Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DCezNc8qU7oJPyhXIH5aN_Lx9PA.roa
File: DCezNc8qU7oJPyhXIH5aN_Lx9PA.roa (raw, json)
Hash identifier: CT9VGnXsLLRIZ4jcPQg4JuBvZImcu54dk0bZE8SW1O4=
Subject key identifier: 0C:27:B3:35:CF:2A:53:BA:09:3F:28:57:20:7E:5A:37:F2:F1:F4:F0
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F8E90E2461C999B9B98EC593AE262
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DCezNc8qU7oJPyhXIH5aN_Lx9PA.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25015
IP address blocks: 93.170.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8e:90:e2:46:1c:99:9b:9b:98:ec:59:3a:e2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0c27b335cf2a53ba093f2857207e5a37f2f1f4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:06:f9:40:2e:b6:05:bd:ac:18:58:25:2a:e2:
bb:c9:6f:ef:bd:23:f8:e9:fb:7c:65:fe:4b:97:1c:
2b:4b:9d:fb:b8:55:4d:3a:f0:5c:f6:a7:25:8e:03:
4b:66:07:ed:2f:26:8c:63:00:bd:50:9e:49:04:ee:
0a:1a:a0:1f:be:b9:58:c6:03:11:0b:30:11:29:ba:
a0:9e:b9:bd:af:0d:63:c5:b1:3f:e0:a4:d3:f0:39:
1a:95:ee:5b:31:1b:ca:60:79:f0:3b:62:1b:33:e5:
4b:df:b4:2e:86:8e:eb:76:1a:f7:10:ba:74:36:2b:
bd:12:2f:08:f1:d5:7f:fd:9c:c4:50:0d:7b:57:70:
77:7d:e2:62:79:67:32:09:b1:5e:45:54:24:0a:20:
da:26:ee:41:40:f2:95:6d:ff:41:60:2c:f7:e9:9f:
87:65:de:35:2e:62:6f:55:b5:b4:3a:dc:b7:59:4e:
e8:6f:79:71:ad:1d:b0:90:dc:c4:21:a2:4b:75:22:
13:06:36:fe:95:32:6f:e8:33:b4:21:9e:84:e6:2e:
64:ed:fa:00:5d:c3:16:ae:a5:2d:02:6b:c2:df:a9:
63:b9:e3:4f:e0:87:98:1c:95:61:66:3e:b2:c9:82:
f6:e2:c4:b8:77:49:74:65:c8:46:52:2c:94:b7:72:
62:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:27:B3:35:CF:2A:53:BA:09:3F:28:57:20:7E:5A:37:F2:F1:F4:F0
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/DCezNc8qU7oJPyhXIH5aN_Lx9PA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.35.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:89:2b:ad:96:06:f8:e9:f1:5f:83:c6:3c:67:3e:06:1a:7d:
71:06:d3:98:0f:2c:f2:d6:96:7d:fa:54:a3:2f:ae:b7:e9:b0:
72:0b:9a:fc:9d:3f:ac:da:39:58:d0:10:79:87:ba:ef:2e:87:
18:f8:55:c2:3b:8f:e6:88:0c:d7:60:cb:81:38:02:d1:d1:b3:
3e:d0:29:d2:b9:5f:a2:12:61:ee:ca:d5:54:99:80:58:76:88:
23:8e:39:e1:1b:2d:9a:19:72:9a:67:74:8a:1b:b1:12:16:c6:
12:19:04:d3:f8:60:23:75:3f:dc:0c:d3:4c:3e:6b:1c:c6:0e:
90:5a:7d:a4:55:2a:00:b4:c1:29:7a:f4:0c:93:f7:6c:d5:33:
aa:1e:53:3b:6e:4c:bc:a7:f4:05:52:e2:4b:1e:af:d7:1d:9c:
a2:53:d8:f6:47:5e:8e:3f:33:32:f1:ab:93:dd:2a:ff:f1:2c:
90:74:50:0e:8a:fe:65:85:5b:3f:9c:f7:91:3f:11:2f:21:58:
5f:cb:e6:c9:52:18:00:1c:a8:64:a4:d0:0a:c4:c6:10:e2:73:
23:f2:4e:fd:72:8d:52:18:e2:2c:3f:2d:43:b0:c2:f7:a2:26:
11:18:4c:06:55:28:f3:93:0f:8d:a6:bb:4a:b7:d7:37:ff:82:
0f:a0:9e:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj46Q4kYcmZubmOxZOuJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYzI3YjMzNWNmMmE1M2JhMDkzZjI4NTcyMDdlNWEzN2YyZjFmNGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQb5QC62Bb2sGFglKuK7yW/vvSP4
6ft8Zf5LlxwrS537uFVNOvBc9qcljgNLZgftLyaMYwC9UJ5JBO4KGqAfvrlYxgMR
CzARKbqgnrm9rw1jxbE/4KTT8Dkale5bMRvKYHnwO2IbM+VL37Quho7rdhr3ELp0
Niu9Ei8I8dV//ZzEUA17V3B3feJieWcyCbFeRVQkCiDaJu5BQPKVbf9BYCz36Z+H
Zd41LmJvVbW0Oty3WU7ob3lxrR2wkNzEIaJLdSITBjb+lTJv6DO0IZ6E5i5k7foA
XcMWrqUtAmvC36ljueNP4IeYHJVhZj6yyYL24sS4d0l0ZchGUiyUt3JiPwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAwnszXPKlO6CT8oVyB+Wjfy8fTwMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvRENlek5jOHFVN29KUHloWElINWFOX0x4OVBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXaojMA0G
CSqGSIb3DQEBCwUAA4IBAQAMiSutlgb46fFfg8Y8Zz4GGn1xBtOYDyzy1pZ9+lSj
L6636bByC5r8nT+s2jlY0BB5h7rvLocY+FXCO4/miAzXYMuBOALR0bM+0CnSuV+i
EmHuytVUmYBYdogjjjnhGy2aGXKaZ3SKG7ESFsYSGQTT+GAjdT/cDNNMPmscxg6Q
Wn2kVSoAtMEpevQMk/ds1TOqHlM7bky8p/QFUuJLHq/XHZyiU9j2R16OPzMy8auT
3Sr/8SyQdFAOiv5lhVs/nPeRPxEvIVhfy+bJUhgAHKhkpNAKxMYQ4nMj8k79co1S
GOIsPy1DsML3oiYRGEwGVSjzkw+NprtKt9c3/4IPoJ5g
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:44:12 2025 by rpki-client