Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9fsP7wKmR2UT40qfwsXiNir9O8A.roa
File: 9fsP7wKmR2UT40qfwsXiNir9O8A.roa (raw, json)
Hash identifier: Hui0KT36GrpNGkbRUX7HUM45VZZwh7aWX5k0HyxJrlo=
Subject key identifier: F5:FB:0F:EF:02:A6:47:65:13:E3:4A:9F:C2:C5:E2:36:2A:FD:3B:C0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FB84091100CA61FAF6D715AFBCDFB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9fsP7wKmR2UT40qfwsXiNir9O8A.roa
Signing time: Thu 02 Jan 2025 05:49:23 +0000
ROA not before: Thu 02 Jan 2025 05:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50438
IP address blocks: 93.170.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b8:40:91:10:0c:a6:1f:af:6d:71:5a:fb:cd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5fb0fef02a6476513e34a9fc2c5e2362afd3bc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3f:a0:3c:a0:71:a7:0c:05:72:74:8e:f8:88:
44:f1:41:f4:f4:ef:35:54:e3:5d:10:8a:9a:ed:3f:
05:39:88:73:5b:c7:dc:0b:15:5e:42:67:b1:a5:0b:
fb:d0:5b:f3:0e:ac:e9:3c:5c:03:a6:ad:90:cd:17:
1b:53:84:b2:35:54:f6:bb:9b:0d:a7:cc:2d:4b:91:
e8:44:23:1f:42:85:a2:13:40:09:b7:c9:ac:64:6c:
8c:25:0f:cd:02:42:35:fb:84:ff:ad:1e:03:35:9b:
77:61:ed:d3:be:d2:84:00:aa:08:12:e0:a4:6c:ca:
74:ef:00:0f:4a:15:19:e7:01:a3:9e:9e:d9:d0:78:
77:ee:11:f2:d0:f3:d5:10:79:bf:b3:77:21:83:a2:
a7:87:f9:c8:55:d8:a5:2d:32:17:71:d2:9b:43:18:
e3:27:1b:b6:aa:bb:27:7c:d7:21:23:98:8d:14:d1:
4d:d9:84:cc:35:6a:6f:07:38:b7:cb:f6:d5:d1:7d:
fe:bc:e7:64:0e:dc:ac:a4:20:22:cf:83:26:67:43:
d5:ad:f6:80:c0:d3:06:09:3a:85:d7:d9:86:dd:57:
36:63:fe:25:4b:ed:32:0b:5a:23:14:56:12:19:27:
6e:6d:15:80:84:b3:67:72:a6:b1:e4:11:cf:55:73:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:FB:0F:EF:02:A6:47:65:13:E3:4A:9F:C2:C5:E2:36:2A:FD:3B:C0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/9fsP7wKmR2UT40qfwsXiNir9O8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.28.0/22
Signature Algorithm: sha256WithRSAEncryption
a0:6f:cf:25:22:51:61:54:dd:37:9e:72:41:9c:17:ad:58:a4:
78:a3:3a:7f:75:0b:81:1c:c5:b7:94:39:70:7c:9a:31:57:95:
c5:f6:78:49:70:64:2f:16:c0:aa:05:45:7d:ca:7e:7f:86:19:
b5:cb:cd:00:32:19:68:2e:ca:45:90:48:b2:d1:17:0a:89:91:
c1:1e:6d:2f:97:02:08:f5:53:42:f1:75:83:1d:26:aa:2a:3b:
55:ec:e7:5a:61:d4:ba:19:90:94:63:94:d4:df:80:0a:8a:29:
94:d2:fb:0f:0a:5a:8c:c0:f8:83:88:87:2c:8d:e9:f3:42:16:
6e:8e:4f:b5:7d:8f:41:30:19:61:e6:cb:eb:96:d1:ca:d0:c0:
a5:06:9c:25:5e:0d:3e:3c:4e:94:e7:72:01:d7:98:5d:67:96:
95:b7:85:ff:b0:16:d5:23:12:30:21:13:d3:3b:17:9e:5a:10:
cc:03:56:ca:c4:d6:63:72:f8:b4:21:e3:59:aa:43:f3:e9:85:
c4:2c:73:a2:73:98:fd:52:cd:0f:b4:c1:45:56:5b:c0:ca:5c:
4a:20:8a:0d:16:ca:b4:60:ef:f5:0f:37:fa:b3:22:b9:12:38:
0c:c9:e1:54:7b:c1:f6:db:8c:06:0c:ae:06:d7:44:2d:bd:78:
ea:0d:ab:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:41 2025 by rpki-client