Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-QWNFcoNWc_Xq_mCtZPdd-ue0Y.roa
File: 1-QWNFcoNWc_Xq_mCtZPdd-ue0Y.roa (raw, json)
Hash identifier: ib83rG2gHDnuzzwKNlsUtkDzpQe0pSyG56A8SURRMss=
Subject key identifier: D7:E4:16:34:57:28:35:67:3F:5E:AF:E6:0A:D6:4F:75:DF:AE:7B:46
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428245A2DDFD71D2C13B00FCEF0B8986E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-QWNFcoNWc_Xq_mCtZPdd-ue0Y.roa
Signing time: Thu 02 Jan 2025 17:50:58 +0000
ROA not before: Thu 02 Jan 2025 17:50:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8717
IP address blocks: 87.121.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:5a:2d:df:d7:1d:2c:13:b0:0f:ce:f0:b8:98:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7e41634572835673f5eafe60ad64f75dfae7b46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:24:9a:35:66:8e:f7:fb:07:5f:3f:bf:db:45:
16:ab:96:9b:6d:8e:36:19:a8:ac:7e:f6:1e:66:7d:
05:92:82:b4:3d:79:71:ce:15:1b:f6:e9:64:24:c4:
6e:5e:00:42:1f:2d:cf:fb:00:b4:00:9d:3e:fe:7d:
85:81:15:ed:9b:ed:a3:44:22:31:10:97:33:f3:d7:
a9:b6:d3:b0:f4:97:54:55:81:a3:d2:77:84:bb:56:
20:1e:35:42:d8:ba:3e:48:2c:8e:1f:f6:b7:3f:ef:
e2:2a:3c:5c:ad:dd:02:16:68:e3:d3:8a:3f:6e:e1:
3d:66:f1:55:b8:ca:ff:a3:a4:c5:6e:23:b3:f0:90:
cd:e4:0d:e3:e4:c9:35:36:98:bf:43:b4:ec:cc:fe:
9e:ca:0e:55:22:58:b7:43:62:e8:56:f0:f0:09:9b:
ed:76:71:42:05:6b:02:7d:56:63:d7:80:64:b5:e3:
6e:e3:88:7b:6c:f4:25:66:c3:e6:f8:88:12:5f:4c:
32:7b:97:f2:c9:db:8c:a4:5e:3c:5d:82:5e:26:dd:
ec:b5:7a:7d:a2:1f:27:40:70:e9:19:0d:e7:7e:a1:
15:83:a5:0b:2f:45:5e:ba:2e:2c:a3:81:fc:f3:64:
20:6c:78:8b:28:3f:2a:04:df:40:dc:57:34:b9:1c:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E4:16:34:57:28:35:67:3F:5E:AF:E6:0A:D6:4F:75:DF:AE:7B:46
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-QWNFcoNWc_Xq_mCtZPdd-ue0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.223.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:55:15:6c:28:b4:25:80:6a:1f:8e:3d:27:29:37:e5:b7:df:
ce:98:9b:4e:f8:f5:d5:19:8e:ac:dc:4a:30:ea:09:29:16:c6:
0a:c5:ce:d7:2e:72:32:dc:b5:1e:d7:4c:92:10:a0:f1:bf:53:
28:03:fc:39:92:38:f6:a9:56:0d:07:5a:b0:e8:32:23:37:64:
b7:ff:14:bd:06:dc:e7:8f:7d:22:24:2d:a8:1f:ea:a2:08:8c:
93:5b:ce:90:81:70:37:4d:3b:6d:cc:30:2a:e5:ff:20:1e:04:
9c:3a:87:f2:75:f1:b1:87:de:0d:cf:69:e9:11:9f:9e:e2:a8:
32:24:7f:6c:72:e4:4d:9d:74:df:fb:fa:76:7a:a5:be:dd:d3:
05:d8:6a:b2:49:83:10:1c:48:0f:32:eb:e2:ee:9c:3d:f7:fb:
52:5b:94:9d:cd:d2:0f:1b:e0:e8:ee:59:3f:85:8b:1a:f9:5e:
c0:64:e3:d6:40:b6:58:f4:4c:f0:de:0e:a7:20:36:f2:28:4c:
5f:80:a9:7b:73:a0:4f:30:dd:95:a2:08:0a:b3:2c:ee:ee:c8:
f2:e1:e4:f4:24:41:38:02:4c:05:0c:60:f6:f8:8e:f2:87:e3:
a2:9a:fb:8f:c7:41:61:3e:b9:33:de:87:ed:1e:f4:ca:73:8d:
27:30:d7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:02 2025 by rpki-client