Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SZTyw2FhRMgZlQVHJDLAAJEObWU.roa
File: SZTyw2FhRMgZlQVHJDLAAJEObWU.roa (raw, json)
Hash identifier: TORBgEnpnMOMzV3/yKJxOEyYAoo6TYdb2j/piXaqais=
Subject key identifier: 49:94:F2:C3:61:61:44:C8:19:95:05:47:24:32:C0:00:91:0E:6D:65
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282468A7A17D02F990DE3EA051A58C96
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SZTyw2FhRMgZlQVHJDLAAJEObWU.roa
Signing time: Thu 02 Jan 2025 17:51:02 +0000
ROA not before: Thu 02 Jan 2025 17:51:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25224
IP address blocks: 87.120.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:68:a7:a1:7d:02:f9:90:de:3e:a0:51:a5:8c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4994f2c3616144c8199505472432c000910e6d65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:10:7e:96:0d:75:c5:57:77:35:21:d1:76:
64:9f:20:cd:9d:82:7c:81:3e:65:bc:09:09:42:98:
5c:d4:4e:2a:7d:fe:78:88:77:2f:a1:71:36:e6:c6:
47:5e:36:1d:62:86:56:95:7f:27:31:b6:14:6e:52:
8b:6e:47:fd:62:66:a1:ea:8f:57:b8:53:6c:c8:e4:
d9:85:de:cb:3d:47:ca:90:93:ed:ce:13:ef:be:07:
6b:af:9e:76:f5:3b:2d:b7:6a:0f:aa:da:e5:97:e1:
63:9e:18:2f:d5:39:b4:50:2b:4a:ad:43:cc:75:98:
a4:fc:54:10:3a:6a:dd:4e:10:d3:46:78:7b:2a:40:
f3:a3:85:77:cc:15:ef:33:44:a7:ca:44:1d:32:a4:
51:b5:94:cf:a9:17:b6:46:25:10:35:b2:40:65:3d:
c8:6c:91:07:d1:27:f5:f1:72:54:02:48:45:bd:82:
b3:7a:65:d3:3c:0b:ce:fb:75:08:4d:42:3f:82:8f:
8a:6d:5f:7f:24:d5:79:a4:5c:fe:53:66:97:c0:fd:
b4:ff:34:8a:56:d3:50:c7:56:f3:ec:42:e1:8d:28:
e9:23:b1:9a:ea:2a:10:f1:78:cd:b5:39:f2:a8:ec:
cd:c3:c1:07:d1:c8:d0:a9:50:d0:c7:ac:00:07:47:
70:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:94:F2:C3:61:61:44:C8:19:95:05:47:24:32:C0:00:91:0E:6D:65
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/SZTyw2FhRMgZlQVHJDLAAJEObWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.42.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:85:25:1a:fd:db:c5:7d:f6:a4:88:66:71:be:eb:3c:ad:47:
fb:c9:b2:7a:a0:af:8a:03:36:ae:75:8c:d7:14:f7:10:a9:2d:
1c:00:a0:b4:6f:7d:f5:a8:cc:90:ae:8c:b4:4d:66:4f:50:95:
15:35:4a:f3:f7:ca:63:ac:81:27:3b:36:6e:0d:a0:5e:46:57:
fc:e2:83:0f:0a:09:be:72:22:ce:ef:fa:e8:bf:b2:f4:f2:d1:
ec:c0:27:85:4d:43:30:68:67:87:21:9f:8a:99:54:61:9f:57:
e9:60:d6:a2:a9:1a:0d:48:a7:31:f3:61:65:e1:17:3b:31:5a:
dc:34:fb:58:1e:89:63:24:db:a2:92:be:6c:1a:ab:c7:3d:b0:
88:ef:8e:dd:c8:df:97:81:15:17:f8:f1:3b:3e:54:0d:37:bb:
46:61:a6:c0:c7:a0:b0:d9:eb:e8:95:2b:c0:b7:aa:84:37:e8:
ce:b4:7d:43:d2:49:74:fe:ef:73:c4:ee:2f:4b:b7:f1:f3:56:
81:71:c6:ea:2b:60:e9:24:c5:7e:a3:63:22:79:f8:74:df:02:
12:4b:c4:dd:09:6d:8d:3c:88:0a:c1:43:d6:9f:82:9f:25:a8:
26:8f:6e:93:f4:e9:fb:44:63:2d:59:ca:31:c5:ea:29:dc:be:
54:e8:68:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:37 2025 by rpki-client