Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/0OtBGKZoArdG9xr5Hantq94pOBQ.roa
File: 0OtBGKZoArdG9xr5Hantq94pOBQ.roa (raw, json)
Hash identifier: iXzauuN3FjHWPtjyckYGhR1Sa3E/G7T5BGW2XCWiX3g=
Subject key identifier: D0:EB:41:18:A6:68:02:B7:46:F7:1A:F9:1D:A9:ED:AB:DE:29:38:14
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 01942068722F83476FA437199DB2FAADC2B5
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/0OtBGKZoArdG9xr5Hantq94pOBQ.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8426
IP address blocks: 93.93.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:72:2f:83:47:6f:a4:37:19:9d:b2:fa:ad:c2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0eb4118a66802b746f71af91da9edabde293814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:ce:c4:4c:dc:b0:ea:0e:96:b3:38:62:0c:
c4:65:f4:a4:9a:1f:fe:ef:0b:8e:66:04:07:6d:82:
05:af:d1:87:d5:e7:2b:22:a4:f5:ad:87:43:40:38:
6e:fc:98:08:ea:a1:20:5d:e1:a6:91:ac:df:ee:39:
74:ce:51:e1:d9:47:83:55:9d:74:1b:0a:e0:74:2b:
95:40:16:93:95:67:bc:c7:2f:7b:1c:61:ed:92:b1:
bf:a0:42:46:f3:9b:43:73:f1:a8:6e:80:79:a9:c0:
d8:60:51:ed:06:20:f6:84:a6:e4:6a:67:ad:d7:32:
7b:f9:d0:55:27:81:07:c6:0e:a5:ca:e5:7e:d8:57:
b1:65:cd:4f:27:03:79:90:c5:af:f5:24:8a:30:cf:
ee:7d:d3:97:b0:0e:e5:5f:d1:56:8f:e7:a4:c9:a4:
ed:19:45:c4:b3:ad:42:23:18:ae:d6:dd:a8:b0:a7:
7b:da:a7:d6:42:24:71:79:22:b8:5f:95:6d:39:d3:
d1:b5:b9:a2:cd:cb:77:d3:2c:ad:e1:50:93:f7:0e:
b2:8a:2f:e9:e7:69:0e:80:d0:62:b6:d3:ca:2d:eb:
9d:52:12:f2:af:72:23:50:ea:d3:e8:93:ad:2e:4d:
a3:52:43:70:47:6e:f8:ff:d4:6b:2c:21:32:44:60:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:EB:41:18:A6:68:02:B7:46:F7:1A:F9:1D:A9:ED:AB:DE:29:38:14
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/0OtBGKZoArdG9xr5Hantq94pOBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.224.0/21
Signature Algorithm: sha256WithRSAEncryption
44:fe:e3:42:57:b5:2b:8b:bb:50:2c:eb:a8:a6:89:8a:30:89:
e7:25:25:4a:54:7a:a3:e3:e0:c2:0a:bf:8e:ee:ca:dc:bf:b2:
18:3a:05:e1:69:da:3b:c9:04:4b:d8:22:f5:71:06:b5:ad:14:
08:a4:55:1b:72:cf:12:e4:b6:44:93:54:41:9e:cf:fd:8e:99:
cb:b3:5d:f1:63:6a:fd:7f:fb:10:4f:b0:d3:f2:88:e9:7e:7b:
47:ec:0c:92:74:a7:e3:ab:8b:fc:b7:34:f2:cb:dd:7f:85:eb:
39:e2:1d:de:2d:e0:2b:cc:33:1e:f8:00:97:fa:5e:fe:4f:18:
e6:78:5a:d2:50:80:c4:ae:b9:4d:a1:b6:2d:46:55:28:f3:65:
a4:dc:6b:a8:fc:ae:a0:0f:c6:b5:4c:71:07:36:96:3f:6a:3e:
c6:31:4c:43:f8:3c:28:8d:cc:b8:5e:05:55:05:67:b9:2e:e2:
e9:8b:90:ed:f1:fd:3e:26:45:5b:ef:19:5c:4c:cb:37:aa:c0:
d8:5b:e9:41:1a:c7:22:13:f5:91:07:c8:26:ea:d1:ce:68:7e:
28:14:1b:95:1e:68:7d:a1:f3:ad:c6:36:14:81:ca:ef:b0:1f:
ec:47:04:0d:8f:b5:bc:cb:72:36:52:82:59:9a:eb:55:f9:6e:
0f:f0:55:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:31 2025 by rpki-client