Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GHysqOOJ9hnn3EimxN74sslMygw.roa
File: GHysqOOJ9hnn3EimxN74sslMygw.roa (raw, json)
Hash identifier: v04IWZ/YL2MGAkD6EfYcHyNNKyzBJZv6B31Xkr8iQMI=
Subject key identifier: 18:7C:AC:A8:E3:89:F6:19:E7:DC:48:A6:C4:DE:F8:B2:C9:4C:CA:0C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824A47507D6F885C87015049E08A267
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GHysqOOJ9hnn3EimxN74sslMygw.roa
Signing time: Thu 02 Jan 2025 17:51:17 +0000
ROA not before: Thu 02 Jan 2025 17:51:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199785
IP address blocks: 87.120.36.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:a4:75:07:d6:f8:85:c8:70:15:04:9e:08:a2:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=187caca8e389f619e7dc48a6c4def8b2c94cca0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:86:85:41:a7:b9:f4:b6:bf:49:23:67:9d:d6:
33:5e:31:f5:97:f2:21:42:a3:66:06:99:ab:ad:e4:
c0:ff:04:d6:c3:8a:96:32:8c:32:ee:b4:c8:a8:b8:
fd:bf:a7:f5:54:22:9a:b9:7f:76:bc:c4:3d:ef:9d:
a6:09:d0:85:d9:bc:55:f1:ca:d4:2b:c4:81:bc:be:
d2:eb:73:7c:7c:22:46:5f:12:fc:e4:e5:b5:e6:31:
80:57:1b:28:99:f4:d2:cf:9d:e3:4f:33:6e:04:79:
88:c0:10:86:9e:f3:2c:74:fa:81:9f:1d:0a:33:d3:
ba:95:39:ee:89:12:28:b0:71:72:43:43:ac:2b:c2:
05:b4:05:66:6d:ad:60:52:e5:1c:4b:54:a6:c4:fd:
3a:ef:95:32:ef:d5:fa:bf:b3:a1:d9:5f:de:08:70:
e2:b5:81:e8:7b:ed:82:90:9f:fb:0b:b2:99:ff:27:
cc:40:8b:60:e3:d6:4c:03:5b:91:10:71:81:cd:4c:
dc:94:24:ca:11:36:29:d1:87:46:6a:4f:d9:3d:7f:
43:5f:91:9b:70:fd:9a:e6:75:7d:fa:4b:c8:21:67:
c0:a9:cf:55:6a:6b:a7:f0:70:f6:44:2e:0f:ab:f2:
76:a5:7c:f4:aa:a0:35:05:ad:c2:ac:d1:78:f2:a3:
0b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7C:AC:A8:E3:89:F6:19:E7:DC:48:A6:C4:DE:F8:B2:C9:4C:CA:0C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/GHysqOOJ9hnn3EimxN74sslMygw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.36.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f4:c8:e7:22:81:27:89:e5:19:eb:24:b0:46:f2:ba:4f:70:
01:e4:1a:25:8f:57:0c:26:0d:88:43:96:64:9d:af:72:ed:2c:
8d:bd:07:7c:70:ae:7d:5f:78:f5:44:8e:9d:a0:28:86:44:07:
29:50:be:24:7b:c6:17:01:b0:7b:b7:70:d2:54:89:78:54:84:
40:d4:4a:47:ec:a8:88:17:35:e6:81:bc:51:8b:cc:83:b1:8f:
8a:51:37:b6:fd:1b:f3:b7:c5:40:e0:4c:26:9b:1d:48:97:d3:
93:5a:5f:c1:c4:dd:77:32:dc:56:4e:49:0f:ce:cc:63:51:00:
52:45:b3:77:3a:17:44:d2:7f:a6:fc:36:f4:28:03:f5:8c:3b:
e6:b6:df:f7:4b:ae:ba:d3:e5:02:01:5c:97:f6:ef:ef:f1:ca:
10:1c:5f:2f:46:da:c2:7e:03:1d:20:01:32:94:17:ce:ea:7b:
b6:9f:40:20:82:8e:fc:ec:f3:e8:ce:3a:e0:d6:9a:79:45:a7:
67:ae:67:08:64:c8:2e:1f:20:38:1b:3b:82:d2:83:e5:ba:ef:
26:20:37:92:f2:cd:f8:1e:07:a7:6f:24:61:29:57:b3:73:2c:
3f:74:d4:7a:5b:32:df:9d:d9:ce:1e:b6:c8:cf:d3:15:d6:97:
f7:0c:6d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:05:43 2025 by rpki-client