Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Du4yLgaAVG0tILYPUoya0oOei7U.roa
File: Du4yLgaAVG0tILYPUoya0oOei7U.roa (raw, json)
Hash identifier: OTpdf6L4omiPrrxcj6wrKSAvLjltE0I/Q0BHbaHY4g0=
Subject key identifier: 0E:EE:32:2E:06:80:54:6D:2D:20:B6:0F:52:8C:9A:D2:83:9E:8B:B5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194221FFBE7171BFB947C0151E103687C45
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Du4yLgaAVG0tILYPUoya0oOei7U.roa
Signing time: Wed 01 Jan 2025 13:48:28 +0000
ROA not before: Wed 01 Jan 2025 13:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29551
IP address blocks: 85.93.10.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Apr 2025 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fb:e7:17:1b:fb:94:7c:01:51:e1:03:68:7c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0eee322e0680546d2d20b60f528c9ad2839e8bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ab:4e:fb:e3:9d:18:38:e5:ec:94:5f:98:a4:
45:7e:45:18:a8:bf:cb:a6:19:58:6f:83:d4:ad:db:
fc:1d:07:9c:38:ea:ae:dc:f5:4d:92:c2:e0:06:a5:
2d:14:a2:56:92:14:b1:33:99:98:c7:18:2d:73:a2:
ca:af:0e:dd:d0:51:c4:74:c8:15:b6:af:04:90:25:
b2:60:ed:a6:19:db:92:0d:80:fa:31:2a:4a:12:41:
fd:4e:43:a0:f4:9a:b2:53:66:24:bb:c1:a2:50:24:
6f:14:2f:ab:dd:e8:0f:d5:f5:28:3a:9c:52:9b:2c:
be:e8:34:c5:ab:1a:97:c8:57:4b:17:66:e7:4f:19:
5b:62:dc:f4:e2:37:86:4a:ea:d0:cd:51:68:92:de:
86:a4:4c:ac:7b:86:e1:be:8d:93:9e:15:01:c2:ea:
53:32:4a:4a:1b:0e:f0:b5:5a:a3:a6:f3:5a:15:5c:
ea:52:bb:82:de:27:46:03:87:7b:12:85:b0:df:60:
f0:c1:e6:7c:2f:a9:d2:11:c1:e0:10:96:8f:b7:28:
4b:4d:89:21:77:9c:0d:7c:39:4b:62:c0:1f:9c:8c:
1c:fc:a6:72:2c:4d:b7:d3:7e:75:fe:0c:e6:f8:36:
38:fa:64:72:ed:7e:dd:05:7d:b5:38:e5:68:42:dd:
93:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:EE:32:2E:06:80:54:6D:2D:20:B6:0F:52:8C:9A:D2:83:9E:8B:B5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Du4yLgaAVG0tILYPUoya0oOei7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.93.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:a4:7e:ef:dd:0e:de:19:4a:a2:1c:61:35:c1:12:77:34:c2:
49:72:55:d7:f5:3c:fb:d2:16:d7:5c:e2:97:fa:26:ce:89:e5:
5e:ac:f5:01:37:97:c3:b8:81:37:12:2d:7a:4f:39:42:69:43:
ab:03:7a:a6:01:a8:2f:61:2b:d2:00:3f:7b:66:21:c3:fd:60:
7d:cf:ec:a4:b7:fb:4a:45:c4:42:5b:20:e9:12:2c:cc:81:eb:
28:d1:5c:f5:2e:7d:d7:0f:7d:89:76:f0:0b:ad:51:b5:a1:11:
26:93:fe:3c:c6:75:b1:40:b9:69:11:36:3b:6a:be:ae:23:93:
8b:19:09:21:0d:e4:8a:9c:9d:8c:b2:93:97:98:c4:40:83:6b:
5f:be:8e:6c:e0:d5:a7:ae:de:74:a4:3d:d6:19:93:b5:21:1d:
80:dd:a7:b4:c6:f3:fd:a2:5a:0f:60:04:2b:f9:c5:da:4a:78:
a0:c2:18:f5:ad:51:62:c2:17:11:73:bf:7d:68:e8:07:53:64:
b1:3f:bf:58:b9:42:a8:e1:a4:df:57:61:1c:3f:73:64:52:4a:
89:48:9f:0f:34:30:e9:0b:1b:68:1b:b3:d8:4b:f6:c6:9c:2e:
14:95:1e:2a:23:2a:43:3c:69:b3:67:7b:3f:0a:28:18:e7:c1:
a0:d8:f7:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:20:36 2025 by rpki-client