Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nPsOoy7d_nkjynF8lLVxkGnVofs.roa
File: nPsOoy7d_nkjynF8lLVxkGnVofs.roa (raw, json)
Hash identifier: hy6NgYHMFiKi9YS/zVEe/YiuGLVXK2xM5xtbqeawOks=
Subject key identifier: 9C:FB:0E:A3:2E:DD:FE:79:23:CA:71:7C:94:B5:71:90:69:D5:A1:FB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428247A3DE3142921D547B123D32845D8
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nPsOoy7d_nkjynF8lLVxkGnVofs.roa
Signing time: Thu 02 Jan 2025 17:51:06 +0000
ROA not before: Thu 02 Jan 2025 17:51:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43068
IP address blocks: 93.123.48.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:7a:3d:e3:14:29:21:d5:47:b1:23:d3:28:45:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9cfb0ea32eddfe7923ca717c94b5719069d5a1fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f8:59:37:4b:80:8c:2e:ee:90:52:c7:53:b6:
30:83:75:fb:5a:77:a2:cf:41:25:d0:7d:4c:25:d3:
59:5f:c3:49:67:87:a9:c3:8d:2a:7a:5e:a0:e7:17:
69:1d:f7:d6:37:05:c6:fa:1f:24:0b:64:32:ac:36:
d6:35:6f:6a:01:1b:23:47:ea:f8:8e:60:00:b7:9f:
74:f0:60:53:f7:2d:1b:18:bb:e9:b8:97:17:b7:d9:
ea:7a:d5:55:c6:0f:26:e9:01:16:ab:a2:9c:74:f0:
4b:46:b3:07:6a:dc:0a:4a:b2:8f:dc:6f:55:c0:0e:
5e:9b:3d:6a:d4:9f:6d:40:b9:0d:39:d7:af:0b:83:
b0:f4:af:c5:c8:d1:8a:5f:4b:ac:75:bc:e8:f6:b2:
a7:ff:1b:35:d5:58:c7:68:6a:7c:d8:7d:3c:50:7e:
fc:3b:15:22:87:87:07:8d:c3:54:29:a8:40:78:05:
8b:19:a7:a6:e6:c9:f4:91:55:53:3e:d3:f7:53:a7:
be:15:26:05:a6:5c:d0:bf:99:d1:8a:35:01:c1:b5:
29:39:8e:09:ea:d6:62:44:88:7b:14:5a:03:e4:c8:
e1:8c:f5:56:57:a0:27:99:70:d6:aa:c5:29:33:9d:
1b:e4:f9:4c:bf:9d:fe:ab:94:b0:a4:e1:ee:3c:d6:
48:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FB:0E:A3:2E:DD:FE:79:23:CA:71:7C:94:B5:71:90:69:D5:A1:FB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/nPsOoy7d_nkjynF8lLVxkGnVofs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.48.0/20
Signature Algorithm: sha256WithRSAEncryption
99:c5:36:f4:a6:af:d2:d0:b5:9d:f3:65:e3:1b:31:52:a4:52:
53:2c:98:d8:0a:42:03:b5:78:0c:fa:99:4b:ae:f6:2d:9d:4d:
05:46:a8:33:6a:88:88:22:d3:c8:a8:bf:6d:92:52:30:e3:3e:
1e:62:7c:c3:be:20:d3:42:e0:e1:c5:8b:32:e1:fe:68:d5:b5:
56:6c:65:ee:61:47:57:50:d0:dc:7d:04:62:c8:cf:f4:81:3c:
42:a6:8c:88:bc:8e:2c:4b:4b:66:86:8d:5c:a0:4b:b3:30:9f:
5a:2a:0f:9d:2e:f0:86:42:d9:45:93:37:40:47:d8:97:b5:8f:
4f:d2:69:ae:7d:35:09:2f:ad:8c:14:28:dc:69:11:52:9e:ed:
78:22:be:a2:5e:cc:e6:ce:4c:a8:be:74:a6:18:7f:6e:df:13:
da:73:59:d1:ef:45:c0:45:85:32:76:88:cf:ea:e4:d0:10:73:
5f:3d:2c:71:69:db:65:de:d4:c1:0d:39:40:4f:3d:15:95:6c:
84:16:19:5c:53:f4:64:6b:61:4c:6a:8b:f6:27:e9:b5:e2:33:
6b:9b:61:c4:fa:3c:23:a5:3f:6a:eb:74:bd:a7:71:2e:0d:90:
b9:45:1b:e9:6b:e4:eb:96:4f:b8:58:7d:8d:0a:79:e8:7a:24:
61:bb:a7:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJHo94xQpIdVHsSPTKEXYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5Y2ZiMGVhMzJlZGRmZTc5MjNjYTcxN2M5NGI1NzE5MDY5ZDVhMWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfhZN0uAjC7ukFLHU7Ywg3X7Wnei
z0El0H1MJdNZX8NJZ4epw40qel6g5xdpHffWNwXG+h8kC2QyrDbWNW9qARsjR+r4
jmAAt5908GBT9y0bGLvpuJcXt9nqetVVxg8m6QEWq6KcdPBLRrMHatwKSrKP3G9V
wA5emz1q1J9tQLkNOdevC4Ow9K/FyNGKX0usdbzo9rKn/xs11VjHaGp82H08UH78
OxUih4cHjcNUKahAeAWLGaem5sn0kVVTPtP3U6e+FSYFplzQv5nRijUBwbUpOY4J
6tZiRIh7FFoD5MjhjPVWV6AnmXDWqsUpM50b5PlMv53+q5SwpOHuPNZIawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJz7DqMu3f55I8pxfJS1cZBp1aH7MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvblBzT295N2RfbmtqeW5GOGxMVnhrR25Wb2ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEXXswMA0G
CSqGSIb3DQEBCwUAA4IBAQCZxTb0pq/S0LWd82XjGzFSpFJTLJjYCkIDtXgM+plL
rvYtnU0FRqgzaoiIItPIqL9tklIw4z4eYnzDviDTQuDhxYsy4f5o1bVWbGXuYUdX
UNDcfQRiyM/0gTxCpoyIvI4sS0tmho1coEuzMJ9aKg+dLvCGQtlFkzdAR9iXtY9P
0mmufTUJL62MFCjcaRFSnu14Ir6iXszmzkyovnSmGH9u3xPac1nR70XARYUydojP
6uTQEHNfPSxxadtl3tTBDTlATz0VlWyEFhlcU/Rka2FMaov2J+m14jNrm2HE+jwj
pT9q63S9p3EuDZC5RRvpa+Trlk+4WH2NCnnoeiRhu6cg
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:05 2025 by rpki-client