Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rrg4LM-vy353y_7jxPm6M0haPEk.roa
File: Rrg4LM-vy353y_7jxPm6M0haPEk.roa (raw, json)
Hash identifier: AnRvMJXfbfmr5IX+N6+0/TDn/UeCSc8BKCXHQknjjio=
Subject key identifier: 46:B8:38:2C:CF:AF:CB:7E:77:CB:FE:E3:C4:F9:BA:33:48:5A:3C:49
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01954CD45BB57F0746328A222B4DDBAC0A3E
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rrg4LM-vy353y_7jxPm6M0haPEk.roa
Signing time: Fri 28 Feb 2025 13:52:20 +0000
ROA not before: Fri 28 Feb 2025 13:52:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9028
IP address blocks: 45.144.155.0/24 maxlen: 24
87.121.54.0/24 maxlen: 24
93.123.16.0/24 maxlen: 24
93.123.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:4c:d4:5b:b5:7f:07:46:32:8a:22:2b:4d:db:ac:0a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 28 13:52:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46b8382ccfafcb7e77cbfee3c4f9ba33485a3c49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0a:52:07:d4:ce:a8:b1:b4:09:62:bb:6f:93:
38:db:74:9f:16:3f:b4:9f:cf:cc:7a:a9:d0:d4:e0:
17:5e:ce:8d:0b:a7:1f:22:58:fa:fd:f9:d3:7b:dc:
27:fe:3b:8d:7c:f6:bb:94:23:25:69:7d:77:28:35:
9c:d1:31:fc:9b:46:d9:8f:97:fa:fc:9e:82:1f:f6:
e8:1b:2f:1b:f8:3f:74:9a:be:a8:0d:21:58:95:36:
d6:98:7d:e4:0d:b8:6b:56:90:28:65:94:ba:dd:6a:
5a:f1:15:78:49:b2:d3:d4:89:5b:fa:fc:d4:75:43:
81:39:34:61:8b:29:cb:12:a3:e9:05:f1:48:d3:72:
75:34:cf:87:f6:59:5e:8c:25:2a:dc:f7:b6:0d:9c:
76:1a:bf:cc:6d:89:14:0a:e2:f7:61:d9:31:c4:27:
d2:97:46:78:78:69:63:14:0f:3f:a3:12:17:f3:ed:
e5:34:78:5e:a1:6d:38:a6:04:2f:71:28:ae:8e:c9:
9d:48:97:4e:f2:87:c9:3f:f8:9b:df:2d:a0:e1:a5:
56:be:31:73:0d:23:8d:38:60:64:6e:9c:b2:52:41:
ca:2c:41:04:9d:7d:d6:29:24:0e:d2:74:3b:b4:f6:
1a:73:b8:9a:23:23:e2:1b:3a:db:df:c8:98:8c:3a:
25:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:B8:38:2C:CF:AF:CB:7E:77:CB:FE:E3:C4:F9:BA:33:48:5A:3C:49
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Rrg4LM-vy353y_7jxPm6M0haPEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.155.0/24
87.121.54.0/24
93.123.16.0/24
93.123.22.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:07:f4:4c:5d:1b:75:33:ac:36:4f:aa:0d:f8:d3:b6:36:f9:
52:ac:70:7f:87:a9:72:6b:8a:1f:9d:72:05:78:b2:4b:ac:0d:
e6:8c:92:d0:41:82:b8:70:98:1b:8c:0f:42:f5:78:35:30:3f:
67:95:1c:03:c2:c9:6b:99:48:5d:68:f9:de:d9:0c:68:c4:bc:
7e:22:ad:99:bc:78:1a:d0:40:0c:14:02:d6:19:d4:3a:46:44:
f4:d3:a8:0a:9a:67:de:c2:11:09:ff:12:20:c5:71:f5:0a:44:
00:1f:2e:6d:d9:a2:e2:ad:79:16:24:bc:33:49:a8:e3:24:d7:
c0:dc:89:06:99:10:4f:ce:ba:b8:4e:4a:f7:0e:cf:44:25:16:
1c:32:06:9d:f8:3c:23:22:34:6c:a2:db:d3:97:2f:05:6c:d5:
8b:84:93:bc:66:ba:95:00:57:c1:6e:9c:00:80:88:6a:51:bb:
ab:cc:8c:3c:cc:9b:5f:71:16:aa:fa:51:28:bd:f8:35:e7:c6:
84:86:dd:ba:6f:81:eb:71:17:f6:49:83:a8:0f:4d:e4:b3:2f:
97:02:e4:d8:12:18:0c:22:34:4d:ca:7c:13:e9:08:e7:ae:c6:
d5:c4:ae:7f:be:c9:24:8f:0c:8c:0d:23:bc:41:20:24:7f:67:
27:94:a9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:39 2025 by rpki-client