Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tOi0YCgpKQf_MhswAZcSI7rU4KE.roa
File: tOi0YCgpKQf_MhswAZcSI7rU4KE.roa (raw, json)
Hash identifier: wFopwp9NnPIRwJR80un2EvDtV9VvNk9CpC8IuIjv000=
Subject key identifier: B4:E8:B4:60:28:29:29:07:FF:32:1B:30:01:97:12:23:BA:D4:E0:A1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824C8D1EBAF308EE8EDD30B4DDFA3DD
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tOi0YCgpKQf_MhswAZcSI7rU4KE.roa
Signing time: Thu 02 Jan 2025 17:51:26 +0000
ROA not before: Thu 02 Jan 2025 17:51:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214806
IP address blocks: 87.121.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:57:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:c8:d1:eb:af:30:8e:e8:ed:d3:0b:4d:df:a3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b4e8b46028292907ff321b3001971223bad4e0a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:88:b6:29:ab:9f:cd:14:1b:58:95:f0:3f:
09:a6:44:45:b6:ad:6a:19:4d:cf:b4:48:4c:9e:29:
92:4c:cf:ee:20:0e:9c:a0:b8:40:70:12:29:06:a4:
ad:10:4c:90:a7:3c:f0:17:0b:53:c3:a9:71:83:4b:
bb:7b:4b:0b:85:b5:4a:5a:13:a6:15:73:52:a6:bc:
12:54:ec:e6:8c:a6:c6:da:16:81:af:ad:b7:5e:71:
3b:b8:ad:15:46:ba:d8:fe:92:25:6c:d7:23:8c:0c:
a3:7f:83:b8:e2:f6:39:20:d1:f4:13:4d:2f:78:59:
c0:77:91:6a:ce:0c:27:b2:77:01:42:b7:8a:2f:b2:
f2:c0:e8:6c:9f:8a:8e:5f:b1:2b:47:9a:b4:2d:68:
e0:fd:63:df:07:32:5d:02:5d:1d:ac:8b:ba:e3:23:
46:89:6d:27:1c:d3:fd:42:54:69:a0:4f:7d:81:17:
70:b6:8a:99:b1:1d:04:89:ff:d8:3c:0d:59:1d:95:
50:47:1e:31:b5:1f:1b:19:93:aa:6e:3d:d5:7f:8e:
55:12:37:d1:c1:eb:84:fe:59:71:ea:1b:c1:a0:d2:
cb:e2:56:20:0b:09:e8:c8:e0:71:d2:de:c5:b3:55:
00:bd:02:63:02:b3:4d:29:01:09:a9:90:82:b1:63:
6f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E8:B4:60:28:29:29:07:FF:32:1B:30:01:97:12:23:BA:D4:E0:A1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/tOi0YCgpKQf_MhswAZcSI7rU4KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.222.0/24
Signature Algorithm: sha256WithRSAEncryption
36:6a:d6:9a:03:83:83:e4:f3:dd:20:7b:24:fe:4b:ed:8d:e8:
02:14:1a:1b:ec:2c:84:14:b1:11:15:66:cf:36:db:cf:df:2a:
f8:02:a4:6f:e5:36:21:99:28:0b:29:98:87:68:70:c3:48:dc:
4b:78:8d:c3:fa:20:bd:60:14:a6:5b:5d:84:fb:f9:23:07:4e:
84:8a:67:06:7f:b7:a8:0f:36:6e:29:86:4e:9d:ea:21:88:e9:
a9:68:75:2d:f4:92:42:47:c9:f6:9a:a0:1a:5a:fd:51:67:3a:
71:c0:5f:ef:a3:fb:37:ab:24:91:36:19:67:d4:b7:7d:df:1b:
94:fd:dc:e3:65:c2:89:41:27:93:2d:94:f9:02:98:91:19:71:
d5:2b:2d:ab:88:41:b8:19:d3:5c:d7:61:ee:25:78:7e:77:fa:
5c:9d:c7:68:c1:fd:33:1e:e7:8d:55:cd:79:34:56:fb:b4:22:
c0:59:9f:4c:02:73:40:6c:a5:42:5e:43:be:1c:78:4f:7c:30:
e3:18:1f:0d:45:c9:2f:f8:31:44:e0:d0:aa:0a:25:99:42:f8:
e5:94:30:12:df:78:7c:69:ea:fc:58:1b:20:f5:53:f2:ed:f3:
83:62:69:1e:94:e1:7f:31:6c:aa:16:b7:d6:97:ad:d9:5a:c0:
45:df:d6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:22:38 2025 by rpki-client