Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O5yHbg63LTHAhkFgZk-_sid47xg.roa
File: O5yHbg63LTHAhkFgZk-_sid47xg.roa (raw, json)
Hash identifier: 3EVa3bPNGT5Evw3Tr9E9EJlraYJiJJeo42x2n8Fwbfc=
Subject key identifier: 3B:9C:87:6E:0E:B7:2D:31:C0:86:41:60:66:4F:BF:B2:27:78:EF:18
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01942590112B7D01E049F7EF14339958B0AD
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O5yHbg63LTHAhkFgZk-_sid47xg.roa
Signing time: Thu 02 Jan 2025 05:49:45 +0000
ROA not before: Thu 02 Jan 2025 05:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213182
IP address blocks: 93.170.12.0/24 maxlen: 24
93.170.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:90:11:2b:7d:01:e0:49:f7:ef:14:33:99:58:b0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b9c876e0eb72d31c0864160664fbfb22778ef18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:78:ce:6f:35:1c:63:3d:0f:a3:56:12:69:
14:0c:af:64:a2:02:a0:ad:ec:64:1e:8f:2c:1a:21:
fe:a7:c5:d8:3b:b1:5e:f6:0e:b0:a3:69:ed:4b:f3:
5c:d8:46:d4:94:e3:be:37:82:b3:8e:e9:8c:47:3f:
e1:49:8b:95:73:bd:1b:22:d6:ec:ff:56:78:70:0b:
b7:d3:ff:99:31:94:4a:69:71:64:d1:9b:49:1b:21:
74:46:0c:f6:6d:b1:6a:37:c3:04:d0:32:22:05:86:
98:44:7f:63:ca:74:5e:f7:e7:17:86:63:06:dd:17:
4d:6d:b1:ab:12:8e:ac:a0:fc:2f:c0:af:4e:28:27:
80:a2:d1:6a:0d:81:d9:57:e8:4a:40:5f:81:b4:6c:
ce:f4:81:07:18:f0:bb:11:b8:e5:b6:d2:95:0b:65:
35:42:e5:68:2e:aa:4b:b0:aa:50:42:04:bd:01:f9:
b9:32:5b:09:81:1d:70:be:f1:32:a2:6c:39:d8:1d:
ad:39:53:c2:78:70:61:ed:d5:d3:5f:e6:43:66:3b:
f2:02:f1:8c:84:4f:49:22:1d:80:9a:b5:78:00:10:
cb:9b:7e:50:e7:61:e5:64:ee:db:36:4b:8a:ca:3c:
b7:fc:7f:ff:67:b0:3e:ba:3c:2d:42:7f:fd:da:f2:
92:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9C:87:6E:0E:B7:2D:31:C0:86:41:60:66:4F:BF:B2:27:78:EF:18
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/O5yHbg63LTHAhkFgZk-_sid47xg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.12.0/24
93.170.24.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:e1:5c:58:62:ba:ee:5a:d8:1d:41:cc:e6:54:a5:d5:dd:d9:
1d:37:9f:67:09:90:4c:9f:ad:6d:b4:96:5d:ec:55:d5:dd:70:
43:77:07:ef:38:19:06:ac:70:c7:31:82:46:db:55:53:d9:63:
06:4b:b1:89:89:e1:b2:d4:8f:b6:96:5e:11:d5:79:3f:e4:6d:
7c:6f:c8:5f:5b:21:55:9b:01:e1:43:5a:a8:b1:ae:1e:0b:e4:
14:24:74:7a:7b:88:d1:4d:52:23:b9:a9:02:a0:74:a5:24:4c:
ef:07:72:3e:1f:9a:4c:16:94:38:e4:ca:42:9a:15:dd:40:18:
ca:7e:85:5a:16:92:65:99:1c:39:8e:c2:8b:9b:96:bb:f6:c4:
b1:0e:ba:f2:83:86:4a:58:4a:67:af:dc:a1:e2:81:69:38:4b:
bb:e9:7a:23:2a:d5:77:f1:39:ce:36:cd:a3:4a:2f:9d:99:05:
20:6b:b3:8d:f8:f5:b3:ac:7a:e0:78:7e:d8:62:ab:11:ef:99:
65:93:4a:f4:2f:12:3e:3c:db:f7:9e:99:ae:02:39:60:52:de:
8e:82:9b:36:63:96:79:a6:1c:41:10:67:ab:88:8c:e6:f4:58:
76:d3:ac:3b:44:15:76:e3:8d:7f:65:e9:9f:13:7a:70:52:03:
58:70:e8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:56:13 2025 by rpki-client