Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/rFN0KDBiljkvhFQ66hAH56Hsc84.roa
File: rFN0KDBiljkvhFQ66hAH56Hsc84.roa (raw, json)
Hash identifier: 2lh/B/WXfyLgwdob+PT24RTvz83sEjoawwppCzC07qk=
Subject key identifier: AC:53:74:28:30:62:96:39:2F:84:54:3A:EA:10:07:E7:A1:EC:73:CE
Certificate issuer: /CN=460d3149fc50ca9797f50fde9e02a083134c5019
Certificate serial: 019424B37FAE5C6E3B32A35BFCBE83882305
Authority key identifier: 46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/rFN0KDBiljkvhFQ66hAH56Hsc84.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213113
IP address blocks: 93.177.80.0/24 maxlen: 24
2a0a:d980::/32 maxlen: 32
2a0a:d981::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7f:ae:5c:6e:3b:32:a3:5b:fc:be:83:88:23:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460d3149fc50ca9797f50fde9e02a083134c5019
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ac537428306296392f84543aea1007e7a1ec73ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:75:5b:c3:7c:a8:cc:31:de:1e:5b:38:76:91:
c6:73:32:f2:7c:0b:5a:a6:12:f5:89:82:e0:f6:8e:
67:b2:e5:bf:ee:3a:64:9b:a2:12:c5:38:9b:09:42:
18:d8:e7:bd:d4:71:b2:bf:5d:be:78:23:f9:c0:34:
60:95:4d:0b:58:bd:fc:36:04:2d:fa:6f:57:c5:c3:
be:85:08:83:6c:8f:03:cc:b4:dc:68:2a:6e:76:e8:
1f:4b:1b:a0:fc:34:82:40:69:5a:48:59:bd:3e:c0:
e1:8d:d1:32:04:bc:66:15:e8:da:ef:d4:19:0d:f1:
9e:30:99:95:1b:6f:ed:2c:14:01:13:d0:fc:f6:d3:
dd:4b:7c:10:02:ec:db:12:57:52:4a:48:8a:e5:0b:
38:27:5c:a1:c9:cd:11:b4:bc:e6:25:63:25:5f:74:
a8:26:77:5e:a6:15:95:c9:a6:d7:b3:1a:db:11:38:
51:e1:d3:f6:4a:85:20:27:5f:7f:f5:21:f7:84:53:
cc:e3:75:8b:70:12:1b:5b:f2:46:d3:34:a3:20:bd:
b3:ef:a9:88:24:45:d0:be:98:02:91:29:7d:f5:00:
4e:6a:70:64:93:9f:eb:45:e5:92:40:07:38:2e:c4:
59:01:4c:29:b6:41:ba:5f:75:bc:80:15:ad:c2:b3:
9a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:53:74:28:30:62:96:39:2F:84:54:3A:EA:10:07:E7:A1:EC:73:CE
X509v3 Authority Key Identifier:
keyid:46:0D:31:49:FC:50:CA:97:97:F5:0F:DE:9E:02:A0:83:13:4C:50:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg0xSfxQypeX9Q_engKggxNMUBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/rFN0KDBiljkvhFQ66hAH56Hsc84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/016246-376c-4725-80ae-75bd946a7355/1/Rg0xSfxQypeX9Q_engKggxNMUBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.80.0/24
IPv6:
2a0a:d980::/31
Signature Algorithm: sha256WithRSAEncryption
15:f2:27:5a:92:98:a0:c7:90:fe:f6:16:65:6e:1c:30:fe:c9:
6b:e3:ac:b1:cf:2b:0b:14:e5:bb:2a:92:fb:ec:68:fc:67:28:
b2:f4:8e:1c:e3:ac:c6:a8:06:51:90:d4:9f:c4:22:84:2a:d8:
36:3b:f0:0d:57:55:21:c3:d9:75:cb:f9:7f:3e:ac:48:f5:cc:
3b:a6:0f:09:96:e4:c7:37:75:e2:6a:b4:54:a1:ba:f0:91:d4:
f3:3b:5a:de:c9:6f:7e:05:0e:7a:bf:a5:55:81:5e:75:78:20:
ec:a4:7f:ae:df:4c:cc:3d:e1:51:5c:6c:e0:d1:64:b3:7f:00:
0f:d6:d1:5d:4c:29:03:28:ec:44:c5:62:41:ba:75:15:ed:fa:
b8:cc:d6:07:46:6b:80:c8:5c:f3:08:b4:ec:19:2a:e8:03:91:
a4:06:78:0e:46:ed:8a:e7:88:34:ba:f7:9b:d4:a9:a8:46:b7:
77:5c:22:20:4e:26:52:39:6f:26:e9:7d:c0:e9:47:c4:97:6d:
f9:7b:ab:1e:cf:b2:1a:ca:3f:da:31:24:9e:4c:ca:b4:1e:fe:
91:0c:49:f1:1d:45:ca:62:77:f7:2c:0e:e5:66:59:62:29:29:
83:1c:e9:f8:5f:80:1b:53:28:c7:c8:12:a1:e4:ba:57:ec:0a:
f2:3b:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:13 2025 by rpki-client