Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/d-01XFis9cLH8BZUIJJWfcsmDG4.roa
File: d-01XFis9cLH8BZUIJJWfcsmDG4.roa (raw, json)
Hash identifier: NudOKOFu9rScWQsymrxK2r70c3aFtGLF+JDUyVcCcnw=
Subject key identifier: 77:ED:35:5C:58:AC:F5:C2:C7:F0:16:54:20:92:56:7D:CB:26:0C:6E
Certificate issuer: /CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Certificate serial: 019427471B2792CE0F9F1912C66E3C4C9969
Authority key identifier: 20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/d-01XFis9cLH8BZUIJJWfcsmDG4.roa
Signing time: Thu 02 Jan 2025 13:49:18 +0000
ROA not before: Thu 02 Jan 2025 13:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199739
IP address blocks: 81.22.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:1b:27:92:ce:0f:9f:19:12:c6:6e:3c:4c:99:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20a7fcbe59314c372b68f232223828b1e33a03ec
Validity
Not Before: Jan 2 13:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=77ed355c58acf5c2c7f016542092567dcb260c6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7c:f2:c1:74:32:01:49:ae:a1:e8:95:09:c6:
df:7c:2e:81:b4:4f:6a:d5:41:7c:32:a5:f9:84:76:
cc:a5:7c:c6:0b:42:54:6f:31:7a:94:6d:84:44:20:
0e:b4:9c:e0:c7:71:52:e9:d6:ef:22:ed:8f:6d:c1:
ee:2f:17:51:4d:8a:aa:9d:c6:35:5b:e2:b4:b7:f8:
7c:e5:08:f8:d2:99:8a:47:7c:fc:c3:2d:64:46:19:
9d:4f:f4:c8:1b:0b:52:6b:6d:96:f8:a3:84:0b:36:
0d:16:6e:e0:66:11:ac:09:bb:3d:3f:56:f1:53:90:
3d:26:66:b5:e2:fc:22:b4:a5:f7:2a:66:a7:cd:0a:
65:8a:1e:9a:11:c4:57:95:1d:77:8e:46:fa:ba:27:
9c:cd:8f:8b:6e:36:cb:b5:06:aa:30:79:b1:d1:18:
ae:80:97:52:de:85:40:14:2c:9a:97:b6:1c:1c:6f:
ee:0b:8b:71:3d:35:f5:a4:2a:59:0c:4b:33:5e:30:
fb:e9:18:18:d6:1e:9b:de:db:72:ae:a0:a1:6d:52:
04:c6:93:08:aa:3a:6f:21:a7:cd:93:14:39:d6:17:
28:4c:67:09:2a:b2:e8:c3:a0:55:6f:87:dc:40:3a:
52:ce:d2:df:d2:18:b8:1d:93:f8:c8:38:1c:06:f3:
89:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:ED:35:5C:58:AC:F5:C2:C7:F0:16:54:20:92:56:7D:CB:26:0C:6E
X509v3 Authority Key Identifier:
keyid:20:A7:FC:BE:59:31:4C:37:2B:68:F2:32:22:38:28:B1:E3:3A:03:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IKf8vlkxTDcraPIyIjgoseM6A-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/d-01XFis9cLH8BZUIJJWfcsmDG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/c3988e-8654-4311-8292-426039788919/1/IKf8vlkxTDcraPIyIjgoseM6A-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.22.33.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:58:05:e2:89:46:e6:2f:31:c9:7b:f3:29:d1:c8:52:62:75:
98:bf:58:89:bd:5c:58:93:d0:5f:df:85:b2:ac:54:c9:95:76:
f9:a5:02:11:6d:a3:3e:4c:71:1b:22:5d:03:a3:73:df:76:d9:
e4:05:08:83:75:c2:3a:8f:05:52:9f:b9:12:82:6e:47:ef:57:
98:01:21:f4:6e:1b:bf:c3:b6:dc:eb:10:7b:ed:d1:aa:6b:a3:
db:30:c2:32:10:9c:59:57:c9:e9:9f:07:a2:84:ce:fa:06:66:
eb:47:08:e2:1a:e7:c0:58:f5:48:ae:81:38:57:8e:58:cb:93:
f2:46:89:f6:63:80:f7:d6:4e:dd:ce:79:15:a4:86:51:53:4e:
61:d7:f9:e5:e8:32:ae:19:f4:dd:59:90:f6:53:e6:7b:85:17:
be:aa:64:32:81:76:0c:e9:81:ff:35:62:89:97:87:bf:45:ae:
e0:5f:32:b2:e9:c4:6d:8e:57:78:bd:f0:a1:4b:75:bf:a2:8a:
1f:de:3e:7e:48:f4:b9:a1:61:60:cb:1d:7a:99:64:a9:7a:da:
d7:41:8e:5c:0a:47:57:80:4c:13:00:2a:4d:98:62:1c:c0:5b:
89:c9:65:21:aa:91:2d:2f:8f:94:49:c4:64:ec:a7:65:bc:9e:
f7:0d:8c:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 12:45:54 2025 by rpki-client