Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TcVjdQ2oXN_2Ssw1476wZuxhCVM.roa
File: TcVjdQ2oXN_2Ssw1476wZuxhCVM.roa (raw, json)
Hash identifier: RuZ2YXpkgWqMyuMaVPg2XT3JzcdW+d8XI8QyWPCDF0Q=
Subject key identifier: 4D:C5:63:75:0D:A8:5C:DF:F6:4A:CC:35:E3:BE:B0:66:EC:61:09:53
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01953C9D17BDF6290366C09716FFBB48DBBB
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TcVjdQ2oXN_2Ssw1476wZuxhCVM.roa
Signing time: Tue 25 Feb 2025 10:18:03 +0000
ROA not before: Tue 25 Feb 2025 10:18:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20911
IP address blocks: 45.90.90.0/23 maxlen: 24
84.21.174.0/23 maxlen: 24
87.120.118.0/23 maxlen: 24
87.120.118.0/24 maxlen: 24
87.120.119.0/24 maxlen: 24
87.120.122.0/23 maxlen: 24
87.120.122.0/24 maxlen: 24
87.120.123.0/24 maxlen: 24
87.120.124.0/24 maxlen: 24
92.249.50.0/24 maxlen: 24
93.123.26.0/23 maxlen: 24
95.214.27.0/24 maxlen: 24
193.42.34.0/23 maxlen: 24
194.55.186.0/24 maxlen: 24
194.169.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:3c:9d:17:bd:f6:29:03:66:c0:97:16:ff:bb:48:db:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Feb 25 10:18:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dc563750da85cdff64acc35e3beb066ec610953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:85:ba:6e:a9:61:4c:0c:84:80:9e:b3:ac:8c:
5b:15:5d:c9:13:76:38:99:7d:11:ff:10:ce:cc:a5:
81:30:87:90:c3:10:58:02:dd:6d:56:6a:af:4b:a6:
5c:30:ed:eb:f8:79:f2:73:cb:5a:8d:8b:95:ac:19:
7d:3f:58:ce:72:9b:1e:79:15:34:1a:fe:7d:6c:c1:
be:23:f7:78:36:42:0b:74:cf:7e:04:e2:92:72:1a:
6f:fc:21:84:57:92:44:e9:43:68:8a:60:51:e8:cf:
4a:02:93:e4:4a:e5:50:72:f2:7b:6d:aa:55:91:8e:
16:e4:5f:2c:e2:f5:92:d2:bb:64:c7:5d:77:32:10:
f5:ea:98:22:4f:a7:b8:e0:a1:72:53:f3:f3:49:23:
cb:ca:6b:66:51:a9:34:3c:59:de:1a:d3:2d:eb:1a:
65:57:7f:fd:7d:64:80:ff:e6:7b:9b:5a:fb:ed:f0:
c3:e1:c9:60:f2:74:00:69:49:85:70:18:b4:22:cd:
03:13:52:3a:3b:e4:3d:7c:4d:e9:47:d0:c1:24:86:
ce:aa:69:86:29:49:5c:04:df:9c:05:9b:f9:2c:ea:
7c:02:83:32:29:a7:9c:64:61:b1:7e:76:18:5d:3b:
0f:a7:6c:b6:58:d6:a6:4d:72:0d:ba:d3:a6:68:64:
fa:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C5:63:75:0D:A8:5C:DF:F6:4A:CC:35:E3:BE:B0:66:EC:61:09:53
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/TcVjdQ2oXN_2Ssw1476wZuxhCVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.90.0/23
84.21.174.0/23
87.120.118.0/23
87.120.122.0-87.120.124.255
92.249.50.0/24
93.123.26.0/23
95.214.27.0/24
193.42.34.0/23
194.55.186.0/24
194.169.175.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:40:24:96:d1:81:01:17:dc:58:47:98:29:bb:f0:bb:ce:6a:
92:c1:aa:16:fe:49:0c:be:b0:80:14:e2:57:54:56:c4:14:97:
a5:dd:7d:6b:3a:4f:84:44:84:ca:77:64:9b:0e:d7:c6:0d:20:
7f:53:30:df:cd:b7:dd:0c:20:f4:8d:ee:89:ac:37:c4:19:87:
6e:70:f1:34:e2:3c:3e:5f:56:8a:80:c0:15:c6:cb:1a:33:ff:
ce:70:d1:17:36:f9:b6:7f:da:72:4a:4c:0e:13:0a:be:f1:13:
27:ef:3b:33:66:1a:d6:9b:0f:23:79:fb:ad:c5:02:e2:20:37:
d3:54:82:d0:cd:c1:22:d8:5e:e1:f7:db:12:36:8c:6c:6b:71:
1a:aa:a1:10:ee:13:11:38:da:59:f2:bb:c5:3b:5c:45:a8:6a:
35:a2:09:70:c7:34:95:4c:3c:13:00:74:f3:ad:e4:b6:4f:bb:
40:63:6c:3f:5a:80:05:51:97:1c:65:6f:8e:d6:c1:df:c4:05:
ca:ea:12:67:24:7d:00:d4:ac:91:46:ed:5d:10:59:ca:c7:46:
c9:c8:54:70:b0:2b:73:53:63:19:61:15:ff:14:73:cf:2a:fb:
81:77:d4:26:ed:fe:0b:03:c8:f3:33:5b:13:fb:fb:53:51:dd:
c3:9e:7b:bc
-----BEGIN CERTIFICATE-----
MIIFOzCCBCOgAwIBAgISAZU8nRe99ikDZsCXFv+7SNu7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMjI1MTAxODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGM1NjM3NTBkYTg1Y2RmZjY0YWNjMzVlM2JlYjA2NmVjNjEwOTUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4W6bqlhTAyEgJ6zrIxbFV3JE3Y4
mX0R/xDOzKWBMIeQwxBYAt1tVmqvS6ZcMO3r+Hnyc8tajYuVrBl9P1jOcpseeRU0
Gv59bMG+I/d4NkILdM9+BOKSchpv/CGEV5JE6UNoimBR6M9KApPkSuVQcvJ7bapV
kY4W5F8s4vWS0rtkx113MhD16pgiT6e44KFyU/PzSSPLymtmUak0PFneGtMt6xpl
V3/9fWSA/+Z7m1r77fDD4clg8nQAaUmFcBi0Is0DE1I6O+Q9fE3pR9DBJIbOqmmG
KUlcBN+cBZv5LOp8AoMyKaecZGGxfnYYXTsPp2y2WNamTXINutOmaGT6jQIDAQAB
o4ICRzCCAkMwHQYDVR0OBBYEFE3FY3UNqFzf9krMNeO+sGbsYQlTMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvVGNWamRRMm9YTl8yU3N3MTQ3NndadXhoQ1ZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMF0GCCsGAQUFBwEHAQH/BE4wTDBKBAIAATBEAwQBLVpaAwQB
VBWuAwQBV3h2MAwDBAFXeHoDBABXeHwDBABc+TIDBAFdexoDBABf1hsDBAHBKiID
BADCN7oDBADCqa8wDQYJKoZIhvcNAQELBQADggEBAKNAJJbRgQEX3FhHmCm78LvO
apLBqhb+SQy+sIAU4ldUVsQUl6XdfWs6T4REhMp3ZJsO18YNIH9TMN/Nt90MIPSN
7omsN8QZh25w8TTiPD5fVoqAwBXGyxoz/85w0Rc2+bZ/2nJKTA4TCr7xEyfvOzNm
GtabDyN5+63FAuIgN9NUgtDNwSLYXuH32xI2jGxrcRqqoRDuExE42lnyu8U7XEWo
ajWiCXDHNJVMPBMAdPOt5LZPu0BjbD9agAVRlxxlb47Wwd/EBcrqEmckfQDUrJFG
7V0QWcrHRsnIVHCwK3NTYxlhFf8Uc88q+4F31Cbt/gsDyPMzWxP7+1NR3cOee7w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:01:16 2025 by rpki-client