Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FvSvkLcueWpeZ_QBAd3tUcqXx6I.roa
File: FvSvkLcueWpeZ_QBAd3tUcqXx6I.roa (raw, json)
Hash identifier: IVZ0cyRO2VC1AVGubPY3Wb8nC5WcQi2kNfcZp3Gno3A=
Subject key identifier: 16:F4:AF:90:B7:2E:79:6A:5E:67:F4:01:01:DD:ED:51:CA:97:C7:A2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019425901523F818DD6FD16B8309C6A20A4F
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FvSvkLcueWpeZ_QBAd3tUcqXx6I.roa
Signing time: Thu 02 Jan 2025 05:49:47 +0000
ROA not before: Thu 02 Jan 2025 05:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215001
IP address blocks: 93.171.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:15:23:f8:18:dd:6f:d1:6b:83:09:c6:a2:0a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16f4af90b72e796a5e67f40101dded51ca97c7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:1c:30:0d:c1:39:32:0d:4b:04:1e:b0:39:
15:5e:a3:3a:7e:70:bc:34:f1:12:81:e1:6a:5d:d6:
29:7d:59:cc:95:46:02:f2:3e:0d:83:cc:cc:fa:8b:
2c:cd:c5:49:75:e1:41:ea:1b:93:f5:8b:d0:c6:8f:
0c:ed:41:07:86:2b:ac:3d:51:db:15:31:bc:bd:fc:
ff:a4:86:80:eb:f8:a6:25:e6:cd:ae:5b:8f:f3:36:
90:e3:af:69:b5:11:83:ba:f2:b9:89:34:a2:76:07:
bf:05:c2:f6:c2:99:1d:58:8c:97:e6:3d:6b:d6:af:
02:11:0d:94:c2:5c:c6:55:f1:24:4e:5b:ac:57:28:
73:2f:8d:e2:18:76:5a:85:06:51:fe:2b:61:dd:22:
a0:b9:aa:61:0d:91:b4:d3:f6:b6:65:75:81:32:bb:
16:dc:4d:2a:ff:c0:64:d4:4d:14:33:9d:ad:e8:37:
78:dc:cf:50:4a:b2:e8:91:80:ad:3e:54:83:5c:fe:
ae:db:dd:fc:de:03:6f:c9:62:ad:6e:21:4a:81:c4:
58:ef:01:77:d7:c4:90:1c:df:a8:37:b6:87:ef:24:
f7:b1:3c:dc:32:81:2f:08:7a:8d:ef:e8:61:f3:03:
d4:c6:7a:18:b6:e1:e1:c1:8c:ce:ae:c1:18:b4:71:
c8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:AF:90:B7:2E:79:6A:5E:67:F4:01:01:DD:ED:51:CA:97:C7:A2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/FvSvkLcueWpeZ_QBAd3tUcqXx6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.171.138.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d4:b5:ee:54:10:44:86:de:65:2f:ab:34:05:14:2f:05:bb:
aa:7a:d5:27:0e:c6:bd:e3:b3:46:fd:47:90:b7:25:75:02:30:
d3:79:7d:3c:f2:ab:2c:57:de:1a:78:94:22:f5:ef:24:2d:59:
9d:3d:fd:4a:e1:25:28:71:29:fa:42:03:72:af:cd:c0:f8:e6:
a8:69:a5:a7:28:6f:b3:df:50:cb:6d:60:fb:93:8c:f2:b8:b3:
89:74:02:fa:e4:da:1f:1c:60:eb:15:f0:dc:f5:be:1f:41:23:
b9:47:6c:bf:88:ad:60:9d:99:a9:02:20:f1:84:a9:a2:5b:65:
61:46:f4:9b:82:64:d0:10:30:76:41:74:ea:ce:84:90:8e:08:
d1:b3:34:c1:e3:02:1b:3a:7e:6d:fa:81:ea:ee:d4:11:91:aa:
79:19:75:cb:6c:be:fd:1a:12:4e:67:2a:47:36:44:0e:24:8f:
7b:f6:c3:df:3f:33:8f:06:14:d1:ed:2e:3e:93:ec:5d:cc:d2:
aa:c4:b3:e3:c4:28:71:d3:1e:e9:f1:5f:0e:72:e7:ab:9c:5c:
09:96:49:23:c8:dd:a9:f4:99:57:9b:1a:68:0b:ad:16:1d:6f:
d2:eb:76:dd:1a:59:01:8a:6c:27:58:7e:08:2f:5e:ab:ff:c2:
6e:8c:38:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:59 2025 by rpki-client