Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aJ5VfOMvrtZ3Mc1SyOwumYtzUkU.roa
File: aJ5VfOMvrtZ3Mc1SyOwumYtzUkU.roa (raw, json)
Hash identifier: GrDeJBn1yAfTJP6aX8LEB/haLqCFHiQtZk9PyWxP4vc=
Subject key identifier: 68:9E:55:7C:E3:2F:AE:D6:77:31:CD:52:C8:EC:2E:99:8B:73:52:45
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F8F908001CF5DAF8F36BC56FC58E1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aJ5VfOMvrtZ3Mc1SyOwumYtzUkU.roa
Signing time: Thu 02 Jan 2025 05:49:12 +0000
ROA not before: Thu 02 Jan 2025 05:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29035
IP address blocks: 93.170.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:8f:90:80:01:cf:5d:af:8f:36:bc:56:fc:58:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=689e557ce32faed67731cd52c8ec2e998b735245
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:62:95:ff:09:e9:e5:e9:dc:24:99:12:b9:73:
ae:bb:17:c7:f6:70:a5:04:b5:fb:03:4d:16:4a:f3:
ec:80:1e:a9:bb:ba:d1:1a:f3:f3:e9:68:28:b9:10:
41:db:23:2b:45:fa:a2:c3:06:08:be:e6:6b:ab:51:
c9:24:29:f5:43:03:f1:09:7b:94:7c:2b:c5:a4:43:
a8:38:9d:4e:fc:c8:40:e9:95:4a:1d:a6:71:51:77:
db:b2:16:4f:8c:04:09:3e:62:88:3a:5a:15:70:08:
e4:56:d5:ff:53:95:b9:4a:fd:7d:0a:00:58:91:45:
72:8e:92:16:0a:1a:a0:8f:1c:08:3e:8f:58:19:0c:
26:c1:ed:2e:5b:52:26:ee:ab:0a:0a:cd:72:72:8a:
10:c2:bc:85:48:9d:d2:c4:47:89:ce:c8:98:9e:14:
2f:75:0c:95:d1:c2:92:2e:d8:86:7c:a5:73:ae:d9:
81:2e:c9:b7:ae:78:a6:56:9d:10:17:86:f2:5b:97:
c6:1c:e8:e3:36:36:f8:cc:97:25:29:e0:2b:81:b3:
ad:9f:55:e2:43:f0:46:1b:ed:7e:d9:c2:f2:64:06:
f7:ea:03:6b:02:94:b9:4b:bf:57:ec:eb:10:50:31:
7d:7f:02:4d:57:4b:ba:36:bb:7e:16:a7:0c:2d:8b:
62:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:9E:55:7C:E3:2F:AE:D6:77:31:CD:52:C8:EC:2E:99:8B:73:52:45
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/aJ5VfOMvrtZ3Mc1SyOwumYtzUkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.4.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:c4:8f:3e:b4:38:a7:09:70:e7:81:4c:3a:27:01:7e:58:e4:
e9:e6:a8:c7:7a:73:07:9c:e8:8c:a7:b4:a7:34:53:ee:28:13:
d6:37:12:dd:5b:d3:33:f1:b6:b3:ca:63:2e:be:02:77:06:5c:
b9:fb:dc:31:ab:77:f9:85:14:1a:b7:3a:13:b9:b6:69:f2:7f:
06:e0:a9:02:ed:d3:83:26:08:5a:a8:37:d3:9f:38:cd:58:12:
bb:a6:7d:54:73:06:6b:73:7e:1a:7e:22:33:cc:6e:0f:9d:42:
02:04:1f:72:02:9a:db:12:0c:7b:c7:b1:91:51:93:13:73:01:
42:2d:e1:3a:6c:a5:6c:df:46:98:75:3d:76:a6:ab:50:27:40:
d7:57:df:bc:47:b5:43:5a:86:80:de:11:f7:9a:5b:71:a2:e2:
f8:8d:7d:54:c8:ff:02:0b:89:dc:43:cd:7b:00:12:f4:50:32:
8a:53:ca:f7:3f:b8:dc:2d:2b:b4:87:09:ff:4d:0c:88:12:17:
e5:48:94:4a:49:68:60:d4:2f:6d:86:a0:79:d3:0a:da:31:d4:
31:44:c7:3a:38:5d:23:43:bb:5e:cc:a6:39:ef:04:20:c4:71:
3c:67:e0:37:8c:a9:d5:08:ba:05:9f:41:13:25:8f:fd:84:79:
75:68:02:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:31 2025 by rpki-client