Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gpuE9tv518ZG3N6Xt-07t8uzLoA.roa
File: gpuE9tv518ZG3N6Xt-07t8uzLoA.roa (raw, json)
Hash identifier: QkdLFPRrcaRs/+74SKTH9Z2t11DE9F/1qnGsigLWoec=
Subject key identifier: 82:9B:84:F6:DB:F9:D7:C6:46:DC:DE:97:B7:ED:3B:B7:CB:B3:2E:80
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD492176D2B56FB431ABF98883A4B
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gpuE9tv518ZG3N6Xt-07t8uzLoA.roa
Signing time: Thu 02 Jan 2025 05:49:30 +0000
ROA not before: Thu 02 Jan 2025 05:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60777
IP address blocks: 93.170.0.0/24 maxlen: 24
93.170.25.0/24 maxlen: 24
95.46.108.0/24 maxlen: 24
95.47.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d4:92:17:6d:2b:56:fb:43:1a:bf:98:88:3a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=829b84f6dbf9d7c646dcde97b7ed3bb7cbb32e80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f7:4f:89:47:a4:7c:c8:0d:0b:93:e9:72:27:
a2:7a:ae:66:3d:9c:ad:2c:12:c0:38:49:18:65:0a:
92:10:cc:dc:1b:34:30:18:90:89:83:4e:86:29:46:
85:0b:3d:9c:69:bc:16:b1:90:9c:42:85:ff:47:90:
63:42:0e:bc:f4:78:36:3c:5e:0f:64:fe:e2:6e:b4:
40:b8:74:95:7c:8b:86:1d:5b:5f:2c:93:be:a3:5d:
6a:0b:3b:2d:d5:2b:3f:b0:ca:5d:05:68:19:be:3b:
b3:08:3e:c9:0d:1e:3e:c2:fa:c1:cb:4b:17:52:b5:
7e:65:af:85:62:c4:80:9e:51:63:e2:a1:c8:b4:c8:
a0:5f:63:c7:f3:8d:ca:5f:a5:27:53:4f:89:63:49:
a3:1c:c8:b5:32:b5:5a:f6:54:34:57:c8:74:39:28:
5f:09:8b:06:91:cd:d7:a3:f7:15:a5:c3:31:36:7a:
5a:56:2f:28:c6:b3:a6:c7:1c:53:ff:5a:0e:f0:d4:
29:bc:c4:27:50:e6:6a:0a:a1:a0:48:82:53:07:ee:
22:a8:33:6e:e4:0d:42:83:9b:7b:7c:d7:69:c9:93:
7e:b2:b5:36:9c:40:1b:38:d3:20:b2:23:14:93:e2:
60:c0:ea:31:ea:97:74:d9:45:60:da:8d:37:4e:23:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:9B:84:F6:DB:F9:D7:C6:46:DC:DE:97:B7:ED:3B:B7:CB:B3:2E:80
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/gpuE9tv518ZG3N6Xt-07t8uzLoA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.0.0/24
93.170.25.0/24
95.46.108.0/24
95.47.136.0/24
Signature Algorithm: sha256WithRSAEncryption
69:22:92:6c:d8:7e:69:71:58:0e:c9:7a:75:06:b0:cd:c6:ab:
1e:67:25:35:6c:ad:0e:8d:d4:66:2a:0a:31:b3:ca:62:19:a3:
ff:a6:b7:01:6e:22:12:1d:8a:44:0a:ec:0e:f9:b6:1e:6c:c0:
5c:00:16:34:e1:04:28:fe:43:17:4a:5c:e3:68:1d:b5:54:b1:
4a:4a:3e:8c:a1:f0:ca:e1:49:a1:58:eb:aa:81:bb:4d:6f:ef:
12:bf:6e:cf:6a:4c:9b:44:4a:0f:f8:d7:d9:b9:4a:e0:79:3a:
4a:55:cc:51:04:51:3c:f9:f1:5a:61:18:d2:2b:63:9f:fe:e9:
8b:ef:45:a9:8b:72:1c:db:b9:05:6f:9a:85:41:d4:a4:23:ec:
c1:2e:9b:ee:67:b4:6e:72:4c:3e:d2:3f:64:b3:5f:3f:c6:0f:
d4:ac:72:5d:29:e3:8c:3c:07:f9:f1:1d:19:8f:37:68:59:db:
94:a2:76:5c:68:29:40:24:26:f7:76:4d:2c:24:74:01:19:13:
30:f0:73:e6:de:13:02:10:f5:b6:39:77:19:24:96:c6:cb:0a:
8a:9e:c8:51:b3:b6:9b:b8:cf:07:9b:e3:4f:dd:8c:5a:f1:ab:
cd:82:ba:ff:b7:90:57:fb:ae:a4:32:96:46:24:ef:e1:6b:ed:
5d:11:da:cb
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQlj9SSF20rVvtDGr+YiDpLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjUwMTAyMDU0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MjliODRmNmRiZjlkN2M2NDZkY2RlOTdiN2VkM2JiN2NiYjMyZTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/dPiUekfMgNC5Ppcieieq5mPZyt
LBLAOEkYZQqSEMzcGzQwGJCJg06GKUaFCz2cabwWsZCcQoX/R5BjQg689Hg2PF4P
ZP7ibrRAuHSVfIuGHVtfLJO+o11qCzst1Ss/sMpdBWgZvjuzCD7JDR4+wvrBy0sX
UrV+Za+FYsSAnlFj4qHItMigX2PH843KX6UnU0+JY0mjHMi1MrVa9lQ0V8h0OShf
CYsGkc3Xo/cVpcMxNnpaVi8oxrOmxxxT/1oO8NQpvMQnUOZqCqGgSIJTB+4iqDNu
5A1Cg5t7fNdpyZN+srU2nEAbONMgsiMUk+JgwOox6pd02UVg2o03TiNOvwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFIKbhPbb+dfGRtzel7ftO7fLsy6AMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvZ3B1RTl0djUxOFpHM042WHQtMDd0OHV6TG9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAXaoAAwQA
XaoZAwQAXy5sAwQAXy+IMA0GCSqGSIb3DQEBCwUAA4IBAQBpIpJs2H5pcVgOyXp1
BrDNxqseZyU1bK0OjdRmKgoxs8piGaP/prcBbiISHYpECuwO+bYebMBcABY04QQo
/kMXSlzjaB21VLFKSj6MofDK4UmhWOuqgbtNb+8Sv27PakybREoP+NfZuUrgeTpK
VcxRBFE8+fFaYRjSK2Of/umL70Wpi3Ic27kFb5qFQdSkI+zBLpvuZ7Ruckw+0j9k
s18/xg/UrHJdKeOMPAf58R0ZjzdoWduUonZcaClAJCb3dk0sJHQBGRMw8HPm3hMC
EPW2OXcZJJbGywqKnshRs7abuM8Hm+NP3Yxa8avNgrr/t5BX+66kMpZGJO/ha+1d
EdrL
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:34:35 2025 by rpki-client