Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/RmzxPNQi61FBVP1fRDu5ucEzyaI.roa
File: RmzxPNQi61FBVP1fRDu5ucEzyaI.roa (raw, json)
Hash identifier: hjLdRcYfGc3ePa8Zdnij2feYL0ptV5CZuH2vbOXAvTw=
Subject key identifier: 46:6C:F1:3C:D4:22:EB:51:41:54:FD:5F:44:3B:B9:B9:C1:33:C9:A2
Certificate issuer: /CN=90620638ca1d835650e08ddcf363f10789b53057
Certificate serial: 0194228DC368B840162156D59641AAA90F4C
Authority key identifier: 90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/RmzxPNQi61FBVP1fRDu5ucEzyaI.roa
Signing time: Wed 01 Jan 2025 15:48:23 +0000
ROA not before: Wed 01 Jan 2025 15:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2687
IP address blocks: 87.237.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 21:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:c3:68:b8:40:16:21:56:d5:96:41:aa:a9:0f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90620638ca1d835650e08ddcf363f10789b53057
Validity
Not Before: Jan 1 15:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=466cf13cd422eb514154fd5f443bb9b9c133c9a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:82:3b:6c:66:5a:ca:1d:7e:c5:11:c8:46:07:
9a:07:a3:1c:5e:54:cf:74:25:ac:7b:2c:4a:fd:e6:
95:a4:30:b5:40:4a:0d:2a:9b:12:40:79:aa:ef:74:
a7:77:44:92:f7:ee:94:36:88:3a:58:8e:78:8f:6d:
92:03:b1:4c:16:3f:58:82:55:6f:6a:c5:0d:4d:68:
be:53:fe:31:e5:b8:f6:b5:6a:63:52:43:cf:bb:ec:
11:f4:99:d7:d6:2c:10:91:d5:fe:3b:3d:64:fe:01:
ab:e7:ce:82:87:0f:ff:98:9f:7f:62:31:65:77:e3:
7e:e7:f6:10:cc:f9:e7:c5:be:c8:6d:fd:4c:16:16:
1e:4b:f8:49:6f:32:7d:8a:79:6b:2a:69:aa:26:fc:
04:f1:66:6e:a9:61:ce:4c:2f:fd:7a:8e:09:9e:ac:
d3:61:fe:51:bf:51:ab:ce:52:75:bc:49:5e:fb:7f:
84:f5:88:cb:7e:de:46:4b:12:ca:a3:7a:b2:49:7c:
4e:64:ef:35:a1:e9:6d:0f:2a:20:90:cc:8b:37:09:
22:af:12:d8:c5:73:01:fc:ac:8f:e9:3d:9e:68:a3:
59:90:ed:a1:8c:92:b7:63:79:01:c5:e3:0c:1c:b7:
82:ac:8c:69:a6:45:e6:6b:d1:6d:9b:44:90:41:de:
1a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:6C:F1:3C:D4:22:EB:51:41:54:FD:5F:44:3B:B9:B9:C1:33:C9:A2
X509v3 Authority Key Identifier:
keyid:90:62:06:38:CA:1D:83:56:50:E0:8D:DC:F3:63:F1:07:89:B5:30:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kGIGOModg1ZQ4I3c82PxB4m1MFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/RmzxPNQi61FBVP1fRDu5ucEzyaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/41af2d-f3de-45d5-941c-c43ac429e53f/1/kGIGOModg1ZQ4I3c82PxB4m1MFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.220.0/24
Signature Algorithm: sha256WithRSAEncryption
25:85:92:29:71:8d:6e:de:4c:a0:5b:e9:e9:b4:89:78:38:f6:
56:b5:38:d5:ac:e9:83:ae:00:c2:73:71:f3:5f:a5:4f:f1:0f:
39:60:91:6d:17:bf:a9:47:98:42:7f:a6:69:1f:b0:0a:da:b3:
b3:eb:fe:5a:a9:45:5e:dd:80:90:97:d9:02:a4:a0:6c:c2:60:
98:11:fc:c5:ef:6f:06:ab:59:40:9b:0d:09:b9:11:39:22:52:
86:51:f2:39:02:1b:b0:8f:ec:6d:cd:30:bb:d7:7b:61:7f:3f:
a7:04:39:12:4d:fd:50:5d:ed:55:68:ec:5f:b9:58:a0:42:62:
ed:85:69:58:87:53:82:ae:56:55:46:7c:12:a3:e9:39:17:19:
e7:8f:24:f4:32:05:e0:7e:5f:da:ea:17:a3:07:4e:f2:7f:27:
cc:63:18:b3:ef:85:f7:5b:8e:21:1c:0c:08:57:e5:e7:12:e4:
fc:43:2e:51:a1:87:12:84:04:b1:3b:0d:fe:cc:4c:81:6b:ed:
34:ec:a7:ec:95:3d:28:a5:b2:f1:72:f1:92:0f:1c:9c:16:d7:
90:25:cd:87:fc:2d:87:43:dd:09:46:0e:ef:25:c5:e1:ae:31:
60:33:a8:ed:a2:8a:b6:9a:7f:fd:b3:bc:16:98:49:ef:06:57:
2f:76:d8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:19:15 2025 by rpki-client