Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/8XFeAW4Hh2hiz0E_ab2pPciaX2E.roa
File: 8XFeAW4Hh2hiz0E_ab2pPciaX2E.roa (raw, json)
Hash identifier: BSu5h2EM4QjO3Lopd7DgZosh9ln/mIeDCpEg8qWTiLw=
Subject key identifier: F1:71:5E:01:6E:07:87:68:62:CF:41:3F:69:BD:A9:3D:C8:9A:5F:61
Certificate issuer: /CN=f4e1805f847e00afd63179e4c252a367e945b26a
Certificate serial: 019420683B519CD1F07C99D5592545B0A48E
Authority key identifier: F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/8XFeAW4Hh2hiz0E_ab2pPciaX2E.roa
Signing time: Wed 01 Jan 2025 05:48:09 +0000
ROA not before: Wed 01 Jan 2025 05:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200700
IP address blocks: 185.93.28.0/22 maxlen: 24
185.93.28.0/23 maxlen: 24
185.93.28.0/24 maxlen: 24
185.93.29.0/24 maxlen: 24
185.93.30.0/23 maxlen: 24
185.93.30.0/24 maxlen: 24
185.93.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:3b:51:9c:d1:f0:7c:99:d5:59:25:45:b0:a4:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e1805f847e00afd63179e4c252a367e945b26a
Validity
Not Before: Jan 1 05:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f1715e016e07876862cf413f69bda93dc89a5f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8b:02:6b:dc:0b:78:d7:6b:87:31:b7:8e:a8:
f7:38:d6:04:15:e6:55:3c:86:a7:7b:d4:fc:9e:19:
07:3b:2b:e0:9a:b4:8b:6f:25:ce:51:13:34:87:62:
d1:96:32:a0:b6:df:72:35:be:49:64:5f:9b:46:23:
eb:92:73:e6:01:9e:3a:ec:0a:bc:e8:6c:4a:de:69:
6e:32:16:82:c8:d6:18:f4:16:35:8f:5e:46:cb:95:
84:a1:54:0a:bb:32:42:08:b7:19:91:e5:7a:26:77:
0a:79:cb:f0:a2:54:42:3c:aa:7b:d0:aa:f7:dc:7a:
ef:23:9e:f0:8e:e3:3f:c1:ee:3c:94:c9:6b:03:6c:
67:69:01:37:5f:a7:04:60:ed:32:1c:6a:e5:0e:ec:
4a:54:f4:7d:3e:e1:ec:87:d6:1a:16:26:a7:c0:0d:
fa:9f:1c:a3:bd:33:fa:9d:4c:16:fd:30:d2:58:d3:
22:de:77:1f:1d:1b:91:ad:64:8b:52:9a:51:c4:cb:
67:b8:11:9c:56:6a:40:96:1e:79:da:d9:b2:58:48:
60:1a:b6:b2:aa:bd:95:1c:f6:0c:70:9a:a4:20:51:
be:27:6e:e0:15:4c:92:99:30:4e:47:70:e7:c5:20:
64:02:ce:a8:7e:b0:2c:47:d2:21:aa:b7:53:20:99:
d5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:71:5E:01:6E:07:87:68:62:CF:41:3F:69:BD:A9:3D:C8:9A:5F:61
X509v3 Authority Key Identifier:
keyid:F4:E1:80:5F:84:7E:00:AF:D6:31:79:E4:C2:52:A3:67:E9:45:B2:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/8XFeAW4Hh2hiz0E_ab2pPciaX2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/a3b560-b9b5-4052-a862-940c8a0fc770/1/9OGAX4R-AK_WMXnkwlKjZ-lFsmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.28.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:7c:9e:79:4b:7d:05:27:20:d2:eb:f3:7f:99:2f:14:cb:36:
8d:a2:b4:17:3b:27:20:53:d5:cd:d4:e6:76:96:2c:03:c3:18:
a9:5b:51:bc:10:1e:68:91:c8:77:53:de:0a:40:71:03:c0:57:
ea:69:ba:d5:6f:4e:6f:53:68:70:51:1d:df:21:58:bc:36:d8:
e8:36:f2:87:b0:8e:3e:f6:76:f3:3a:d1:37:ec:10:54:dc:0b:
5d:51:73:5f:26:26:8c:c6:bd:df:d5:de:73:2b:69:55:d3:43:
c8:95:0c:d9:d3:d0:72:f3:d9:9e:bb:93:85:c4:93:18:ba:36:
38:9c:f8:0c:63:96:f5:cf:95:a5:79:e4:b2:4f:5f:69:f3:3b:
b1:fe:4c:0c:ef:a7:4c:70:5e:88:ad:9e:5e:a1:e2:ab:34:79:
44:60:66:16:23:98:53:99:8b:a2:86:03:78:50:76:75:f0:e1:
7c:e6:9a:b8:a1:70:ef:50:73:0e:08:68:06:b6:5b:3d:da:6e:
78:84:a8:55:a9:49:7d:2b:a4:aa:c0:12:fc:50:bd:7a:fb:8f:
ec:26:b3:be:90:1e:03:25:c6:da:7a:44:d8:5e:55:8f:df:90:
2a:48:99:58:44:c6:85:ec:d5:d2:1d:15:13:26:63:b5:35:f7:
69:a3:57:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:58:43 2025 by rpki-client