Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gDrbfY-rIMpZRV8_NKjtAOyS6ws.roa
File: gDrbfY-rIMpZRV8_NKjtAOyS6ws.roa (raw, json)
Hash identifier: f4KKHWj3CGvWfGbHh4bf7cJFHWyUd/eX1h48vXsmeNc=
Subject key identifier: 80:3A:DB:7D:8F:AB:20:CA:59:45:5F:3F:34:A8:ED:00:EC:92:EB:0B
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD1FD3C58594C3E54541BFADF2D4A
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gDrbfY-rIMpZRV8_NKjtAOyS6ws.roa
Signing time: Thu 02 Jan 2025 05:49:29 +0000
ROA not before: Thu 02 Jan 2025 05:49:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60337
IP address blocks: 93.170.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d1:fd:3c:58:59:4c:3e:54:54:1b:fa:df:2d:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=803adb7d8fab20ca59455f3f34a8ed00ec92eb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:30:1b:ab:76:23:e1:80:f4:5b:a5:30:43:7b:
da:e4:e2:5a:ff:07:97:f2:27:cc:75:13:24:61:01:
b4:53:ec:3b:57:f6:e4:02:95:0f:db:cd:25:cc:62:
4b:ef:bb:59:7b:c4:6e:93:e4:93:6f:09:85:18:d5:
45:37:b8:2a:3b:6e:61:0f:cb:33:ae:1a:2b:0b:27:
15:79:a9:e9:4f:d7:09:63:ab:55:b8:65:f9:70:be:
02:a0:e5:5f:0c:26:43:a0:96:93:75:51:2d:05:ac:
a5:4a:f8:7f:1e:6e:87:e6:64:65:f3:f8:e3:b2:47:
f1:9e:5e:2c:6c:16:ed:df:fe:aa:86:f2:2f:7d:4f:
62:f1:21:19:5a:c6:49:da:1f:d7:05:9a:72:56:cf:
0b:07:d2:a8:dc:29:b4:99:5a:4f:d4:80:8a:bc:b7:
ab:27:7c:32:dd:22:a7:0b:9b:15:22:76:8c:c3:77:
16:d8:1f:7d:77:db:0c:45:a7:ee:fe:fb:8a:26:ac:
08:e0:cb:e8:c3:ad:24:9f:6f:0a:e5:f2:a4:70:55:
5b:2a:99:ce:78:44:1a:66:b5:8c:4e:43:a9:30:7e:
ae:1e:bc:29:15:28:27:33:06:41:c7:69:70:ab:9c:
35:dd:25:54:04:85:d1:58:3a:8c:6f:67:6f:a4:4b:
c7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3A:DB:7D:8F:AB:20:CA:59:45:5F:3F:34:A8:ED:00:EC:92:EB:0B
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gDrbfY-rIMpZRV8_NKjtAOyS6ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.252.0/24
Signature Algorithm: sha256WithRSAEncryption
24:f5:86:df:c7:a8:71:04:99:09:dc:d6:87:f1:27:1f:11:c9:
07:3b:13:1b:7e:31:0a:d3:56:9b:6d:0d:57:99:b1:b4:fe:ae:
00:c4:f4:30:ba:c2:0f:84:98:97:4c:06:c8:c9:4c:0f:27:e8:
6a:5c:97:bb:7e:ee:07:d6:bd:e3:91:3b:1d:f0:ee:ce:30:23:
fb:a3:28:45:c4:5a:a4:63:b4:9f:90:b5:a5:b5:5c:f0:4a:34:
17:fd:b9:60:55:7c:8e:e0:5d:fb:16:a7:74:ad:64:2d:4d:9f:
3b:b6:76:8e:72:6e:20:b6:ff:b7:e0:cb:2b:80:0f:84:a1:7e:
3b:e0:12:d4:23:39:14:89:a0:ba:f0:74:c3:e3:0c:08:2e:07:
d4:fe:d1:25:fa:84:91:e9:3b:71:5d:bb:1a:c9:49:12:c9:54:
59:f1:bc:50:e8:af:72:95:50:23:6a:55:bf:4d:62:94:0a:15:
15:47:3b:32:2e:f4:d4:d4:f0:2e:77:7f:55:c4:29:af:74:d0:
0e:03:f3:00:57:27:9a:bd:00:29:bc:c7:31:af:8f:04:99:1f:
37:92:06:e6:c0:80:8b:d2:c1:6a:df:2a:d1:33:46:82:81:a4:
8c:7e:09:7e:a2:06:49:ae:a2:a0:06:fc:a0:91:d9:20:6d:5f:
e3:e8:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:14:28 2025 by rpki-client