Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vWDAXTeR9BmEeGJbL23Abcdbp5g.roa
File: vWDAXTeR9BmEeGJbL23Abcdbp5g.roa (raw, json)
Hash identifier: JPsixL9Jw+iUAoydvK2gn9m2aXtasVJyTfZoL0nTl4c=
Subject key identifier: BD:60:C0:5D:37:91:F4:19:84:78:62:5B:2F:6D:C0:6D:C7:5B:A7:98
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196077EC3BA54167259778B3B22BF4D4FE4
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vWDAXTeR9BmEeGJbL23Abcdbp5g.roa
Signing time: Sat 05 Apr 2025 19:47:50 +0000
ROA not before: Sat 05 Apr 2025 19:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213377
IP address blocks: 93.123.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 21:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:07:7e:c3:ba:54:16:72:59:77:8b:3b:22:bf:4d:4f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Apr 5 19:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bd60c05d3791f4198478625b2f6dc06dc75ba798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:a9:f3:d7:d1:9f:34:cc:ca:97:21:e8:03:68:
12:39:56:9e:9b:b0:dd:67:02:6f:00:39:0a:75:28:
48:8f:0a:b5:ee:15:5d:ea:76:0a:05:e4:07:b4:4b:
f7:68:80:6f:54:58:fe:75:b6:87:91:41:f7:99:58:
d2:89:1f:e7:1e:ec:42:86:af:b9:fc:b2:6e:8f:99:
c4:9b:41:5d:9b:50:b0:d7:8e:61:d0:5c:11:5a:83:
28:b4:80:cb:9c:9c:6d:ec:78:10:0e:2b:e7:a7:44:
f9:05:be:1f:48:45:59:34:c6:55:a1:f9:65:19:e5:
06:2c:de:da:5a:a5:b0:0f:fc:aa:f9:29:bb:5d:11:
9b:22:53:4d:40:f0:e5:6f:30:e5:a2:0b:bd:5e:0c:
bb:91:16:21:21:43:aa:bc:97:22:60:50:1b:40:c3:
b6:e3:5c:7d:9a:70:75:2a:13:4c:72:f4:41:81:e6:
2d:72:0d:6f:ab:eb:6c:0a:a6:26:8c:a2:99:50:1d:
18:bb:9f:c6:3e:ad:4a:83:e5:d2:28:27:0b:98:6c:
cf:cd:7c:ec:21:28:e1:ce:bc:12:95:b3:9a:85:73:
c0:f4:67:3b:5b:dc:ba:c8:53:30:42:bc:0d:5b:df:
92:c2:cb:35:65:38:8d:85:dd:22:46:f4:9d:10:97:
b9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:60:C0:5D:37:91:F4:19:84:78:62:5B:2F:6D:C0:6D:C7:5B:A7:98
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/vWDAXTeR9BmEeGJbL23Abcdbp5g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:99:22:1b:38:0e:be:f9:ae:87:6a:ff:fa:a8:ef:8b:04:e2:
80:c2:b7:fe:04:91:be:14:ce:c6:da:09:48:b8:83:e6:4a:0a:
00:4e:f0:e9:d2:21:19:5d:85:b6:a6:01:35:90:2a:ca:0d:52:
c4:16:ee:d6:a1:65:8a:7a:7b:3b:63:1a:87:22:c2:b6:03:13:
5f:67:93:9c:9f:d6:29:a4:bc:89:40:34:91:7d:fc:16:94:ee:
c3:e4:ba:13:12:18:ee:67:97:03:b0:1b:4d:3e:e7:a6:cb:65:
74:d4:e9:0d:d9:de:27:dc:0d:f1:b0:68:fc:27:d1:04:3a:bf:
0a:0e:6c:82:c1:f5:bc:c1:cf:7b:ca:c6:3d:64:3c:6d:87:91:
fe:a3:b8:2b:fc:87:31:b8:0a:4e:c5:f7:f7:4f:50:2f:1b:4b:
23:62:74:71:47:2c:23:17:3e:d8:68:51:eb:fd:af:45:79:cc:
44:71:dd:b8:86:d9:c1:46:a4:bb:5e:09:ae:63:ca:b9:c8:cd:
7a:9a:b1:7c:ca:49:4d:e3:83:48:b2:8c:c5:c2:46:ef:a2:48:
6a:b4:cf:7c:90:53:fc:6a:51:c9:c3:e1:73:7f:02:a7:2c:9d:
bc:2c:73:60:4f:89:fe:d2:39:bd:0c:4a:a7:d5:05:68:c8:90:
df:36:5b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 01:33:03 2025 by rpki-client