662a12379503a31
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b634988334346d88c2b7231eb140a8a9c6112802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7a:0e:17:4c:7a:99:39:67:01:13:87:72:df:
4d:4e:89:2f:06:0c:42:51:6c:71:c3:63:1d:52:96:
be:f7:10:f8:a8:5f:0b:a0:4f:99:0e:d4:08:b4:2e:
d3:6d:75:31:80:ac:1c:8e:7e:1b:0c:73:df:8f:38:
36:84:2e:d1:9b:37:4e:91:70:c6:2f:a1:73:1d:6f:
d0:45:73:7a:75:08:86:ad:ce:09:49:51:fb:a2:7c:
de:95:21:67:b5:bb:ea:d2:43:53:c5:36:18:17:86:
9e:c0:1c:f5:c9:29:76:ea:ea:f1:94:8f:04:5a:75:
4c:ff:fa:92:d0:67:69:8e:0b:8d:4e:91:91:27:1b:
b1:75:85:11:5b:81:f8:cc:ec:a2:f9:41:e1:ca:af:
d4:1f:18:77:43:cf:69:fe:83:b3:a4:a5:cd:b4:ab:
28:ef:65:d6:11:e7:f5:70:99:62:c7:d6:5e:b9:e8:
d1:93:a7:65:37:73:8b:39:e2:46:c7:05:9d:44:a8:
75:e6:b2:3a:ef:18:d9:27:4c:27:98:e1:6d:eb:13:
9e:65:76:0b:5f:e6:92:6a:81:85:21:40:ec:02:16:
13:b6:5c:b8:6c:88:fa:3f:a1:85:3e:46:65:27:0c:
ab:a6:de:69:93:d1:84:2d:ea:77:52:50:b5:8c:4f:
2d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:34:98:83:34:34:6D:88:C2:B7:23:1E:B1:40:A8:A9:C6:11:28:02
X509v3 Authority Key Identifier:
keyid:C7:82:73:5A:A9:8D:46:45:D0:41:09:3A:76:62:A1:23:79:50:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x4JzWqmNRkXQQQk6dmKhI3lQOjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/tjSYgzQ0bYjCtyMesUCoqcYRKAI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0582ff-7189-4c3c-a45f-b493a9df4f8f/1/x4JzWqmNRkXQQQk6dmKhI3lQOjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.80.0/22
Signature Algorithm: sha256WithRSAEncryption
16:e2:b8:07:97:d0:f8:4b:3f:1b:b3:b1:4a:ad:c0:f0:10:38:
de:ed:99:90:3b:c6:48:4d:b0:15:52:a0:e2:38:7b:75:bd:50:
04:87:3f:9d:bc:e2:98:c6:6f:d7:a5:11:4c:fa:7d:15:dc:cc:
58:44:80:80:52:5e:2c:fd:e7:50:09:3c:93:3c:cd:72:42:75:
8e:9d:28:ab:01:55:9e:15:9b:b7:7f:3c:d3:82:92:52:99:a2:
c7:c8:fc:d4:40:5e:31:b7:3c:90:d1:ee:19:c0:ec:65:7f:cd:
3f:91:c0:58:6c:73:21:54:13:38:04:14:84:3f:87:d9:4a:4f:
54:60:ab:fe:81:e9:7f:18:90:1b:21:a9:04:0e:e4:ce:d0:b3:
5b:f7:51:80:79:dd:cb:03:3c:d9:fa:7a:49:a2:a6:80:37:67:
3d:42:5d:3d:4a:fe:09:9f:78:7f:3f:69:38:6f:80:49:f0:38:
31:29:26:16:34:70:ea:80:44:f3:2b:e3:63:54:9b:35:3c:f8:
b1:9a:ea:05:23:c1:50:3c:d3:e9:42:1d:6b:15:ce:90:03:30:
5e:1d:72:de:31:a8:77:7a:ce:b2:56:b6:21:08:61:02:49:69:
ed:4c:ac:00:09:d2:42:97:a9:b6:b5:2a:e7:71:5c:35:3f:39:
8d:9d:bb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 20:49:19 2025 by rpki-client