Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa
File: n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa (raw, json)
Hash identifier: M/0C5qRusrhAnj6tAMLK/NHBLWKiMm5trd2xt/8UodI=
Subject key identifier: 9F:99:EA:CE:F0:78:15:D6:FE:05:EA:0C:80:7F:EE:FE:3D:63:E1:E3
Certificate issuer: /CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Certificate serial: 019420D5D7CCC30AD10EA536AFE9F1B494FD
Authority key identifier: 0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa
Signing time: Wed 01 Jan 2025 07:47:52 +0000
ROA not before: Wed 01 Jan 2025 07:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 17819
IP address blocks: 185.93.57.0/24 maxlen: 24
185.93.59.0/24 maxlen: 24
2a03:8fa0:1000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.mft
rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 19:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d7:cc:c3:0a:d1:0e:a5:36:af:e9:f1:b4:94:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c2d7c238e89dcd52f6fb2296dfa4758c61c97be
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9f99eacef07815d6fe05ea0c807feefe3d63e1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:f4:b8:3b:54:2d:e0:d8:05:35:d5:dd:81:37:
15:89:0b:5b:4c:2e:46:f8:f8:ff:4a:f9:8e:54:65:
f9:62:29:ba:26:1f:fe:b9:93:7c:76:02:1d:b3:ea:
cb:a1:54:0b:1b:9b:d9:35:78:29:b8:7e:e9:a3:a3:
58:22:57:05:2b:01:f0:58:96:43:8e:fb:57:2b:92:
a1:af:d2:88:cd:83:2a:b4:2c:da:7f:f8:7e:1b:2e:
6e:dc:e9:e7:27:3b:cc:49:6d:bc:a9:e5:c1:4e:fd:
1e:fa:dd:da:35:f3:20:b4:52:cc:ea:22:17:51:8e:
1f:94:79:17:5b:8f:b8:cf:51:e4:e6:aa:c3:f1:5d:
82:d2:e5:56:7c:fa:59:ad:11:1e:f7:7a:24:11:8d:
1e:b5:40:71:c8:5e:89:0b:a4:37:8d:d7:e8:e6:9e:
5e:8a:5d:c3:9a:25:6b:aa:70:83:61:46:5b:b9:79:
62:13:94:d2:dc:48:29:6c:dd:b0:50:53:b7:f1:12:
d8:bc:6b:ec:fd:4d:b8:64:c8:ff:87:5d:9a:26:c7:
9d:09:a5:50:eb:58:15:4e:04:02:4a:34:2c:30:e0:
97:33:65:c3:a3:ea:e2:b1:43:b6:90:59:b6:f4:22:
80:d1:1c:c9:a2:79:e2:56:c0:04:f4:59:b0:88:a8:
fb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:99:EA:CE:F0:78:15:D6:FE:05:EA:0C:80:7F:EE:FE:3D:63:E1:E3
X509v3 Authority Key Identifier:
keyid:0C:2D:7C:23:8E:89:DC:D5:2F:6F:B2:29:6D:FA:47:58:C6:1C:97:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DC18I46J3NUvb7IpbfpHWMYcl74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/n5nqzvB4Fdb-BeoMgH_u_j1j4eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/46916e-e86c-44a8-8ab9-53849baf1b45/1/DC18I46J3NUvb7IpbfpHWMYcl74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.57.0/24
185.93.59.0/24
IPv6:
2a03:8fa0:1000::/36
Signature Algorithm: sha256WithRSAEncryption
73:0a:22:92:63:8e:63:2b:c4:df:d8:7d:21:ac:d2:c8:2b:eb:
7d:09:f6:90:93:27:12:84:32:d8:a5:b8:8c:8f:5b:5c:e6:55:
43:28:eb:84:61:ec:6d:15:f1:1b:d0:95:d9:04:45:9e:b6:9d:
e6:48:00:c8:92:ce:b1:76:eb:8e:60:f2:6f:a8:44:07:02:b3:
82:bb:db:c7:bb:32:58:c4:a2:da:3c:c3:2c:8c:1e:5c:a0:b0:
40:a5:5f:fd:41:ae:c4:63:ee:24:38:14:90:dd:f1:28:64:49:
82:8b:66:94:17:3d:83:6d:e4:dc:ca:c5:1c:ad:4a:23:41:fd:
01:85:90:a9:4b:0a:9f:01:ac:2c:f9:b8:cc:f1:60:fc:ed:bf:
a1:20:c7:e4:0b:c2:b2:d7:ab:56:c0:4d:82:eb:36:80:c2:8e:
42:e2:32:c3:08:5c:e4:d7:a7:69:2d:69:0b:ea:41:38:0a:f0:
5c:56:ff:18:37:34:58:4f:5a:b3:ea:a9:40:12:da:cc:75:db:
53:dd:17:84:15:61:54:58:fb:ed:a8:f2:1d:4c:f4:3c:60:12:
68:90:23:5b:3c:db:67:5d:0b:cf:b3:22:60:9d:36:b8:ea:9c:
9b:e4:55:31:12:c0:dd:e5:b3:ad:3c:67:57:fd:1d:82:9e:79:
06:b6:e4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:01:07 2025 by rpki-client