Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/R93z7OB-7WREdE4V4BJbcBZ0VZE.roa
File: R93z7OB-7WREdE4V4BJbcBZ0VZE.roa (raw, json)
Hash identifier: R7MzzBh1v5Zg/xA+W0OHL25SLo/YagNekZBwX4TbWjQ=
Subject key identifier: 47:DD:F3:EC:E0:7E:ED:64:44:74:4E:15:E0:12:5B:70:16:74:55:91
Certificate issuer: /CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Certificate serial: 019421B243C9BC443A5119C47D4DB887B37D
Authority key identifier: 2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/R93z7OB-7WREdE4V4BJbcBZ0VZE.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212962
IP address blocks: 185.78.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:43:c9:bc:44:3a:51:19:c4:7d:4d:b8:87:b3:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f93d3ba197f5ce3098bfa7700b43854eaa80e9e
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=47ddf3ece07eed6444744e15e0125b7016745591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:80:15:0c:23:9d:36:d8:a0:74:ae:10:ba:ab:
c7:7e:3e:f0:5c:97:0c:4d:42:fb:bf:28:93:19:6c:
64:a4:c9:ad:15:0d:73:39:82:43:c9:c5:20:f3:6d:
a4:e6:24:66:d9:98:85:8a:04:a6:b6:48:65:b4:e7:
0a:ee:29:64:b1:c0:d2:2b:67:24:99:6f:d0:4b:25:
03:76:4a:e8:69:9f:8c:40:7c:39:e7:56:6b:bf:60:
d4:42:00:cf:a1:78:b8:a0:6b:83:d9:ee:fa:c9:01:
d7:3d:4e:36:71:bc:fc:06:65:58:da:4d:30:46:5d:
fa:97:16:ba:dd:19:12:4a:fe:c5:e4:0c:ad:22:7b:
fb:e7:2b:7f:b6:29:06:7f:ab:1e:46:b3:50:04:b1:
cd:e2:a6:d7:59:dd:ee:f0:97:96:31:86:42:a6:da:
df:cb:6c:0c:f5:fd:37:7c:cf:ac:da:97:39:6d:85:
0a:4e:5f:fc:1b:06:b9:c3:13:09:f8:c5:bc:c2:4e:
d9:be:39:0b:3a:19:d7:68:c0:07:56:bd:ae:5d:92:
43:3a:0a:52:41:52:05:81:f5:fc:40:91:31:2a:6a:
49:b9:21:d3:e5:58:e4:f5:ff:b1:bb:d2:4c:6e:82:
37:bb:5e:9f:59:d1:f6:37:54:0c:fa:b1:e0:f3:ed:
fc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DD:F3:EC:E0:7E:ED:64:44:74:4E:15:E0:12:5B:70:16:74:55:91
X509v3 Authority Key Identifier:
keyid:2F:93:D3:BA:19:7F:5C:E3:09:8B:FA:77:00:B4:38:54:EA:A8:0E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/R93z7OB-7WREdE4V4BJbcBZ0VZE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/7a87a0-8014-4605-9fb5-9e71dc24a683/1/L5PTuhl_XOMJi_p3ALQ4VOqoDp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.78.235.0/24
Signature Algorithm: sha256WithRSAEncryption
59:59:c0:2c:81:ec:1a:7e:50:f1:a8:3e:62:e0:58:04:ab:79:
7a:fe:eb:83:86:ec:ac:b8:b6:ba:46:f5:99:35:73:44:91:6b:
36:57:49:c8:dc:05:6f:4e:44:71:1e:00:29:9c:b2:43:78:ae:
9c:3e:18:b5:38:34:df:99:21:65:94:0a:e5:73:da:7f:46:0b:
5e:b8:11:81:6d:48:4d:2e:9e:c4:1e:03:87:66:5f:82:3d:d7:
eb:37:88:81:26:12:0b:26:aa:22:1f:3f:83:fe:85:70:3a:9c:
0d:af:27:75:4c:5d:bb:a8:bb:22:30:c0:80:7f:07:26:0c:ec:
a2:15:f6:cc:9a:9b:0b:f2:e2:e8:0f:71:23:63:b9:c6:22:06:
1c:a1:d2:75:fe:c2:50:05:70:bc:76:dd:57:1f:1a:5f:de:50:
32:37:e6:31:56:f8:0b:6f:a2:ed:e2:50:c0:fd:15:0a:de:28:
07:c9:c0:ef:71:a9:21:95:47:b2:13:9b:ca:4e:a6:79:f2:85:
b0:5f:ff:11:55:ef:5b:bd:30:cd:13:d4:41:54:4b:dc:cf:2a:
e1:9b:5f:c3:22:5e:fc:12:4a:21:ff:1d:2b:f2:d4:37:ed:a9:
96:93:bc:0b:fc:dc:19:f0:0e:3d:8a:a5:f6:7b:c2:cd:2c:fb:
f2:07:7d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:30:09 2025 by rpki-client