Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/X6gmX-cT88IKkpg5MbkaVMHMaQo.roa
File: X6gmX-cT88IKkpg5MbkaVMHMaQo.roa (raw, json)
Hash identifier: 5LNkaEXR3rWzXhKm/36GJXIu2jzoZBr59cd6UPrnkSs=
Subject key identifier: 5F:A8:26:5F:E7:13:F3:C2:0A:92:98:39:31:B9:1A:54:C1:CC:69:0A
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FB5531DC0EDCE928493C34213F9DB
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/X6gmX-cT88IKkpg5MbkaVMHMaQo.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49682
IP address blocks: 93.170.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b5:53:1d:c0:ed:ce:92:84:93:c3:42:13:f9:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5fa8265fe713f3c20a92983931b91a54c1cc690a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f2:cd:4c:17:28:4e:f0:70:53:ce:66:99:7a:
c8:d0:b5:06:ee:96:1a:d0:e2:2d:f2:bf:a9:db:d5:
3b:6d:f2:c0:bf:97:26:4c:95:65:10:11:e0:53:38:
58:13:19:00:77:f0:36:d3:7c:23:d1:5f:43:e9:2f:
6f:77:94:ce:ce:4d:d1:40:9b:23:e1:98:2b:8f:3f:
df:dd:71:59:38:08:67:86:0a:5d:ee:14:93:cd:77:
1e:3c:2e:35:17:3f:1e:05:a1:7f:b7:33:48:89:11:
89:6c:ee:32:7f:c4:8a:16:e7:a3:8d:9f:fc:bd:c2:
b0:59:4b:7a:97:77:88:a4:85:68:7f:4a:af:43:11:
ae:59:de:46:31:ec:92:cd:72:04:73:cd:d0:90:8c:
ec:95:66:06:4c:25:24:42:18:c8:dc:c0:4c:ed:21:
4c:71:cb:59:db:6e:e9:4d:e8:fb:8e:40:b9:61:0c:
b3:35:8b:3c:be:4e:ed:de:d4:71:93:96:e4:de:8e:
a0:b1:c0:54:aa:7d:2a:a4:f3:77:d5:96:45:7d:52:
d2:f3:8c:59:8a:6f:55:99:16:40:82:cf:b8:70:d0:
e9:65:f0:e5:bc:df:14:ef:a9:ce:50:aa:22:42:a1:
80:bb:a3:84:df:5e:49:c1:26:90:2f:49:e4:ae:a0:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A8:26:5F:E7:13:F3:C2:0A:92:98:39:31:B9:1A:54:C1:CC:69:0A
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/X6gmX-cT88IKkpg5MbkaVMHMaQo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.34.0/24
Signature Algorithm: sha256WithRSAEncryption
99:3d:20:41:07:7e:80:85:89:18:44:ae:a8:78:71:4d:36:20:
8f:b0:0c:ca:fc:fd:2b:8f:b0:da:ec:52:1f:8f:6a:bb:61:95:
67:ba:da:be:86:cb:68:04:4b:32:84:8b:30:fe:91:94:41:c1:
c3:fb:38:8c:74:f4:1c:eb:b4:7d:ba:3b:b0:45:ce:05:9a:83:
55:ad:26:be:ea:c0:18:bc:98:ab:39:df:b6:4c:26:6c:f7:2e:
f6:37:ab:2d:09:37:b3:ef:c2:1d:99:a9:34:e8:cf:85:bb:18:
84:4f:4e:58:e0:1e:c8:4d:06:5f:6c:89:ec:ef:08:39:17:55:
4f:a5:d0:4f:d2:94:34:04:29:59:4c:80:1d:a1:62:20:e2:df:
e0:5f:d6:6c:ae:06:e9:3a:2f:f2:57:87:d6:f3:af:a0:69:f0:
1a:fe:78:bd:1b:c1:3a:a1:82:62:10:32:81:1d:1e:47:4d:20:
e5:bc:95:22:bd:65:a8:f6:f6:2d:44:2e:b2:4c:f6:19:d4:f8:
fb:15:10:4c:86:f6:5d:98:2c:3c:bf:78:ed:d1:0a:84:ab:ac:
cc:6a:7c:1f:e6:57:8a:4f:18:6d:26:15:31:1e:94:de:4a:a7:
88:48:27:9f:82:b3:e1:a5:4c:ca:13:dc:75:4a:23:00:63:f4:
d6:00:37:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:33 2025 by rpki-client