Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS22773.roa
File: AS22773.roa (raw, json)
Hash identifier: VovBvubOcRbA05kc2hWH18Zkt93+ibTrzRGxV1t1g/k=
Subject key identifier: A9:E6:9C:61:CD:A2:58:DA:39:35:48:59:65:60:D3:AC:8A:1D:81:F6
Certificate issuer: /CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Certificate serial: 16067EE9F48B4B270D2D4B925E4AE9A6A6C549A5
Authority key identifier: 70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS22773.roa
Signing time: Wed 15 Jan 2025 16:37:17 +0000
ROA not before: Wed 15 Jan 2025 16:32:17 +0000
ROA not after: Wed 14 Jan 2026 16:37:17 +0000
asID: 22773
IP address blocks: 85.8.144.0/23 maxlen: 23
85.8.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:06:7e:e9:f4:8b:4b:27:0d:2d:4b:92:5e:4a:e9:a6:a6:c5:49:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7051b4c2f7ae9ef80b53000b32ab8f5d2f2f415b
Validity
Not Before: Jan 15 16:32:17 2025 GMT
Not After : Jan 14 16:37:17 2026 GMT
Subject: CN=A9E69C61CDA258DA393548596560D3AC8A1D81F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:38:13:35:1a:8a:89:33:4d:b9:1e:79:c8:21:
ca:29:77:66:22:15:64:d6:ea:a1:f0:b7:39:4e:4d:
99:82:86:34:27:d8:be:14:93:23:f7:fa:13:18:e3:
e2:48:01:d6:19:27:e0:4a:df:4d:63:3c:2a:7a:6d:
ee:1e:53:a1:e8:09:4c:35:03:00:19:7e:1d:58:9c:
f3:d2:7c:1a:6a:9f:44:ea:c3:c1:d0:98:5b:de:78:
23:22:cd:91:f4:c5:d1:14:bc:78:79:c0:97:c7:90:
84:53:ae:be:07:dc:eb:c3:47:e7:e6:e2:bd:e2:84:
db:5a:d5:d6:79:b4:f5:37:0c:8a:13:7f:ed:cf:26:
72:d6:8f:6c:06:92:6e:35:49:45:a5:d9:09:9d:f7:
08:fe:89:0f:7b:99:16:b3:d2:d1:17:2b:49:19:4c:
46:19:bf:f5:9f:7f:5a:45:6f:b9:bf:95:09:c9:9e:
16:2f:e6:c4:77:d2:48:a9:67:b9:9f:a6:3a:c4:cc:
1a:75:f7:9c:f4:84:65:b5:3d:38:8d:15:99:d2:30:
6d:a2:5c:f7:a8:6e:88:7b:e7:fe:3d:b2:6b:40:75:
3a:b6:8a:29:01:5b:ba:96:aa:26:fa:7f:aa:3c:51:
f0:df:cb:cf:9a:5e:c1:a6:40:72:f3:49:7c:6e:3d:
d7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E6:9C:61:CD:A2:58:DA:39:35:48:59:65:60:D3:AC:8A:1D:81:F6
X509v3 Authority Key Identifier:
keyid:70:51:B4:C2:F7:AE:9E:F8:0B:53:00:0B:32:AB:8F:5D:2F:2F:41:5B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/7051B4C2F7AE9EF80B53000B32AB8F5D2F2F415B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFG0wveunvgLUwALMquPXS8vQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9c5ce9fa-9a6f-4e0c-9809-7a4788744893/0/AS22773.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.144.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:6c:b6:b1:18:06:ef:b0:59:c0:49:b9:dd:a8:36:04:5a:da:
24:58:0c:05:2a:8c:62:a8:60:9a:94:62:18:83:f8:35:71:c7:
50:6b:f0:f0:94:69:d6:c6:0b:8a:43:19:0b:db:ae:70:61:c3:
63:9b:69:2b:88:7e:52:d0:b2:92:d8:84:93:fc:da:86:24:59:
0a:b1:b1:ed:59:1a:7f:95:ed:b8:35:47:86:0a:c2:9b:3f:75:
82:d4:9a:71:63:83:9d:b0:a1:c8:7f:03:3e:db:27:c2:97:cc:
09:98:cf:6c:9e:37:b0:05:cc:2a:bc:5f:22:ae:35:dd:80:b6:
20:ed:53:a3:3f:c2:82:bc:e2:7c:f1:9d:aa:ef:3f:88:4d:8a:
77:eb:1f:c1:71:d3:0c:aa:4a:f4:76:40:6a:a9:ef:d1:2c:8a:
80:a2:fd:4f:ea:95:6a:c7:c7:41:ad:0c:35:b6:f6:bb:2f:ad:
17:43:85:06:ef:d6:2e:db:9c:87:20:37:f0:c9:40:36:81:bd:
63:dd:96:15:2f:a0:0b:80:38:82:93:4a:fa:fa:93:7d:7c:0f:
50:c2:7a:fc:00:9d:68:e7:3e:24:d2:f2:60:4c:55:38:1c:65:
5d:ca:55:e6:e4:d9:5c:d4:35:84:26:15:d4:05:5d:a1:46:84:
a2:97:9d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:01:10 2025 by rpki-client