Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RSy5_tsYdHopsjmcNiDtYTVMTb8.roa
File: RSy5_tsYdHopsjmcNiDtYTVMTb8.roa (raw, json)
Hash identifier: LKXlTPXai3RKC+zCnzOQ9eWZRYpOzXWWOBu1r8yWnMQ=
Subject key identifier: 45:2C:B9:FE:DB:18:74:7A:29:B2:39:9C:36:20:ED:61:35:4C:4D:BF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824C44532854D064A159834E6CBE43A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RSy5_tsYdHopsjmcNiDtYTVMTb8.roa
Signing time: Thu 02 Jan 2025 17:51:25 +0000
ROA not before: Thu 02 Jan 2025 17:51:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214295
IP address blocks: 87.120.93.0/24 maxlen: 24
171.22.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Feb 2025 02:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:c4:45:32:85:4d:06:4a:15:98:34:e6:cb:e4:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=452cb9fedb18747a29b2399c3620ed61354c4dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bc:77:a8:45:4c:e1:41:c1:2e:09:81:6b:f6:
8e:3b:28:eb:82:0c:02:29:36:5b:a1:4b:3b:fb:a3:
96:87:f3:35:05:18:7c:d0:51:8e:cb:c2:88:1e:0c:
d2:41:19:a2:7a:2b:57:c6:1a:f6:4e:1a:0c:68:e7:
2d:45:b0:fa:19:67:59:2f:4f:42:9c:30:2a:45:42:
c5:e2:9d:6d:36:10:16:b9:89:6d:a2:73:81:3f:f7:
97:2e:a5:2b:fc:e5:0c:23:f3:23:9a:fc:2c:7c:6f:
eb:1f:23:d1:73:49:5d:e6:0c:e7:f4:39:be:2f:c7:
1c:5f:7d:27:3c:68:49:fa:9e:f9:f8:3d:08:39:0e:
ce:06:4e:d4:46:61:a5:f1:8a:de:0e:70:c5:0d:44:
b5:2b:a6:27:3b:7e:05:20:b2:2b:20:44:32:9c:a3:
0e:d7:e0:f8:c8:75:df:4b:77:af:1e:98:da:7f:75:
98:f4:27:53:06:47:25:d8:1d:d7:d4:ab:a9:ad:ff:
38:23:aa:ce:2f:fb:04:38:81:4f:35:cb:23:1f:0c:
7e:2d:7a:ef:17:29:f3:5e:c4:5b:83:91:3f:63:aa:
5a:65:be:73:65:2c:38:b4:ba:9f:af:c0:3b:e7:0c:
dc:94:7a:70:2b:92:a6:78:7b:8b:77:92:0b:0e:c5:
4e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2C:B9:FE:DB:18:74:7A:29:B2:39:9C:36:20:ED:61:35:4C:4D:BF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/RSy5_tsYdHopsjmcNiDtYTVMTb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.93.0/24
171.22.28.0/24
Signature Algorithm: sha256WithRSAEncryption
08:0b:4d:d7:ee:38:e5:83:1c:4a:8e:5a:08:db:5e:cd:4f:4c:
19:c6:40:c6:52:a7:a8:81:85:b9:47:5c:05:e3:ed:9f:10:af:
a3:34:7c:7c:51:34:aa:5b:73:3d:06:9e:22:84:34:9f:d4:08:
63:3c:41:7d:7c:c2:58:94:8c:fd:e4:ad:0f:a9:da:23:bd:14:
22:73:7f:1d:a6:57:91:63:02:7f:38:a1:d9:29:46:13:71:66:
75:da:a4:81:36:eb:44:7c:7b:74:0b:64:6e:80:52:21:d3:44:
4d:30:94:00:a5:1c:1a:91:b7:20:78:7c:68:04:34:20:f5:b9:
64:83:09:05:8e:82:e7:fa:ce:80:8b:c9:b1:16:90:72:41:a6:
51:21:49:34:dc:2c:9a:61:0b:77:29:0c:f2:9c:dc:e8:d4:80:
0b:65:cf:b7:b8:3e:0c:7b:93:0c:bb:f0:63:31:38:d4:24:4b:
16:92:f9:d9:33:2c:13:df:6c:72:3f:cb:2a:d7:ce:b9:e7:29:
69:e1:3b:c7:c2:b5:f0:6f:a1:de:eb:70:fc:c0:93:c3:d3:58:
59:13:9b:8d:e8:1e:43:2b:6d:94:2b:94:39:1b:85:75:7b:ae:
36:f5:7b:2a:5d:11:03:77:30:7c:af:9d:b8:b9:93:6f:81:5d:
ca:d9:5e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:16:59 2025 by rpki-client