Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/22xPnkQrMRVtQAjJFBfwBXt-g80.roa
File: 22xPnkQrMRVtQAjJFBfwBXt-g80.roa (raw, json)
Hash identifier: AXYvz8bFpW9uTpIheiV0QW7dDbpVv2KWmj64d94yYuU=
Subject key identifier: DB:6C:4F:9E:44:2B:31:15:6D:40:08:C9:14:17:F0:05:7B:7E:83:CD
Certificate issuer: /CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Certificate serial: 0194258F4C5A32521EAF3A6C5E3B791CCEC2
Authority key identifier: 4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/22xPnkQrMRVtQAjJFBfwBXt-g80.roa
Signing time: Thu 02 Jan 2025 05:48:55 +0000
ROA not before: Thu 02 Jan 2025 05:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49607
IP address blocks: 81.19.111.0/24 maxlen: 24
83.217.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Mar 2025 03:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4c:5a:32:52:1e:af:3a:6c:5e:3b:79:1c:ce:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d5a2921fbeb8a448e7ae1ec5a11b8ab898d22fd
Validity
Not Before: Jan 2 05:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=db6c4f9e442b31156d4008c91417f0057b7e83cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cd:56:a0:14:d3:42:bd:02:5a:fb:aa:0d:73:
3a:ae:5a:ff:34:21:d8:03:f8:e3:43:64:e0:7f:b7:
3b:f5:99:92:a0:17:ce:6c:cc:8e:c8:3a:cb:bd:c2:
eb:dc:18:ce:41:95:91:80:eb:64:dc:4e:d6:3c:7b:
55:90:cc:4f:15:bd:11:e0:88:3e:ed:f9:a7:be:11:
04:ad:b7:b5:18:40:34:fc:c2:15:fa:ec:6e:83:41:
c8:56:f5:44:7d:bb:8c:50:95:38:c2:ed:be:d5:d2:
04:2c:2c:5e:b4:5c:d6:ef:f1:66:dc:43:b0:0a:26:
59:74:db:9e:fb:61:54:8a:47:4a:a4:2d:1f:26:a4:
72:01:ba:8b:cd:30:18:48:50:e0:02:85:34:7b:61:
fb:15:e2:56:27:14:7d:98:9e:db:2c:07:8d:b5:bd:
e6:29:3c:3d:94:ce:19:6d:16:f6:01:b8:64:cd:52:
e6:11:0d:fe:fc:48:39:94:44:c7:62:70:9e:fc:43:
17:0a:25:dd:d4:21:a2:03:ab:59:08:90:b7:d6:73:
73:e4:36:97:d0:51:b0:4a:53:53:d6:6d:e1:95:19:
80:c7:39:01:f7:fb:cc:8a:4e:a9:62:23:01:0a:9c:
24:b2:ce:77:f2:11:79:a7:7e:9a:f0:7d:4d:69:4d:
75:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:6C:4F:9E:44:2B:31:15:6D:40:08:C9:14:17:F0:05:7B:7E:83:CD
X509v3 Authority Key Identifier:
keyid:4D:5A:29:21:FB:EB:8A:44:8E:7A:E1:EC:5A:11:B8:AB:89:8D:22:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVopIfvrikSOeuHsWhG4q4mNIv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/22xPnkQrMRVtQAjJFBfwBXt-g80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/ee8b98-7240-4b62-acc5-780a25cd0dd9/1/TVopIfvrikSOeuHsWhG4q4mNIv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.19.111.0/24
83.217.232.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1d:7e:9d:43:64:65:83:d8:06:11:33:bc:64:05:fe:c3:86:
11:8c:97:bb:8b:a0:4c:13:e1:f0:d4:ae:7f:27:12:b4:91:55:
89:84:6e:54:cc:1c:2c:e4:5f:1b:d4:5e:b2:ec:7d:a0:87:21:
e6:60:24:ca:cd:f1:25:3f:52:0e:2d:ad:b4:c8:43:a9:c9:ba:
e2:0e:ae:6a:9a:1a:c2:96:64:1f:f4:af:2f:71:7c:96:49:97:
38:18:eb:2d:f8:28:67:a8:e5:ad:9a:5e:87:e7:46:20:c7:2b:
e8:80:a7:75:f9:fa:b0:4c:48:19:ac:d9:b5:18:b6:dd:ea:3b:
5f:d6:a0:55:54:52:e1:61:ca:02:d7:cd:69:aa:73:0b:11:ed:
94:96:ae:86:bc:d0:77:bc:6e:be:99:16:cb:d2:ac:44:8f:12:
08:53:b1:2f:ab:4d:f1:59:00:8b:e4:64:ed:fd:f1:a3:ee:6e:
f9:ef:64:bb:03:61:43:54:99:2f:fa:53:6e:f2:62:1d:0b:a6:
b1:e1:56:0d:38:fb:6b:21:21:25:c4:2b:92:45:ec:5f:fc:8f:
39:fc:ac:9d:4e:aa:6e:c9:84:c7:f5:77:18:24:4d:bc:90:08:
e3:12:7c:f5:0f:23:e1:d6:a4:a0:cc:bf:b0:be:06:6b:54:24:
23:11:a7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:50:40 2025 by rpki-client