Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/sjrH2otaIZpDDsn6jT5Qey1qR24.roa
File: sjrH2otaIZpDDsn6jT5Qey1qR24.roa (raw, json)
Hash identifier: 69DxcLnEQlr2qy3j+2wJu74yOEnRWbGBTA6f8nbWFZc=
Subject key identifier: B2:3A:C7:DA:8B:5A:21:9A:43:0E:C9:FA:8D:3E:50:7B:2D:6A:47:6E
Certificate issuer: /CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Certificate serial: 01977CD22BC4B2354BFA4CD79B58C35A5FED
Authority key identifier: C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/sjrH2otaIZpDDsn6jT5Qey1qR24.roa
Signing time: Tue 17 Jun 2025 07:37:17 +0000
ROA not before: Tue 17 Jun 2025 07:37:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1
IP address blocks: 89.22.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:d2:2b:c4:b2:35:4b:fa:4c:d7:9b:58:c3:5a:5f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66d9d50b3b89d51c8aa2493e7ef4701d6251dad
Validity
Not Before: Jun 17 07:37:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b23ac7da8b5a219a430ec9fa8d3e507b2d6a476e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:7d:49:a4:cd:0c:71:c4:7d:c6:f3:3a:a9:49:
68:74:eb:38:4c:58:d3:ae:64:b4:00:d2:b0:ce:ad:
58:19:03:ce:46:55:db:93:64:00:f0:a6:c2:8c:d8:
cc:8b:f7:75:4c:0c:21:f8:dc:4c:d3:7a:6a:a1:e7:
3f:a0:cc:0b:11:f0:e8:4b:06:3d:22:59:11:8f:ec:
6d:6f:b2:98:9e:4a:04:e5:fd:bd:d0:c9:e0:1b:5d:
f7:45:37:40:aa:00:02:33:30:54:7e:56:ca:78:ad:
3b:ff:4a:20:fd:c7:56:34:85:88:c2:9a:a9:4f:f5:
74:fd:c5:a8:e8:0c:77:b8:9d:56:b3:6a:95:54:3e:
81:8e:bc:45:62:62:81:93:f3:39:69:37:e1:97:49:
95:b9:c0:8b:7d:e6:95:c3:de:be:93:c5:9c:7b:ab:
3f:a5:76:84:f4:f1:43:82:c7:77:ce:c7:a8:2b:c9:
e4:aa:0c:1c:26:b1:e4:0c:b3:33:70:65:7a:b3:0c:
b9:d0:d3:66:f6:14:4b:26:63:c1:5e:4a:3d:a6:ba:
77:d0:e5:15:e8:93:e8:6f:4a:9d:0a:62:39:04:95:
08:5d:d4:b8:b8:9a:53:63:c2:23:a8:0b:e2:d6:8c:
cd:43:95:1d:21:55:11:f5:e5:ad:ee:72:11:c7:ad:
a3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3A:C7:DA:8B:5A:21:9A:43:0E:C9:FA:8D:3E:50:7B:2D:6A:47:6E
X509v3 Authority Key Identifier:
keyid:C6:6D:9D:50:B3:B8:9D:51:C8:AA:24:93:E7:EF:47:01:D6:25:1D:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xm2dULO4nVHIqiST5-9HAdYlHa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/sjrH2otaIZpDDsn6jT5Qey1qR24.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/4bb74b-8d6d-4514-a39c-b7c578b74e35/1/xm2dULO4nVHIqiST5-9HAdYlHa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.22.194.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:98:4f:42:31:54:3f:75:2b:8a:b6:e5:bc:40:80:ed:0f:2d:
6c:a5:df:64:09:b3:da:5f:0a:77:79:b7:cb:65:99:b7:9f:f6:
30:f0:98:3b:96:f1:ca:2f:28:31:20:43:4b:2c:13:2a:84:c1:
b5:db:4a:9c:38:7d:17:4b:52:db:f7:40:10:75:61:68:12:c8:
dd:c4:ee:9a:0b:67:14:c8:63:78:82:2f:33:f9:de:26:fb:35:
e4:29:c4:d7:15:44:37:7e:d8:f5:f9:ef:3d:de:18:e4:1f:ad:
ed:e4:ee:0a:a2:a3:42:86:94:e4:5d:70:56:11:f7:dc:72:30:
24:2f:07:be:bb:d7:df:c7:f4:18:36:9b:00:95:c9:97:b2:c0:
86:17:d7:d0:f4:07:1d:11:3d:a6:4b:d8:57:34:43:86:52:72:
19:96:b0:a5:79:e1:12:10:6a:28:dc:fb:f5:2b:f8:6d:1b:7f:
42:12:f0:1f:e1:fa:70:19:48:b4:c3:5b:b7:35:a3:12:53:43:
e9:52:30:87:39:98:db:b5:24:0d:cc:de:bb:82:ca:13:12:be:
0b:29:e0:f9:cc:c1:f7:e5:c4:54:24:ec:d7:13:7e:1c:ea:a6:
8d:f6:e9:65:8d:10:20:c9:aa:7b:b7:46:90:62:e4:db:7a:44:
fb:65:c5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:02:28 2025 by rpki-client