Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/XWiker2v7GIlhkuZZtR48lVm108.roa
File: XWiker2v7GIlhkuZZtR48lVm108.roa (raw, json)
Hash identifier: NhUbFkPuOTxAHiVlHIvGiCnLEnSRvJwEzL+UojBb8qg=
Subject key identifier: 5D:68:A4:7A:BD:AF:EC:62:25:86:4B:99:66:D4:78:F2:55:66:D7:4F
Certificate issuer: /CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Certificate serial: 01942824087EC72AF9C85128F8717B78BB60
Authority key identifier: 16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/XWiker2v7GIlhkuZZtR48lVm108.roa
Signing time: Thu 02 Jan 2025 17:50:37 +0000
ROA not before: Thu 02 Jan 2025 17:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201749
IP address blocks: 93.191.112.0/24 maxlen: 24
93.191.115.0/24 maxlen: 24
2a06:a540::/31 maxlen: 31
2a06:a542::/31 maxlen: 31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 02:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:08:7e:c7:2a:f9:c8:51:28:f8:71:7b:78:bb:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1697c46eafa10ec5d907bb05e37123b692ab494c
Validity
Not Before: Jan 2 17:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5d68a47abdafec6225864b9966d478f25566d74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:64:a9:bc:42:45:b0:a7:4a:38:0c:df:43:43:
f9:63:5b:b3:42:3c:cc:6e:a1:5e:f7:33:de:0d:9c:
f4:b2:8b:c6:ed:b6:5d:e9:0c:f0:75:3f:a3:7b:84:
39:40:ff:7f:57:6e:66:27:d3:c0:50:fd:11:5f:57:
b9:43:ed:30:da:2f:6e:8c:75:59:ec:54:f5:f3:01:
c5:14:8f:0c:da:f4:1a:7d:f4:95:7d:09:cb:d7:25:
7f:d1:7d:ab:b5:3c:79:af:7a:e9:47:ef:76:94:26:
96:9b:c3:51:b9:12:dd:a8:9a:96:68:17:e0:52:19:
3f:6d:76:d4:2f:79:ba:cd:68:d0:79:08:cf:12:9c:
72:72:98:01:8a:61:6f:bb:b1:cb:0a:cf:b3:6e:d2:
be:68:4a:fc:50:c8:d7:d3:f7:fc:9d:14:f7:8d:ed:
d6:2a:9c:72:dc:36:91:53:03:fb:5b:48:fb:9b:b1:
09:fe:c8:01:bb:e2:cf:bc:3f:b0:ad:a2:da:ac:e3:
11:e0:da:94:ad:c9:e4:2e:09:f0:ca:fc:bb:90:b9:
04:36:c3:52:9e:dc:58:ad:84:77:9f:c2:87:f1:36:
37:d0:92:91:aa:0f:26:44:c1:0d:0b:a7:4f:1a:8f:
c7:dd:00:02:1d:74:a6:3f:67:61:11:13:ea:7f:2f:
54:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:68:A4:7A:BD:AF:EC:62:25:86:4B:99:66:D4:78:F2:55:66:D7:4F
X509v3 Authority Key Identifier:
keyid:16:97:C4:6E:AF:A1:0E:C5:D9:07:BB:05:E3:71:23:B6:92:AB:49:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpfEbq-hDsXZB7sF43EjtpKrSUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/XWiker2v7GIlhkuZZtR48lVm108.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/d0992d-93fa-4846-a495-76522c207c55/1/FpfEbq-hDsXZB7sF43EjtpKrSUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.112.0/24
93.191.115.0/24
IPv6:
2a06:a540::/30
Signature Algorithm: sha256WithRSAEncryption
22:d7:ee:37:2b:2b:fd:aa:58:3e:74:ef:aa:86:79:cd:fb:f5:
05:b6:f2:b9:72:87:ca:5d:17:06:cd:6f:8f:bd:4a:9d:68:e8:
b3:44:51:0c:3b:f7:d9:64:0c:cf:e8:be:e1:e5:03:b3:18:55:
be:eb:1b:47:51:9d:69:43:84:61:86:0b:8d:46:15:fd:3e:9a:
ed:22:6e:d7:f2:6e:6a:56:1d:d7:c2:1b:51:85:4f:c0:c5:6f:
7e:3e:9a:a1:45:a1:be:c7:cc:af:30:95:c7:29:f9:0d:4b:91:
f2:6b:30:db:cc:5e:20:b2:e9:5e:8b:b7:19:80:26:50:99:88:
be:69:d6:12:9f:57:74:75:d8:bb:01:99:77:0a:0b:72:8a:9d:
1f:bf:d5:6f:ba:d8:56:1d:3b:62:df:68:33:74:7a:07:23:29:
39:65:d4:b7:be:b0:73:8b:ad:58:29:cf:6a:c3:e2:e0:58:a9:
f0:c7:9f:2f:d7:6e:e6:fe:c4:6c:fe:cd:d6:a5:f9:44:61:23:
d0:17:59:1b:b7:c3:70:3f:2d:50:d3:a0:68:59:1c:3d:6b:b6:
50:19:28:25:50:7e:da:b1:cd:40:1c:47:76:67:f5:23:02:89:
ec:47:87:82:7a:cc:81:75:1e:85:ee:58:a2:b7:76:31:40:1a:
45:a2:03:fd
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQoJAh+xyr5yFEo+HF7eLtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2OTdjNDZlYWZhMTBlYzVkOTA3YmIwNWUzNzEyM2I2OTJh
YjQ5NGMwHhcNMjUwMTAyMTc1MDM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZDY4YTQ3YWJkYWZlYzYyMjU4NjRiOTk2NmQ0NzhmMjU1NjZkNzRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWSpvEJFsKdKOAzfQ0P5Y1uzQjzM
bqFe9zPeDZz0sovG7bZd6QzwdT+je4Q5QP9/V25mJ9PAUP0RX1e5Q+0w2i9ujHVZ
7FT18wHFFI8M2vQaffSVfQnL1yV/0X2rtTx5r3rpR+92lCaWm8NRuRLdqJqWaBfg
Uhk/bXbUL3m6zWjQeQjPEpxycpgBimFvu7HLCs+zbtK+aEr8UMjX0/f8nRT3je3W
Kpxy3DaRUwP7W0j7m7EJ/sgBu+LPvD+wraLarOMR4NqUrcnkLgnwyvy7kLkENsNS
ntxYrYR3n8KH8TY30JKRqg8mRMENC6dPGo/H3QACHXSmP2dhERPqfy9UiwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFF1opHq9r+xiJYZLmWbUePJVZtdPMB8GA1UdIwQY
MBaAFBaXxG6voQ7F2Qe7BeNxI7aSq0lMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUt
NzY1MjJjMjA3YzU1LzEvWFdpa2VyMnY3R0lsaGt1Wlp0UjQ4bFZtMTA4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9kMDk5MmQtOTNmYS00ODQ2LWE0OTUtNzY1MjJjMjA3YzU1
LzEvRnBmRWJxLWhEc1haQjdzRjQzRWp0cEtyU1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAXb9wAwQA
Xb9zMA0EAgACMAcDBQIqBqVAMA0GCSqGSIb3DQEBCwUAA4IBAQAi1+43Kyv9qlg+
dO+qhnnN+/UFtvK5cofKXRcGzW+PvUqdaOizRFEMO/fZZAzP6L7h5QOzGFW+6xtH
UZ1pQ4RhhguNRhX9PprtIm7X8m5qVh3XwhtRhU/AxW9+PpqhRaG+x8yvMJXHKfkN
S5HyazDbzF4gsulei7cZgCZQmYi+adYSn1d0ddi7AZl3Cgtyip0fv9VvuthWHTti
32gzdHoHIyk5ZdS3vrBzi61YKc9qw+LgWKnwx58v127m/sRs/s3WpflEYSPQF1kb
t8NwPy1Q06BoWRw9a7ZQGSglUH7asc1AHEd2Z/UjAonsR4eCesyBdR6F7liit3Yx
QBpFogP9
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:25:43 2025 by rpki-client