Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/b_oy2McraIj9BhDHkdgjQh5p6OI.roa
File: b_oy2McraIj9BhDHkdgjQh5p6OI.roa (raw, json)
Hash identifier: r5wduoI9o89BflBumbO2tDy6xigM6d1xTV+H9z0FQtc=
Subject key identifier: 6F:FA:32:D8:C7:2B:68:88:FD:06:10:C7:91:D8:23:42:1E:69:E8:E2
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258F991BFCE1F634D24F4196FC33E233
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/b_oy2McraIj9BhDHkdgjQh5p6OI.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42066
IP address blocks: 93.170.170.0/23 maxlen: 24
95.46.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:99:1b:fc:e1:f6:34:d2:4f:41:96:fc:33:e2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ffa32d8c72b6888fd0610c791d823421e69e8e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a6:c4:29:b7:bb:a4:3d:ba:41:0d:45:10:0e:
10:3c:39:15:5a:21:c0:7d:e7:3c:fc:7b:c2:0b:b1:
04:04:9d:cf:e4:bd:f0:3b:ba:99:51:32:17:43:96:
fa:de:1f:33:a6:6a:9e:e7:7a:51:ab:d3:51:6a:e2:
8c:9e:78:5d:84:2b:24:14:5d:8d:4c:cc:eb:d4:32:
86:84:44:c7:fc:50:c1:d3:c8:8b:c0:f9:bf:3d:a5:
19:65:31:fb:fd:8c:c6:30:d4:a4:dc:10:2a:ba:2e:
91:4b:eb:ed:73:ed:b4:75:e9:43:61:f3:41:4d:c1:
f6:79:83:19:a6:5a:7d:91:31:18:f3:13:4b:e6:d1:
90:af:e2:05:89:c9:de:34:be:88:39:ab:65:13:c2:
ba:18:29:a3:2a:ec:f4:8d:b1:25:4b:09:1a:44:f0:
ba:20:7f:6b:6a:88:96:66:e1:1e:ea:1b:5a:d5:4d:
db:93:ec:0c:f1:d8:a0:d6:50:9e:d6:08:ff:65:55:
b6:31:ff:8a:58:83:72:51:69:33:fe:f4:38:f9:64:
69:22:00:c9:56:ef:41:60:11:6f:6f:99:90:20:3b:
69:cf:3d:d1:fd:a1:b1:dc:35:4c:1b:d7:58:d9:39:
a8:8c:60:a0:6c:bc:e9:15:96:09:a3:df:7d:4f:61:
3d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:FA:32:D8:C7:2B:68:88:FD:06:10:C7:91:D8:23:42:1E:69:E8:E2
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/b_oy2McraIj9BhDHkdgjQh5p6OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.170.0/23
95.46.7.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:f6:97:3b:18:de:d7:77:6b:a6:fc:ea:2e:c4:ad:cd:57:24:
8c:bb:e6:a6:69:17:48:31:a3:27:5f:a2:27:e5:b9:51:cd:d1:
08:fd:d8:98:86:a2:67:3d:8f:5a:6c:1e:66:71:36:fa:aa:04:
22:f8:c9:5c:40:00:d1:13:f6:46:59:d1:5c:65:04:e8:36:af:
36:c3:ce:c7:a9:83:72:17:ad:fc:f4:18:9d:a8:19:67:c8:8b:
2d:35:27:bb:68:e3:e9:c0:04:d5:38:3e:ef:59:65:13:a2:34:
97:60:15:d6:dc:d5:82:0e:98:83:90:4b:82:16:a5:b3:3a:84:
cb:b9:1b:69:94:0c:6c:7b:3f:65:48:cd:84:73:19:ff:28:2b:
d5:02:64:0b:15:fd:8a:cf:4f:a1:3e:ea:2e:e1:d7:80:5f:17:
df:6e:f6:58:29:82:e6:21:cd:2f:e7:19:7b:d3:21:2b:a7:fc:
be:04:68:ea:8f:fc:6b:08:af:e8:d9:8b:dd:c7:d3:cb:be:f2:
8d:2b:0b:de:13:bd:e5:28:48:e3:5b:a5:f3:a0:5f:1e:77:74:
21:a3:67:42:96:e4:2f:b4:7c:06:3f:a6:f4:61:74:93:a2:23:
ea:14:0e:61:7d:88:eb:bd:a9:a9:aa:56:9f:fe:61:2a:ab:2f:
8f:33:11:02
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj5kb/OH2NNJPQZb8M+IzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmZhMzJkOGM3MmI2ODg4ZmQwNjEwYzc5MWQ4MjM0MjFlNjllOGUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqbEKbe7pD26QQ1FEA4QPDkVWiHA
fec8/HvCC7EEBJ3P5L3wO7qZUTIXQ5b63h8zpmqe53pRq9NRauKMnnhdhCskFF2N
TMzr1DKGhETH/FDB08iLwPm/PaUZZTH7/YzGMNSk3BAqui6RS+vtc+20delDYfNB
TcH2eYMZplp9kTEY8xNL5tGQr+IFicneNL6IOatlE8K6GCmjKuz0jbElSwkaRPC6
IH9raoiWZuEe6hta1U3bk+wM8dig1lCe1gj/ZVW2Mf+KWINyUWkz/vQ4+WRpIgDJ
Vu9BYBFvb5mQIDtpzz3R/aGx3DVMG9dY2TmojGCgbLzpFZYJo999T2E9TwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG/6MtjHK2iI/QYQx5HYI0IeaejiMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvYl9veTJNY3JhSWo5QmhESGtkZ2pRaDVwNk9JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBXaqqAwQA
Xy4HMA0GCSqGSIb3DQEBCwUAA4IBAQAf9pc7GN7Xd2um/OouxK3NVySMu+amaRdI
MaMnX6In5blRzdEI/diYhqJnPY9abB5mcTb6qgQi+MlcQADRE/ZGWdFcZQToNq82
w87HqYNyF6389BidqBlnyIstNSe7aOPpwATVOD7vWWUTojSXYBXW3NWCDpiDkEuC
FqWzOoTLuRtplAxsez9lSM2Ecxn/KCvVAmQLFf2Kz0+hPuou4deAXxffbvZYKYLm
Ic0v5xl70yErp/y+BGjqj/xrCK/o2Yvdx9PLvvKNKwveE73lKEjjW6XzoF8ed3Qh
o2dCluQvtHwGP6b0YXSToiPqFA5hfYjrvampqlaf/mEqqy+PMxEC
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:08:29 2025 by rpki-client