Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/sjohsM5QinpmbuymgFQrqwgegi4.roa
File: sjohsM5QinpmbuymgFQrqwgegi4.roa (raw, json)
Hash identifier: duodRGVgl991Q7tVgFwXBiJKHMlMjedo1jLdoQsBedU=
Subject key identifier: B2:3A:21:B0:CE:50:8A:7A:66:6E:EC:A6:80:54:2B:AB:08:1E:82:2E
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 01975AB060F72EA8ECBC982D6AEADCC85B80
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/sjohsM5QinpmbuymgFQrqwgegi4.roa
Signing time: Tue 10 Jun 2025 16:33:17 +0000
ROA not before: Tue 10 Jun 2025 16:33:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213541
IP address blocks: 45.140.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:b0:60:f7:2e:a8:ec:bc:98:2d:6a:ea:dc:c8:5b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jun 10 16:33:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b23a21b0ce508a7a666eeca680542bab081e822e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:c7:d8:33:5b:15:9a:7d:41:03:e1:4d:1d:
f5:a9:c9:eb:04:bb:8f:28:24:22:e3:cc:ca:8b:34:
91:65:21:c1:59:c6:6b:9c:c5:15:bf:fb:e1:9c:c6:
ad:07:68:2a:e5:46:79:bf:10:2d:0b:26:15:ed:01:
8f:5c:9b:d8:7e:82:2e:30:c9:59:d1:4d:26:3b:2b:
eb:36:f4:95:04:b6:d9:00:32:ac:60:1d:00:96:a3:
cd:3a:39:06:44:e1:15:11:96:10:a2:d4:4a:16:d7:
8f:87:2e:ba:a7:61:36:bd:80:bd:28:6e:ae:ee:47:
eb:01:c7:5c:d9:cb:a1:eb:c3:1e:62:15:d7:45:78:
d1:ce:f5:16:a4:74:e6:1e:0c:ee:c8:f0:ea:cc:e3:
24:fe:b8:9a:60:27:d5:a3:af:74:a8:0a:58:7b:bd:
e2:8d:41:b8:ec:26:44:1c:8a:4c:ca:df:e5:90:4e:
df:dd:fd:0a:43:d9:fc:8d:c8:c5:43:43:1d:12:41:
44:78:fe:46:fc:9a:ec:43:86:52:dc:be:67:85:76:
86:29:93:63:f6:a7:f0:5b:38:2c:88:15:1e:2a:bc:
b9:90:f3:00:d1:bd:5b:42:9d:79:9d:9b:66:96:b2:
63:6e:2a:c6:9b:d5:a8:41:1d:a0:83:84:ce:08:20:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3A:21:B0:CE:50:8A:7A:66:6E:EC:A6:80:54:2B:AB:08:1E:82:2E
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/sjohsM5QinpmbuymgFQrqwgegi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.140.172.0/24
Signature Algorithm: sha256WithRSAEncryption
39:af:d4:a8:fd:3d:0c:29:7c:ed:b5:79:0c:e6:7c:67:96:08:
f2:83:1c:4a:37:9b:ce:9a:c1:cf:21:34:aa:73:bd:97:74:29:
a2:53:1f:bf:4d:8c:b6:40:b2:c0:03:9a:ab:f6:5f:2b:37:b7:
a6:66:ad:0d:09:f4:42:60:66:76:cf:84:62:43:e8:7b:a0:bb:
4f:45:1c:be:d8:74:9f:90:58:1d:76:f2:22:20:57:f8:7d:2f:
01:fd:d2:4f:79:0d:29:9d:af:53:1d:18:53:1d:e6:d9:c5:7e:
93:9c:c9:ab:e2:ec:2a:33:f5:86:26:de:d8:3d:71:21:cb:e9:
7e:1c:77:9c:18:57:48:b2:50:4a:ae:cb:2f:7d:60:16:b6:30:
0d:56:01:1c:cb:57:7e:63:44:ea:be:91:e6:9d:22:ce:c4:df:
de:bf:0e:63:0d:6c:20:c4:9a:4b:2a:a2:05:72:9d:80:62:52:
ff:7c:ca:a7:d7:77:1a:7b:f5:43:bc:62:64:53:50:47:4b:5f:
19:a8:90:b9:8f:88:76:9b:4d:bc:be:94:f9:7d:09:2a:1c:5f:
56:e1:86:24:de:fc:f6:99:dc:31:10:06:69:65:e5:e9:a4:4f:
49:33:30:2d:95:bd:c0:57:86:65:79:0b:48:0e:3a:9f:61:39:
93:a2:23:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 16:39:23 2025 by rpki-client