Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/etzt5bGML6XoW7Q2zbpKKcUlGh4.roa
File: etzt5bGML6XoW7Q2zbpKKcUlGh4.roa (raw, json)
Hash identifier: HCafTB2Uxg1D8Yb0cosR+OQrdUbSZNRbdGCdi2YlU8Q=
Subject key identifier: 7A:DC:ED:E5:B1:8C:2F:A5:E8:5B:B4:36:CD:BA:4A:29:C5:25:1A:1E
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FF97D935DC3AE0C9013EAB0928132
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/etzt5bGML6XoW7Q2zbpKKcUlGh4.roa
Signing time: Thu 02 Jan 2025 05:49:39 +0000
ROA not before: Thu 02 Jan 2025 05:49:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207348
IP address blocks: 93.170.240.0/23 maxlen: 24
95.47.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:f9:7d:93:5d:c3:ae:0c:90:13:ea:b0:92:81:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7adcede5b18c2fa5e85bb436cdba4a29c5251a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fd:7e:98:3a:34:69:34:dc:17:4a:61:7d:7f:
58:ca:12:01:03:1c:75:a1:19:54:83:4d:d9:29:0b:
8c:82:d8:83:f7:da:7a:37:50:b9:52:ac:d7:f9:84:
40:98:45:f9:5e:c8:2f:7c:e9:a2:57:f1:11:d3:4f:
bd:83:f0:90:d9:f6:c0:6d:37:c1:d9:8c:16:29:3c:
e9:24:c3:ed:bf:0c:3f:43:b9:65:06:4c:29:81:f1:
da:91:15:cd:23:e0:03:6d:29:ff:6a:7e:d3:c1:0a:
ad:b0:c3:f7:4b:68:e7:18:b8:2f:9a:e8:7a:2d:78:
4e:01:d3:1d:db:d2:37:3d:a9:95:95:04:dc:93:95:
8d:fa:28:3e:77:2b:e5:25:dd:18:ef:c4:11:5b:bc:
48:07:ce:84:38:d6:de:a5:73:39:68:38:50:9f:b3:
2f:11:40:d9:e1:82:4a:26:62:24:c8:3a:ad:4a:96:
97:c0:df:46:9e:80:1b:0c:34:d9:73:95:a4:82:05:
4a:c1:a3:a6:2d:71:90:a5:79:cb:18:01:c9:45:6c:
0c:d2:79:d6:4b:31:2d:80:fc:80:ae:e9:69:19:38:
b8:a6:55:9f:b0:df:52:24:72:a5:87:fb:7a:db:8a:
a3:09:80:e3:af:12:fc:c4:88:91:5e:fa:98:e3:a0:
d0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DC:ED:E5:B1:8C:2F:A5:E8:5B:B4:36:CD:BA:4A:29:C5:25:1A:1E
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/etzt5bGML6XoW7Q2zbpKKcUlGh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.240.0/23
95.47.160.0/24
Signature Algorithm: sha256WithRSAEncryption
54:2d:43:c3:a2:d8:47:c2:ac:ad:f9:9c:1e:ea:2b:23:c8:6f:
da:44:84:b7:49:0e:bd:4a:29:08:b3:5f:a8:d9:3b:69:f7:ba:
98:86:e7:d3:21:12:da:be:d6:8d:98:0d:29:0a:c6:20:38:6f:
2c:eb:79:e7:ed:ed:35:99:c1:df:24:e2:6b:ea:3e:19:e1:15:
6c:66:a1:77:7d:33:2e:c2:8c:48:46:c1:74:05:61:c1:e9:6b:
e4:46:6b:1d:96:9e:82:2e:ef:95:a5:c2:15:83:10:58:67:49:
8d:02:cc:d4:a3:88:6b:b0:11:f7:0f:fc:8d:e2:90:17:86:28:
e5:13:91:88:7d:a4:79:75:97:5e:bf:a5:3f:7e:9e:fb:15:3e:
c6:3b:fb:17:e0:0c:24:67:81:1f:25:1a:c9:8e:7c:55:d2:f9:
54:b9:91:d9:7c:9a:9f:c4:a1:1b:49:60:77:8a:18:11:1d:96:
59:71:67:34:d4:15:78:e7:a4:3e:8d:17:28:52:4f:f5:e4:7b:
6b:65:12:3b:cc:38:2c:99:61:9b:8c:b3:a1:f1:90:7a:2d:29:
92:1b:d3:72:79:61:64:c3:15:0e:11:d6:7a:bb:8d:30:77:c7:
ad:c7:eb:44:45:cc:52:17:69:09:3d:15:ef:5b:b8:e3:17:82:
d9:c5:2a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:39:03 2025 by rpki-client