Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/38SRARiPlqZX0gFjhdztc5C7_lM.roa
File: 38SRARiPlqZX0gFjhdztc5C7_lM.roa (raw, json)
Hash identifier: dkiUuBXjsldgNm4qMr8SQIBsw8iMYziR9AeYndQSEBg=
Subject key identifier: DF:C4:91:01:18:8F:96:A6:57:D2:01:63:85:DC:ED:73:90:BB:FE:53
Certificate issuer: /CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Certificate serial: 019426D9985FC4BD1204D2BEDF8B6BB4C69F
Authority key identifier: 51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/38SRARiPlqZX0gFjhdztc5C7_lM.roa
Signing time: Thu 02 Jan 2025 11:49:42 +0000
ROA not before: Thu 02 Jan 2025 11:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47164
IP address blocks: 93.95.30.0/24 maxlen: 24
185.192.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 20:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:98:5f:c4:bd:12:04:d2:be:df:8b:6b:b4:c6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51a2c2c06ddb84669a89a99fb8756095134c8766
Validity
Not Before: Jan 2 11:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfc49101188f96a657d2016385dced7390bbfe53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:ea:5d:64:bc:9c:33:d9:7b:14:a4:07:cb:
49:1e:7f:90:a6:a2:63:3b:9c:33:b3:f3:5d:57:81:
cd:0b:b2:32:77:69:a4:c7:4a:ce:64:cc:e5:2e:e7:
9d:d4:fa:27:69:1c:ad:ba:a3:ae:53:a1:d0:1f:3e:
ad:40:ad:91:54:62:d4:ae:72:02:22:28:20:ff:a0:
2a:b8:f6:9f:cc:06:5d:10:5a:cf:49:77:8c:16:9b:
52:47:bc:18:91:84:d2:d5:a8:ec:6b:a3:38:56:42:
09:77:b0:5b:8c:ec:fe:f9:f5:36:24:71:8b:26:51:
13:c0:22:35:d7:10:5b:84:d0:3d:0a:12:f5:4e:71:
8e:b1:0e:3b:ba:2a:41:55:da:0e:57:48:0d:60:26:
34:41:ff:57:78:59:28:70:dd:f9:f0:c0:d2:5e:cb:
20:5a:40:4d:14:4b:64:a8:ac:4d:43:88:92:ce:56:
31:c3:10:ce:c7:bc:44:e0:e3:c5:e2:6b:a4:04:fc:
94:a8:f3:15:5b:75:90:e4:43:17:83:9b:52:0a:e6:
0e:c5:d0:70:ee:5f:07:d1:ce:17:05:e5:54:77:ae:
65:4d:df:b1:7c:b6:d7:47:8e:0b:97:b2:71:7d:05:
b8:58:5e:d2:59:24:4e:cb:cb:84:94:bb:29:a1:35:
77:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C4:91:01:18:8F:96:A6:57:D2:01:63:85:DC:ED:73:90:BB:FE:53
X509v3 Authority Key Identifier:
keyid:51:A2:C2:C0:6D:DB:84:66:9A:89:A9:9F:B8:75:60:95:13:4C:87:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UaLCwG3bhGaaiamfuHVglRNMh2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/38SRARiPlqZX0gFjhdztc5C7_lM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6af319-5f93-43db-8b27-7054ea6a60d6/1/UaLCwG3bhGaaiamfuHVglRNMh2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.30.0/24
185.192.181.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:ec:7f:1b:b6:0a:58:22:94:28:60:83:ce:0e:87:18:d4:c0:
6d:9a:8e:68:ec:aa:5e:50:93:78:f6:0f:f8:5c:a0:e8:95:4e:
12:64:8d:46:e6:04:e1:82:6b:54:1c:e9:97:38:39:51:09:fe:
7d:21:dd:1c:44:f6:58:50:b6:93:f1:05:a1:a9:b0:c1:33:94:
f5:7f:50:49:fd:49:75:97:98:23:85:28:dc:85:e6:90:2e:bd:
57:e5:d6:37:5a:d1:fc:5e:7d:ab:bb:10:fd:d2:d4:b4:87:c9:
be:9b:b0:b6:2e:59:35:eb:02:14:a8:46:5c:87:49:62:88:c1:
45:4f:67:8d:b8:c4:40:0b:34:cb:25:60:a8:c3:ba:79:c2:de:
e0:ed:52:19:a5:33:9c:3d:bb:8c:c4:a2:2a:03:94:0b:a7:c8:
b6:d2:4b:c5:3d:b5:1c:2f:7b:01:e2:a5:d1:b7:43:6b:3a:1b:
72:ac:e7:b7:59:bb:68:88:6b:d4:90:fe:14:88:98:63:63:56:
e4:32:83:15:dc:51:dc:9d:ff:41:e0:3a:44:2a:98:ff:65:a1:
df:6d:5b:c1:03:d0:75:b3:df:0c:62:66:aa:cf:78:82:92:55:
72:00:6c:f2:e8:2e:aa:e5:56:50:ca:00:53:d6:86:08:2e:46:
0f:ab:84:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 06:39:39 2025 by rpki-client