Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/oQ8sIcgXpXuSUG7cNHtxBRazqc0.roa
File: oQ8sIcgXpXuSUG7cNHtxBRazqc0.roa (raw, json)
Hash identifier: AjGNR5wRMBSzjpjmL0iwZdQfVi3IKmsNzSO+kwX6G8E=
Subject key identifier: A1:0F:2C:21:C8:17:A5:7B:92:50:6E:DC:34:7B:71:05:16:B3:A9:CD
Certificate issuer: /CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Certificate serial: 01942747B2148ED3CAB4E4B69C5B0989C89A
Authority key identifier: F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/oQ8sIcgXpXuSUG7cNHtxBRazqc0.roa
Signing time: Thu 02 Jan 2025 13:49:57 +0000
ROA not before: Thu 02 Jan 2025 13:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 93.183.68.0/24 maxlen: 24
93.183.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:b2:14:8e:d3:ca:b4:e4:b6:9c:5b:09:89:c8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9e00abe184a625b76f8d1fbceef817aaf71415b
Validity
Not Before: Jan 2 13:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a10f2c21c817a57b92506edc347b710516b3a9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:1c:c4:47:0c:eb:85:fc:92:84:cf:9f:0e:
91:e0:9f:fe:56:9e:42:94:53:42:7e:dc:cd:1d:8d:
24:0a:83:16:ef:5e:db:d8:f2:b8:f3:f3:7f:31:99:
0e:4f:56:32:79:ac:bf:bf:a8:58:1f:96:b0:8b:09:
5c:36:10:6c:38:71:88:38:0d:b7:3b:92:5d:dd:8d:
82:be:87:60:1a:f4:f5:e5:e4:c2:a8:fd:02:18:02:
b2:68:85:fa:65:d4:54:74:71:19:25:f6:6f:55:aa:
c7:56:3e:5c:26:ee:4c:85:08:4b:80:0b:ce:55:3a:
0d:a5:ed:62:66:11:0c:4f:65:87:4c:98:0d:a2:5c:
c1:84:15:70:29:43:19:02:1a:3b:8f:68:ff:b4:6a:
ed:16:32:68:55:c1:92:ec:72:12:af:32:ef:9b:3c:
4e:4d:db:58:50:bc:93:ff:cd:23:c4:16:62:b0:05:
85:82:5d:db:18:d4:3e:bd:1f:a2:89:e2:68:83:d9:
e8:13:2f:00:4f:14:71:b6:8d:48:ab:cf:a3:5b:3b:
f4:5b:9c:6f:4e:80:b2:74:9b:36:f9:29:47:42:5f:
a2:f4:11:d0:04:38:a9:9a:4e:e4:7c:f4:29:ad:6b:
29:9c:38:d2:9a:45:3a:66:77:48:9a:99:4d:44:88:
55:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:0F:2C:21:C8:17:A5:7B:92:50:6E:DC:34:7B:71:05:16:B3:A9:CD
X509v3 Authority Key Identifier:
keyid:F9:E0:0A:BE:18:4A:62:5B:76:F8:D1:FB:CE:EF:81:7A:AF:71:41:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/oQ8sIcgXpXuSUG7cNHtxBRazqc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8a322f-dc28-422f-b570-58b64d557c0c/1/1-eAKvhhKYlt2-NH7zu-Beq9xQVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.68.0/23
Signature Algorithm: sha256WithRSAEncryption
45:bd:9b:0a:dd:15:ba:a5:2c:09:71:45:fb:b3:8b:1b:97:bc:
1c:13:62:0c:61:71:f0:89:00:36:69:c9:c2:82:69:80:eb:d1:
06:6e:31:d0:cc:12:c6:cb:75:ed:78:b8:d8:2a:96:96:24:e8:
b5:45:2f:1c:25:df:85:e4:99:55:17:43:19:1b:fc:c0:18:22:
0c:5e:68:a9:c2:1a:74:c5:3b:67:f9:0c:c7:30:30:67:64:7f:
46:b3:ac:c6:29:45:91:1d:41:9f:0e:be:d7:d8:13:08:27:8b:
d5:5f:44:50:c7:0f:ff:76:b7:d3:92:28:42:61:5a:43:23:9c:
01:fa:58:da:38:77:20:14:49:ec:4c:a4:50:2e:71:d3:58:b3:
8b:e7:65:7f:2c:9a:f3:c5:77:4f:2d:95:21:3d:5e:09:1a:a7:
4c:03:93:7e:7b:da:78:96:25:54:fd:89:b4:6d:09:8b:21:89:
c9:1d:52:3f:b0:c6:d6:2f:7f:81:3d:39:86:3a:5a:24:3d:53:
a1:e4:cb:9a:d6:17:e7:ef:11:1c:97:51:c4:1d:61:d5:1c:f8:
23:12:20:4a:3b:00:00:84:6b:53:26:17:6e:17:d1:78:a1:35:
6e:c9:8d:8a:c2:f1:a5:e5:1d:ec:87:55:80:69:e2:29:7e:d2:
92:65:5c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:54:35 2025 by rpki-client