Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/063chQbPVtTycYtU5mdz-fJzDo0.roa
File: 063chQbPVtTycYtU5mdz-fJzDo0.roa (raw, json)
Hash identifier: bwMAtB49wMHmfCNgT1s+1fHs5MZyZITGFXoOTvc/FSw=
Subject key identifier: D3:AD:DC:85:06:CF:56:D4:F2:71:8B:54:E6:67:73:F9:F2:73:0E:8D
Certificate issuer: /CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Certificate serial: 018CC86EEC2972683B1B0C0B051B769D3B29
Authority key identifier: 95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/063chQbPVtTycYtU5mdz-fJzDo0.roa
Signing time: Tue 02 Jan 2024 04:29:21 +0000
ROA not before: Tue 02 Jan 2024 04:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44637
IP address blocks: 93.93.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:ec:29:72:68:3b:1b:0c:0b:05:1b:76:9d:3b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95f7605e850c9dbf17daf0ba38e36fcc63c2cbfa
Validity
Not Before: Jan 2 04:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d3addc8506cf56d4f2718b54e66773f9f2730e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:81:bb:e6:44:26:12:c9:ef:53:40:b7:f5:a6:
85:df:9d:5c:91:6e:c8:ed:59:b6:d8:c1:2f:cc:29:
e4:27:8f:c4:d7:60:41:00:d2:1e:dc:ec:12:d4:82:
3f:7f:4d:50:a3:aa:25:26:2a:16:ae:63:bd:b9:92:
20:65:2d:3c:9c:d3:f0:30:9f:95:d6:49:40:7c:4f:
6b:c2:e4:ad:66:a4:b5:5c:a3:15:93:f6:5d:ab:91:
58:66:49:23:3a:17:c3:c3:5c:e5:56:ad:e4:41:37:
eb:02:8d:af:db:ca:08:e9:94:60:44:87:ac:10:33:
74:15:cd:a9:16:77:d8:e8:bd:42:6e:c1:d5:d5:ec:
d1:1f:ff:68:44:36:ee:78:c3:0f:e8:c3:c3:d0:1d:
c8:ac:5f:db:60:fd:22:3e:b2:42:8f:17:42:c0:0a:
a3:59:0f:bf:14:82:90:72:53:69:45:0c:c4:bc:e2:
25:db:84:a2:c6:f6:5d:dd:0a:c5:20:1b:25:7e:78:
1b:e4:5e:9d:68:46:82:ab:83:dd:6c:2a:da:f9:dc:
ad:c0:3d:45:d8:7c:51:d1:f4:90:76:78:74:73:0e:
30:8f:9f:f4:af:e2:6a:55:2a:b4:a7:4f:a6:41:a7:
43:8e:36:a6:4e:75:63:f5:43:6f:8f:bd:8f:44:e6:
2f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AD:DC:85:06:CF:56:D4:F2:71:8B:54:E6:67:73:F9:F2:73:0E:8D
X509v3 Authority Key Identifier:
keyid:95:F7:60:5E:85:0C:9D:BF:17:DA:F0:BA:38:E3:6F:CC:63:C2:CB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lfdgXoUMnb8X2vC6OONvzGPCy_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/063chQbPVtTycYtU5mdz-fJzDo0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9f3bfa-ef3b-4361-b311-6705dc2e3aaa/1/lfdgXoUMnb8X2vC6OONvzGPCy_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.25.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:8e:40:96:a3:bf:b3:a0:96:7d:78:f8:06:4b:1b:b1:62:55:
3d:b7:09:36:08:ba:a1:af:cf:c4:c0:22:89:b8:e0:17:cf:8e:
3a:e7:00:e5:74:0b:97:0f:14:e0:96:3e:0b:7c:af:27:80:28:
ea:f3:e8:6a:c5:ef:1b:25:b2:4e:71:6b:ed:86:80:d5:cc:ef:
00:43:31:bd:2a:58:94:b4:49:39:c2:1c:5e:6e:e5:82:7d:16:
37:48:73:8a:27:8a:e8:4b:cf:39:6c:ff:26:ab:d6:73:73:b5:
fa:8c:13:be:8a:b0:a6:89:8d:51:41:05:83:47:39:9c:2c:d4:
ee:d6:04:b7:dc:35:a2:42:04:72:31:81:5d:d9:01:b8:2a:70:
49:bf:fb:76:fe:e2:ee:10:77:03:40:64:4b:e3:48:2a:ac:cb:
3f:f8:bf:71:4a:50:85:fa:fb:8a:4e:19:ec:4b:c6:a0:c7:97:
f9:29:ee:c1:2d:fc:3a:76:4b:eb:99:44:a7:07:44:b8:25:6f:
5a:8a:bb:f4:23:95:2f:27:53:c7:5f:d3:64:6c:65:99:4e:a2:
b7:4a:3c:be:31:b0:a6:45:2a:19:55:92:e5:28:ff:4b:f0:60:
84:89:b7:ea:0c:b2:cd:3c:7f:82:3d:6d:ed:34:54:ac:39:43:
57:10:32:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIbuwpcmg7GwwLBRt2nTspMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1Zjc2MDVlODUwYzlkYmYxN2RhZjBiYTM4ZTM2ZmNjNjNj
MmNiZmEwHhcNMjQwMTAyMDQyOTIxWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2FkZGM4NTA2Y2Y1NmQ0ZjI3MThiNTRlNjY3NzNmOWYyNzMwZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4G75kQmEsnvU0C39aaF351ckW7I
7Vm22MEvzCnkJ4/E12BBANIe3OwS1II/f01Qo6olJioWrmO9uZIgZS08nNPwMJ+V
1klAfE9rwuStZqS1XKMVk/Zdq5FYZkkjOhfDw1zlVq3kQTfrAo2v28oI6ZRgRIes
EDN0Fc2pFnfY6L1CbsHV1ezRH/9oRDbueMMP6MPD0B3IrF/bYP0iPrJCjxdCwAqj
WQ+/FIKQclNpRQzEvOIl24SixvZd3QrFIBslfngb5F6daEaCq4PdbCra+dytwD1F
2HxR0fSQdnh0cw4wj5/0r+JqVSq0p0+mQadDjjamTnVj9UNvj72PROYvrQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNOt3IUGz1bU8nGLVOZnc/nycw6NMB8GA1UdIwQY
MBaAFJX3YF6FDJ2/F9rwujjjb8xjwsv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGZkZ1hvVU1uYjhYMnZDNk9PTnZ6R1BDeV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85ZjNiZmEtZWYzYi00MzYxLWIzMTEt
NjcwNWRjMmUzYWFhLzEvMDYzY2hRYlBWdFR5Y1l0VTVtZHotZkp6RG8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85ZjNiZmEtZWYzYi00MzYxLWIzMTEtNjcwNWRjMmUzYWFh
LzEvbGZkZ1hvVU1uYjhYMnZDNk9PTnZ6R1BDeV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV0ZMA0G
CSqGSIb3DQEBCwUAA4IBAQB+jkCWo7+zoJZ9ePgGSxuxYlU9twk2CLqhr8/EwCKJ
uOAXz4465wDldAuXDxTglj4LfK8ngCjq8+hqxe8bJbJOcWvthoDVzO8AQzG9KliU
tEk5whxebuWCfRY3SHOKJ4roS885bP8mq9Zzc7X6jBO+irCmiY1RQQWDRzmcLNTu
1gS33DWiQgRyMYFd2QG4KnBJv/t2/uLuEHcDQGRL40gqrMs/+L9xSlCF+vuKThns
S8agx5f5Ke7BLfw6dkvrmUSnB0S4JW9airv0I5UvJ1PHX9NkbGWZTqK3Sjy+MbCm
RSoZVZLlKP9L8GCEibfqDLLNPH+CPW3tNFSsOUNXEDIT
-----END CERTIFICATE-----
Generated at Sat Jun 1 17:09:44 2024 by rpki-client on console-fra.rpki-client.org