Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/unJZcH1YOQ-8EtNN92I_T3gOrMA.roa
File: unJZcH1YOQ-8EtNN92I_T3gOrMA.roa (raw, json)
Hash identifier: 45dgqkhDDf31vUABp2rIWvSLR9XahxR93tyUDLn+GZw=
Subject key identifier: BA:72:59:70:7D:58:39:0F:BC:12:D3:4D:F7:62:3F:4F:78:0E:AC:C0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01973FA5296707AB6FAC73CB0B63CD9E111C
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/unJZcH1YOQ-8EtNN92I_T3gOrMA.roa
Signing time: Thu 05 Jun 2025 10:31:18 +0000
ROA not before: Thu 05 Jun 2025 10:31:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200590
IP address blocks: 87.121.124.0/24 maxlen: 24
87.121.125.0/24 maxlen: 24
94.156.105.0/24 maxlen: 24
185.222.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:a5:29:67:07:ab:6f:ac:73:cb:0b:63:cd:9e:11:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jun 5 10:31:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba7259707d58390fbc12d34df7623f4f780eacc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7a:fd:cb:66:3c:61:81:97:c7:ab:a2:c6:58:
e8:fc:0c:09:c7:8c:92:69:be:29:61:9e:c5:96:ac:
df:f2:68:69:c1:d4:54:0c:5d:19:24:4d:50:ac:7d:
4f:26:7b:16:88:ee:5a:00:cc:e2:6f:47:0c:08:08:
67:d4:d1:90:92:f1:f8:5d:8e:74:ed:c6:ce:b0:12:
8f:c0:f4:97:d9:d1:bc:37:03:5e:b3:6a:7c:0c:6e:
96:6c:11:2e:7f:87:0f:74:93:33:ca:67:58:1d:c2:
31:4b:95:98:9e:68:32:c5:dc:8d:a6:10:33:53:52:
f7:0c:c9:a8:13:4c:c3:f7:93:25:04:02:36:0d:6e:
23:cc:0f:7c:73:52:5a:0b:40:7c:31:32:46:8a:36:
f0:f3:11:d7:ab:cd:77:dd:0b:42:cd:e9:99:df:6c:
e6:57:4b:db:d6:91:72:32:59:b5:55:e6:11:9f:19:
f3:83:3e:66:64:6a:13:8f:e2:bf:19:ca:3d:d6:69:
2e:e6:e1:d5:16:c7:d9:43:89:c6:da:15:43:c4:61:
6e:3a:0a:7c:a5:ab:1f:5d:df:63:e5:55:fd:98:40:
a3:8b:af:e6:93:21:fe:5e:80:29:32:da:42:a5:b8:
81:6a:49:23:3f:2d:71:ca:28:c3:3a:9b:e4:7c:5f:
70:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:72:59:70:7D:58:39:0F:BC:12:D3:4D:F7:62:3F:4F:78:0E:AC:C0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/unJZcH1YOQ-8EtNN92I_T3gOrMA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.124.0/23
94.156.105.0/24
185.222.162.0/24
Signature Algorithm: sha256WithRSAEncryption
20:76:f7:30:9b:bd:bf:d2:46:5f:66:08:39:dd:55:b9:6f:c3:
23:33:1f:3e:c4:1f:17:48:74:7d:49:97:d2:42:62:de:a8:32:
9d:56:03:7d:ff:c2:4f:d0:75:9c:6a:81:d1:98:da:aa:ec:df:
dc:78:82:22:2e:b5:95:05:9f:59:63:2d:2f:b5:aa:2f:a1:f0:
d1:63:64:2e:f7:85:03:ee:51:de:a1:85:3b:1f:3d:28:b7:02:
1a:95:66:52:94:41:db:15:62:77:93:c0:cf:26:a0:33:5a:0d:
95:a7:84:10:1c:f2:ee:0a:57:64:bb:72:fc:bd:bf:0c:ae:1b:
61:ef:4f:7c:4c:2f:47:8e:40:7c:8d:23:eb:c5:8b:e9:0c:e8:
27:59:b7:65:6c:5f:45:c3:e7:c3:ff:3e:30:76:20:56:56:11:
f9:61:70:ab:2d:ba:66:af:81:24:e8:78:2e:bf:54:f5:e4:ee:
8a:8b:c9:98:64:36:ad:53:26:74:67:0a:4a:b3:a8:79:94:79:
c3:ac:24:33:5d:4f:65:97:9d:16:50:58:8d:09:36:7c:7c:90:
a9:e1:ea:83:e5:a9:5e:e7:ea:dd:2f:87:03:fb:92:1e:71:ab:
32:d3:24:7c:b7:68:3f:42:5e:d6:20:3e:0e:cf:be:09:c9:02:
ba:d5:df:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:05:51 2025 by rpki-client