Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/8EuHcSXF93AJXZb7bhpJqQ9T-os.roa
File: 8EuHcSXF93AJXZb7bhpJqQ9T-os.roa (raw, json)
Hash identifier: tA/g1MQIaVkGvGKFpxq+dGSCjDGH6Bsw81qSCo4f3fQ=
Subject key identifier: F0:4B:87:71:25:C5:F7:70:09:5D:96:FB:6E:1A:49:A9:0F:53:FA:8B
Certificate issuer: /CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Certificate serial: 01942068726DB90449888B8E867AFFD27902
Authority key identifier: 6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/8EuHcSXF93AJXZb7bhpJqQ9T-os.roa
Signing time: Wed 01 Jan 2025 05:48:23 +0000
ROA not before: Wed 01 Jan 2025 05:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 93.93.224.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:72:6d:b9:04:49:88:8b:8e:86:7a:ff:d2:79:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c32dc9e5249fb41c47df4914121a9b1a6aef1ff
Validity
Not Before: Jan 1 05:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f04b877125c5f770095d96fb6e1a49a90f53fa8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d3:b9:a7:6f:94:c7:11:3d:71:8b:45:8d:8b:
66:fd:76:3e:16:14:43:59:0f:e8:c4:6f:23:15:5b:
30:0c:21:56:b5:a8:35:c3:bf:64:54:a7:e9:d8:fb:
ce:a6:a1:d3:67:a1:62:af:90:50:83:70:2b:92:ad:
8b:dd:db:1d:94:0d:a1:91:d7:66:95:12:93:7e:80:
b3:03:e3:5c:46:49:43:34:96:88:1e:01:95:74:66:
b0:37:61:ed:db:8e:9d:32:d0:f7:ae:89:7e:82:48:
fe:40:48:dd:b3:0d:f7:90:ff:06:5e:01:9d:d5:ab:
af:83:57:02:99:a2:27:17:f0:11:ba:f4:7d:66:71:
5a:68:a3:26:ef:73:e0:4d:74:a7:66:cc:10:37:0d:
eb:73:4c:7d:a8:c8:e2:ab:a8:d7:15:d9:68:65:61:
a0:63:27:4d:9e:21:82:cb:27:97:53:ec:1a:2d:d4:
72:0c:2d:d6:82:a1:b8:b6:5a:38:15:91:bf:9a:91:
39:e6:14:78:36:bc:86:ed:b2:bc:15:58:97:dd:e3:
dc:61:a2:a1:ac:97:b0:3a:75:e9:53:b1:ce:8a:a2:
b7:ec:fb:7b:98:74:7c:71:91:28:71:82:49:a7:91:
32:43:a6:e5:29:31:ae:ef:8f:57:47:08:2f:09:fe:
d8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:4B:87:71:25:C5:F7:70:09:5D:96:FB:6E:1A:49:A9:0F:53:FA:8B
X509v3 Authority Key Identifier:
keyid:6C:32:DC:9E:52:49:FB:41:C4:7D:F4:91:41:21:A9:B1:A6:AE:F1:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDLcnlJJ-0HEffSRQSGpsaau8f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/8EuHcSXF93AJXZb7bhpJqQ9T-os.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/51ba27-25e2-4727-a4b5-3fbc9759eb6a/1/bDLcnlJJ-0HEffSRQSGpsaau8f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.224.0/21
Signature Algorithm: sha256WithRSAEncryption
73:a7:01:62:20:2e:c9:a2:77:5c:4a:c9:af:0c:5f:52:f3:8c:
4c:be:8f:4f:37:43:82:99:f3:6b:b5:5f:23:f7:e8:5f:15:ff:
a1:dc:f5:28:36:d9:1c:64:3b:22:51:76:56:f4:86:b5:ec:f6:
e7:65:b1:7f:4a:b2:87:76:32:d6:09:de:1d:7e:69:5f:55:ca:
93:1e:6e:1d:37:2a:99:45:53:73:90:5b:5d:1c:2c:26:93:43:
0d:c3:a1:7c:eb:d5:e8:9e:d3:a2:16:c6:39:fa:71:67:74:c4:
c0:53:7a:fa:44:cc:df:fb:08:5d:93:04:fb:f5:c2:60:ff:e2:
fa:65:af:17:9d:33:41:17:45:11:24:c6:35:61:0c:6b:a2:6c:
0a:5b:ca:c4:c0:64:5f:eb:0b:a6:c5:ca:a5:b6:dd:9d:22:ef:
81:1a:65:ff:bd:6c:5f:1b:83:4d:b2:96:64:b3:97:c4:11:8e:
b9:f5:99:42:23:95:84:aa:a9:fd:ea:6e:33:1d:b3:67:8f:ef:
00:5c:e8:9b:1b:02:08:0e:bb:07:f3:e6:ed:84:e5:70:a3:01:
00:d5:65:be:a8:de:bb:e7:39:b0:41:1d:87:2e:58:b2:92:83:
35:49:84:cc:77:a2:64:50:b6:50:ae:25:37:bd:92:68:ec:0c:
a2:e4:7b:87
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaHJtuQRJiIuOhnr/0nkCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzJkYzllNTI0OWZiNDFjNDdkZjQ5MTQxMjFhOWIxYTZh
ZWYxZmYwHhcNMjUwMTAxMDU0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDRiODc3MTI1YzVmNzcwMDk1ZDk2ZmI2ZTFhNDlhOTBmNTNmYThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNO5p2+UxxE9cYtFjYtm/XY+FhRD
WQ/oxG8jFVswDCFWtag1w79kVKfp2PvOpqHTZ6Fir5BQg3Arkq2L3dsdlA2hkddm
lRKTfoCzA+NcRklDNJaIHgGVdGawN2Ht246dMtD3rol+gkj+QEjdsw33kP8GXgGd
1auvg1cCmaInF/ARuvR9ZnFaaKMm73PgTXSnZswQNw3rc0x9qMjiq6jXFdloZWGg
YydNniGCyyeXU+waLdRyDC3WgqG4tlo4FZG/mpE55hR4NryG7bK8FViX3ePcYaKh
rJewOnXpU7HOiqK37Pt7mHR8cZEocYJJp5EyQ6blKTGu749XRwgvCf7Y2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPBLh3ElxfdwCV2W+24aSakPU/qLMB8GA1UdIwQY
MBaAFGwy3J5SSftBxH30kUEhqbGmrvH/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUt
M2ZiYzk3NTllYjZhLzEvOEV1SGNTWEY5M0FKWFpiN2JocEpxUTlULW9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81MWJhMjctMjVlMi00NzI3LWE0YjUtM2ZiYzk3NTllYjZh
LzEvYkRMY25sSkotMEhFZmZTUlFTR3BzYWF1OGY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXV3gMA0G
CSqGSIb3DQEBCwUAA4IBAQBzpwFiIC7JondcSsmvDF9S84xMvo9PN0OCmfNrtV8j
9+hfFf+h3PUoNtkcZDsiUXZW9Ia17PbnZbF/SrKHdjLWCd4dfmlfVcqTHm4dNyqZ
RVNzkFtdHCwmk0MNw6F869XontOiFsY5+nFndMTAU3r6RMzf+whdkwT79cJg/+L6
Za8XnTNBF0URJMY1YQxromwKW8rEwGRf6wumxcqltt2dIu+BGmX/vWxfG4NNspZk
s5fEEY659ZlCI5WEqqn96m4zHbNnj+8AXOibGwIIDrsH8+bthOVwowEA1WW+qN67
5zmwQR2HLliykoM1SYTMd6JkULZQriU3vZJo7Ayi5HuH
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:10 2025 by rpki-client