Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/O7xkMgYDWmT39_oyZPNETli4dGo.roa
File: O7xkMgYDWmT39_oyZPNETli4dGo.roa (raw, json)
Hash identifier: BJVxC4UljGsK/BbuRqwBk8+Scbbux5UgI7xaPeJbQCA=
Subject key identifier: 3B:BC:64:32:06:03:5A:64:F7:F7:FA:32:64:F3:44:4E:58:B8:74:6A
Certificate issuer: /CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Certificate serial: 0194274875ADEAF2090A67D95DF08011FCE4
Authority key identifier: E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/O7xkMgYDWmT39_oyZPNETli4dGo.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 93.155.104.0/22 maxlen: 24
2a00:1d30::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:75:ad:ea:f2:09:0a:67:d9:5d:f0:80:11:fc:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5fe02f2aa76c402b7d76a114dc7735d5f935b88
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3bbc643206035a64f7f7fa3264f3444e58b8746a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:fc:18:75:5f:22:4a:c5:f0:c9:fe:97:bf:21:
81:08:45:88:23:d8:74:e7:10:ce:3e:12:99:70:c7:
d7:f5:cb:e1:00:72:c3:c3:3d:9b:b0:26:93:3e:18:
80:99:c8:71:05:9e:60:38:50:5c:55:57:b3:ad:8c:
c3:91:2e:8d:e2:a4:19:bb:5f:f1:15:30:38:d8:49:
93:f0:f1:a0:07:59:b8:36:79:5a:41:cc:38:5b:4d:
5c:ed:4a:91:2f:5e:32:e2:e9:47:88:9a:bb:24:e5:
5b:eb:ac:8a:5a:a3:1d:27:74:a9:7e:36:dd:1c:fa:
9f:b1:6b:a1:39:ec:ed:df:c2:c0:f8:ed:7e:30:86:
94:ad:26:31:bf:67:a6:ad:04:54:39:3a:47:67:05:
d1:0f:58:54:b0:8a:74:58:c3:0b:08:6f:e3:98:25:
41:33:46:d4:31:e8:9f:25:52:f3:37:e4:90:39:45:
72:6a:05:38:8e:60:a4:bc:7c:e3:f0:c8:99:a2:01:
ec:ca:28:02:0d:cd:d0:89:2b:f7:a3:d9:cd:72:c3:
8a:80:5d:96:73:2e:41:1f:3e:d6:01:f6:07:f6:bc:
7f:0c:e8:05:e7:9d:4f:2b:f5:ed:42:c4:85:2e:31:
24:78:49:c5:b0:e7:7f:52:98:4c:73:3c:2b:1e:c9:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BC:64:32:06:03:5A:64:F7:F7:FA:32:64:F3:44:4E:58:B8:74:6A
X509v3 Authority Key Identifier:
keyid:E5:FE:02:F2:AA:76:C4:02:B7:D7:6A:11:4D:C7:73:5D:5F:93:5B:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f4C8qp2xAK312oRTcdzXV-TW4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/O7xkMgYDWmT39_oyZPNETli4dGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/31c3bd-e35c-481d-8588-fc60fb125573/1/5f4C8qp2xAK312oRTcdzXV-TW4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.155.104.0/22
IPv6:
2a00:1d30::/29
Signature Algorithm: sha256WithRSAEncryption
6b:d5:37:a8:e5:4c:46:ef:88:c8:67:f1:0c:c7:b2:0c:9c:16:
7a:10:49:58:64:d9:12:d4:49:61:9e:1b:25:06:d8:96:cf:eb:
80:b0:51:e1:8c:d9:d5:e0:63:fe:9b:15:84:e0:00:ef:94:85:
01:fc:16:57:35:73:c0:9b:15:db:f0:01:ab:ef:c9:5a:3b:94:
ce:25:06:3b:01:0a:22:b3:3a:71:8f:b9:d7:93:5a:50:8d:cb:
f6:01:dc:a1:e0:b7:7c:3b:be:95:78:99:9c:b8:15:cc:9f:04:
27:2d:a7:6e:ca:08:fd:45:9d:cc:eb:1a:fa:9e:0d:52:1b:3c:
fe:0e:a0:48:b9:be:ef:fd:30:7d:98:bf:dc:f5:41:ad:eb:21:
91:48:15:d0:a0:29:38:7a:ed:59:21:60:80:2e:d3:7f:d0:20:
c3:a2:0b:46:fe:49:09:ee:3e:e4:a1:18:c0:b9:83:69:1d:21:
db:78:45:6e:74:b3:9a:0a:b4:a6:18:2c:b6:db:bd:74:40:4f:
cb:35:eb:85:ad:35:f4:9b:e8:a3:63:89:e1:74:ae:ac:6c:d1:
49:ca:01:f2:ec:f9:65:90:aa:ca:94:bb:aa:c4:c6:4d:f8:d9:
3e:09:a7:99:46:03:a4:99:6b:d2:38:28:c5:ed:ad:02:f8:e6:
47:b7:4f:d1
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQnSHWt6vIJCmfZXfCAEfzkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZmUwMmYyYWE3NmM0MDJiN2Q3NmExMTRkYzc3MzVkNWY5
MzViODgwHhcNMjUwMTAyMTM1MDQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYmJjNjQzMjA2MDM1YTY0ZjdmN2ZhMzI2NGYzNDQ0ZTU4Yjg3NDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvwYdV8iSsXwyf6XvyGBCEWII9h0
5xDOPhKZcMfX9cvhAHLDwz2bsCaTPhiAmchxBZ5gOFBcVVezrYzDkS6N4qQZu1/x
FTA42EmT8PGgB1m4NnlaQcw4W01c7UqRL14y4ulHiJq7JOVb66yKWqMdJ3Spfjbd
HPqfsWuhOezt38LA+O1+MIaUrSYxv2emrQRUOTpHZwXRD1hUsIp0WMMLCG/jmCVB
M0bUMeifJVLzN+SQOUVyagU4jmCkvHzj8MiZogHsyigCDc3QiSv3o9nNcsOKgF2W
cy5BHz7WAfYH9rx/DOgF551PK/XtQsSFLjEkeEnFsOd/UphMczwrHslFfQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDu8ZDIGA1pk9/f6MmTzRE5YuHRqMB8GA1UdIwQY
MBaAFOX+AvKqdsQCt9dqEU3Hc11fk1uIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgt
ZmM2MGZiMTI1NTczLzEvTzd4a01nWURXbVQzOV9veVpQTkVUbGk0ZEdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My8zMWMzYmQtZTM1Yy00ODFkLTg1ODgtZmM2MGZiMTI1NTcz
LzEvNWY0QzhxcDJ4QUszMTJvUlRjZHpYVi1UVzRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCXZtoMA0E
AgACMAcDBQMqAB0wMA0GCSqGSIb3DQEBCwUAA4IBAQBr1Teo5UxG74jIZ/EMx7IM
nBZ6EElYZNkS1ElhnhslBtiWz+uAsFHhjNnV4GP+mxWE4ADvlIUB/BZXNXPAmxXb
8AGr78laO5TOJQY7AQoiszpxj7nXk1pQjcv2Adyh4Ld8O76VeJmcuBXMnwQnLadu
ygj9RZ3M6xr6ng1SGzz+DqBIub7v/TB9mL/c9UGt6yGRSBXQoCk4eu1ZIWCALtN/
0CDDogtG/kkJ7j7koRjAuYNpHSHbeEVudLOaCrSmGCy22710QE/LNeuFrTX0m+ij
Y4nhdK6sbNFJygHy7PllkKrKlLuqxMZN+Nk+CaeZRgOkmWvSOCjF7a0C+OZHt0/R
-----END CERTIFICATE-----
Generated at Mon Apr 7 07:03:11 2025 by rpki-client