Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_CGrzoHjyFf9M4DFuUwW5MeUMzw.roa
File: _CGrzoHjyFf9M4DFuUwW5MeUMzw.roa (raw, json)
Hash identifier: x1UxRxm/tIEp6H1j5CWmUsC6wa6GzxxtIA7L62yCY20=
Subject key identifier: FC:21:AB:CE:81:E3:C8:57:FD:33:80:C5:B9:4C:16:E4:C7:94:33:3C
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824B884E55A14F635CC14D5BFF9B553
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_CGrzoHjyFf9M4DFuUwW5MeUMzw.roa
Signing time: Thu 02 Jan 2025 17:51:22 +0000
ROA not before: Thu 02 Jan 2025 17:51:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209333
IP address blocks: 212.73.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:b8:84:e5:5a:14:f6:35:cc:14:d5:bf:f9:b5:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc21abce81e3c857fd3380c5b94c16e4c794333c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:84:b8:52:5d:25:94:f7:4d:d7:92:eb:36:07:
2d:14:b2:9a:2e:47:e0:6e:5e:1c:5d:e7:74:42:d0:
a9:21:50:f1:ce:00:0c:50:07:29:e6:08:3a:79:7f:
78:ba:3f:cc:61:e5:96:8e:27:0b:1e:17:b5:d1:28:
63:89:1e:de:86:b8:c1:3a:9b:17:09:b2:5c:22:3f:
77:d1:37:16:23:50:b6:fa:f6:12:f6:18:e2:30:95:
cc:25:af:52:70:bf:95:b2:fe:62:12:d2:ac:dc:bc:
ef:9f:ee:3b:c8:44:a5:ac:45:aa:1e:50:64:6a:4e:
44:25:0e:14:46:2e:68:31:98:ae:00:49:0f:f9:27:
37:38:87:51:4b:8a:23:cc:04:99:00:3c:13:84:7d:
5e:c0:67:c6:ec:ee:d3:e4:54:2b:6b:b9:d0:27:d3:
6b:5d:51:2b:f5:bc:87:a5:f4:b3:8d:5b:e8:be:c1:
40:8e:20:07:9e:4c:b4:20:55:21:29:11:2b:94:93:
ae:fe:78:52:32:05:5c:86:b0:da:3a:2b:2b:15:50:
bf:27:69:50:80:7a:c8:a8:69:70:fd:c1:00:cd:49:
80:74:c9:5e:9b:0a:93:ad:bc:f7:8f:7f:95:f7:05:
6b:48:b8:3d:37:34:5b:78:d4:0d:ca:50:20:aa:41:
77:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:21:AB:CE:81:E3:C8:57:FD:33:80:C5:B9:4C:16:E4:C7:94:33:3C
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/_CGrzoHjyFf9M4DFuUwW5MeUMzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.73.156.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:24:08:42:ee:a7:3c:69:9c:a0:b8:ae:64:9c:68:b3:22:7b:
68:41:55:4f:8a:73:2b:09:69:09:74:d2:0e:9a:45:50:41:71:
37:26:45:6c:30:21:5f:7c:b8:78:3d:c5:dd:4e:09:6c:4c:ba:
7b:d3:df:a4:12:11:2a:52:05:d2:44:ca:d1:f0:2a:e4:07:12:
22:cb:9d:05:d0:c8:54:db:b8:59:30:47:05:c2:76:be:54:eb:
b2:30:7d:1d:f3:09:de:c8:d1:3b:74:87:9a:1f:37:28:a1:8f:
ca:aa:5a:63:81:48:60:20:05:20:8a:e8:ac:96:3d:f8:87:22:
cd:f5:bf:a5:bd:0a:77:ee:51:29:1e:3b:f0:d6:e3:ef:98:5f:
02:e3:51:5c:2c:9b:91:e7:f0:6c:77:57:e3:e0:66:cb:97:a4:
19:22:b7:0e:6a:22:ad:38:ae:a9:dc:55:58:f3:9d:89:af:23:
a4:28:fb:20:05:da:4b:8d:62:a1:6e:d7:c5:e4:51:57:a8:03:
13:cf:c3:ef:81:7b:12:1e:ba:86:38:f4:3d:a1:fc:7e:c9:d4:
9e:85:10:07:20:6e:54:8e:07:9a:60:8c:0e:5c:14:da:0c:74:
b2:b1:08:e9:74:1f:74:0a:76:2a:7e:42:a4:e7:99:5b:a4:91:
f0:03:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:03:39 2025 by rpki-client