Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/RnXt_3My3TQO32OmichNNAGWzvw.roa
File: RnXt_3My3TQO32OmichNNAGWzvw.roa (raw, json)
Hash identifier: whxsxxP8jHSG11MD487IPHlTZbPtzlH5UrdBH22KMYs=
Subject key identifier: 46:75:ED:FF:73:32:DD:34:0E:DF:63:A6:89:C8:4D:34:01:96:CE:FC
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 019427B6885B48651F925B8E8AFC6A2743FE
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/RnXt_3My3TQO32OmichNNAGWzvw.roa
Signing time: Thu 02 Jan 2025 15:51:01 +0000
ROA not before: Thu 02 Jan 2025 15:51:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 393560
IP address blocks: 93.191.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 10:07:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:88:5b:48:65:1f:92:5b:8e:8a:fc:6a:27:43:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Jan 2 15:51:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4675edff7332dd340edf63a689c84d340196cefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:93:37:de:a7:c8:d1:46:5e:e5:7a:55:d9:92:
6b:ff:2f:22:88:ec:9b:bf:7e:b0:6e:3e:1c:2f:3f:
86:e2:08:10:83:03:f4:93:9d:0f:f1:e4:2b:f4:37:
eb:6d:8d:d2:56:ec:69:f4:a6:69:38:b9:9e:3b:da:
5f:1f:5a:be:a4:f4:f5:a5:d4:c6:fe:7d:2c:d5:8e:
91:a5:5a:7d:52:dc:62:04:03:fd:4b:6f:ee:47:01:
83:0f:1a:18:d7:57:df:22:d8:43:7c:45:53:50:c9:
54:b3:27:34:87:5e:df:2c:81:f7:91:ff:92:75:1c:
b7:b2:52:cf:ef:49:b6:66:3e:d5:22:bb:1c:de:59:
3a:83:33:4f:fe:0b:8e:a9:68:2e:2a:03:85:21:79:
10:eb:8a:e6:6a:bc:66:45:3e:cd:5c:84:94:04:3d:
af:0b:e3:a4:99:58:24:52:7c:9d:42:37:14:44:9f:
f0:16:18:6f:ec:6c:05:97:11:d9:b3:78:c0:33:9d:
14:b2:6a:b2:f2:d6:58:f6:21:97:75:c8:fa:28:8b:
3e:d5:b9:0b:74:8c:be:6f:a0:de:d7:40:63:5c:7c:
fa:1c:17:4b:67:2e:24:6c:9b:08:f3:3e:20:50:d1:
c7:43:cd:26:91:2f:dc:4d:47:48:d4:2a:9f:16:32:
55:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:75:ED:FF:73:32:DD:34:0E:DF:63:A6:89:C8:4D:34:01:96:CE:FC
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/RnXt_3My3TQO32OmichNNAGWzvw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.175.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:1c:47:e4:b5:7e:dc:83:16:30:84:d5:33:2f:d6:78:eb:48:
2f:bc:6e:2a:77:01:71:72:7f:63:9d:f2:4f:da:a1:77:f8:b9:
a3:a9:cf:52:da:2e:11:a1:53:e6:63:fa:37:86:56:7e:ba:36:
88:7f:bf:aa:67:65:a8:44:47:87:cb:c8:5e:59:b3:da:eb:9f:
63:79:37:ca:bd:99:62:d6:c0:64:e0:89:cb:51:b3:5d:9f:9a:
0c:ce:64:93:12:bb:08:30:fd:11:6f:42:ed:75:7b:d4:b6:8f:
bc:b9:2a:9c:b7:1f:e5:2b:65:c2:06:d7:45:30:77:e9:03:f0:
7d:44:f3:cf:be:82:44:50:28:ef:33:b3:fc:8e:30:96:6c:3c:
73:55:c8:03:02:2e:98:e0:27:57:2e:b7:69:a1:32:c2:e4:75:
20:ef:57:d6:c3:17:c3:a5:bd:23:b4:24:c9:33:8d:79:60:60:
10:dd:f4:21:91:c1:10:1e:85:fe:a8:0a:50:12:63:b7:1e:29:
48:79:39:e1:96:6e:59:2a:1d:d9:cb:8f:a7:d3:93:f9:55:b9:
dc:45:37:d9:89:ec:0d:5e:99:fd:f3:6b:0c:18:a7:68:ac:fe:
15:54:5c:06:ee:6f:16:2e:54:5f:06:84:8c:05:f7:77:35:41:
cf:94:be:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntohbSGUfkluOivxqJ0P+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNWZjYmJlYTQ4OTM3YTQ0MmJhYmRiMzMwMjEzMmM0YmM5
YmQ2YWEwHhcNMjUwMTAyMTU1MTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Njc1ZWRmZjczMzJkZDM0MGVkZjYzYTY4OWM4NGQzNDAxOTZjZWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pM33qfI0UZe5XpV2ZJr/y8iiOyb
v36wbj4cLz+G4ggQgwP0k50P8eQr9DfrbY3SVuxp9KZpOLmeO9pfH1q+pPT1pdTG
/n0s1Y6RpVp9UtxiBAP9S2/uRwGDDxoY11ffIthDfEVTUMlUsyc0h17fLIH3kf+S
dRy3slLP70m2Zj7VIrsc3lk6gzNP/guOqWguKgOFIXkQ64rmarxmRT7NXISUBD2v
C+OkmVgkUnydQjcURJ/wFhhv7GwFlxHZs3jAM50Usmqy8tZY9iGXdcj6KIs+1bkL
dIy+b6De10BjXHz6HBdLZy4kbJsI8z4gUNHHQ80mkS/cTUdI1CqfFjJVBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEZ17f9zMt00Dt9jponITTQBls78MB8GA1UdIwQY
MBaAFGtfy76kiTekQrq9szAhMsS8m9aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQt
ODhkMWNhYzllNGYxLzEvUm5YdF8zTXkzVFFPMzJPbWljaE5OQUdXenZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8wNDIxODgtZGZiNi00YWQ0LTkxYTQtODhkMWNhYzllNGYx
LzEvYTFfTHZxU0pONlJDdXIyek1DRXl4THliMXFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXb+vMA0G
CSqGSIb3DQEBCwUAA4IBAQAdHEfktX7cgxYwhNUzL9Z460gvvG4qdwFxcn9jnfJP
2qF3+Lmjqc9S2i4RoVPmY/o3hlZ+ujaIf7+qZ2WoREeHy8heWbPa659jeTfKvZli
1sBk4InLUbNdn5oMzmSTErsIMP0Rb0LtdXvUto+8uSqctx/lK2XCBtdFMHfpA/B9
RPPPvoJEUCjvM7P8jjCWbDxzVcgDAi6Y4CdXLrdpoTLC5HUg71fWwxfDpb0jtCTJ
M415YGAQ3fQhkcEQHoX+qApQEmO3HilIeTnhlm5ZKh3Zy4+n05P5VbncRTfZiewN
Xpn982sMGKdorP4VVFwG7m8WLlRfBoSMBfd3NUHPlL7f
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:12 2025 by rpki-client