Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DMIrB_k7JsHGS_x_PzLN7TqKuxE.roa
File: DMIrB_k7JsHGS_x_PzLN7TqKuxE.roa (raw, json)
Hash identifier: qYaqjE+BoI5K3JHwMGJlrsXN99CEHe3gnwySKwDQY5E=
Subject key identifier: 0C:C2:2B:07:F9:3B:26:C1:C6:4B:FC:7F:3F:32:CD:ED:3A:8A:BB:11
Certificate issuer: /CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Certificate serial: 0195392C59FFC05827D655B5D0E3913D1021
Authority key identifier: D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DMIrB_k7JsHGS_x_PzLN7TqKuxE.roa
Signing time: Mon 24 Feb 2025 18:16:02 +0000
ROA not before: Mon 24 Feb 2025 18:16:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212735
IP address blocks: 93.177.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.mft
rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 08:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:39:2c:59:ff:c0:58:27:d6:55:b5:d0:e3:91:3d:10:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d76bb48e93e8a0058c5c72a81a8799455307ee56
Validity
Not Before: Feb 24 18:16:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0cc22b07f93b26c1c64bfc7f3f32cded3a8abb11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:9c:97:27:b5:66:96:01:cc:ee:60:1b:23:
dc:41:5e:85:61:39:67:ff:fb:d6:78:2f:40:ae:fd:
cd:86:e4:af:c5:9b:89:fe:ba:25:ed:ed:09:89:17:
fd:8d:0e:fb:a6:d6:50:15:0a:66:f5:c0:9f:c7:cb:
ec:1e:46:33:cd:2b:cb:41:22:b2:18:48:d2:88:01:
e8:47:4b:76:5a:11:ee:ae:c1:12:a0:7a:9f:35:eb:
b1:c6:08:22:aa:ca:df:f9:0d:96:d0:c0:94:41:1b:
be:94:be:45:c8:80:63:f4:a8:2c:87:eb:39:36:04:
7b:b5:4b:96:a1:d1:0a:2c:e0:55:e6:2c:b1:b2:c3:
52:4d:70:bd:21:82:e7:cd:b9:b4:22:d0:59:b1:b8:
f3:f9:80:93:4e:4e:be:93:dd:97:32:ca:98:04:7a:
bb:e8:1c:fa:a6:ba:99:9e:03:99:35:58:18:81:67:
af:c2:12:db:06:81:ae:9d:71:ea:0b:2f:bf:43:8f:
90:64:42:01:93:5e:e9:2f:e4:43:2c:45:bb:5f:82:
f6:93:f0:d8:8a:e0:a2:fb:ab:86:09:03:d5:f8:bc:
d1:9e:38:dc:10:c8:10:53:93:bb:ea:a3:3f:88:0e:
58:7f:67:d1:f6:70:93:1c:9d:65:24:39:74:1a:f6:
e1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:2B:07:F9:3B:26:C1:C6:4B:FC:7F:3F:32:CD:ED:3A:8A:BB:11
X509v3 Authority Key Identifier:
keyid:D7:6B:B4:8E:93:E8:A0:05:8C:5C:72:A8:1A:87:99:45:53:07:EE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12u0jpPooAWMXHKoGoeZRVMH7lY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/DMIrB_k7JsHGS_x_PzLN7TqKuxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/a5bfb6-6a10-4fbc-af48-8bfbdd45cb62/1/12u0jpPooAWMXHKoGoeZRVMH7lY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.106.0/24
Signature Algorithm: sha256WithRSAEncryption
38:cb:a8:af:a1:4a:89:fc:dd:37:6b:e9:47:7f:45:50:55:8f:
20:79:12:07:a9:43:ea:63:14:b7:4d:dd:21:44:ad:56:2b:e9:
2e:0f:d6:0d:67:2c:9f:bb:83:96:64:44:4d:ad:ed:47:a5:76:
7b:c6:2c:4f:09:0e:ca:5e:57:f9:b4:93:50:bd:12:d4:5e:dd:
36:f3:8f:ba:6d:a8:7f:d5:38:46:5b:0d:c9:05:79:f2:15:85:
62:f6:b7:87:1d:4b:00:80:e6:6c:fd:75:25:36:5d:fa:d5:8c:
2c:4c:9b:10:1f:2c:e7:1c:6a:d3:5c:20:bf:40:9f:51:f3:4d:
2b:cd:e1:db:ae:73:03:18:b6:00:f6:85:f4:39:2c:0a:a2:f1:
43:68:86:ad:18:5f:da:2d:af:cd:0d:cf:7e:99:b0:30:69:50:
09:85:12:2f:a5:2a:5f:11:89:2c:72:30:01:1f:0b:d9:da:5f:
f5:94:18:71:a2:ac:e7:c3:b8:86:e5:0f:21:85:d7:a9:41:d9:
da:52:25:29:21:89:e3:6e:92:40:97:a3:cc:1e:2e:b5:4e:ba:
a3:91:99:b5:8a:65:36:c8:95:80:ea:80:11:85:5a:d0:05:c9:
ab:a9:f3:f3:ca:43:6c:bd:3f:37:4e:b6:ad:4b:70:81:17:d6:
98:93:1b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 17:29:22 2025 by rpki-client