Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lD4rLHiP5FwDKbukajxNCMIw5Lo.roa
File: lD4rLHiP5FwDKbukajxNCMIw5Lo.roa (raw, json)
Hash identifier: fzVmRI+d0+EPOddyjaCWFaobQ8csK+d4AsTlhsUDa/0=
Subject key identifier: 94:3E:2B:2C:78:8F:E4:5C:03:29:BB:A4:6A:3C:4D:08:C2:30:E4:BA
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 0194258FD42D3339719AF731812B30631248
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lD4rLHiP5FwDKbukajxNCMIw5Lo.roa
Signing time: Thu 02 Jan 2025 05:49:30 +0000
ROA not before: Thu 02 Jan 2025 05:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60754
IP address blocks: 93.170.1.0/24 maxlen: 24
95.47.112.0/22 maxlen: 24
146.120.160.0/21 maxlen: 24
146.158.58.0/23 maxlen: 24
146.158.58.0/24 maxlen: 24
146.158.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:d4:2d:33:39:71:9a:f7:31:81:2b:30:63:12:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jan 2 05:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=943e2b2c788fe45c0329bba46a3c4d08c230e4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:14:da:85:c4:b2:e0:bc:0f:c4:52:89:67:28:
61:f0:32:85:c4:e8:50:0f:c8:7d:be:e8:3b:1f:65:
55:82:cb:61:47:84:53:af:ba:e1:58:49:73:02:81:
17:fa:c4:dd:f6:a1:d5:8f:4c:ad:71:a9:25:65:24:
a9:1f:9c:97:aa:1d:4a:23:1c:eb:e6:6b:ae:c5:ba:
ed:2f:fb:8c:90:63:ef:be:10:04:94:19:0a:b3:9a:
00:c6:ea:98:ab:0f:cd:0e:22:d4:bd:d9:fc:4f:4e:
b5:49:33:c8:24:ec:78:1b:74:3a:59:95:9a:68:58:
20:3b:9c:d4:d5:3b:b5:7f:8e:2d:15:f1:a1:25:64:
ca:15:f3:79:e9:b4:6b:a9:37:ee:1f:42:fd:0f:dc:
d7:e6:19:e2:13:75:07:51:a0:ab:0e:73:de:db:e0:
da:f3:11:c4:cc:de:3e:cd:fe:f4:6f:56:e8:e4:3e:
dd:6f:e1:20:8d:02:32:5f:a2:ae:dc:c6:51:f1:a9:
5d:ed:72:79:64:af:bd:d7:9e:d0:c3:19:52:02:bb:
1f:f1:6c:a2:cd:08:b7:bf:bc:92:e2:ca:2b:23:85:
04:f2:9a:07:ab:f3:2e:7b:5b:0f:98:d0:59:0e:5b:
f2:39:9e:0f:3c:67:b2:f8:0d:bc:e6:aa:1b:2a:76:
1e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:3E:2B:2C:78:8F:E4:5C:03:29:BB:A4:6A:3C:4D:08:C2:30:E4:BA
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/lD4rLHiP5FwDKbukajxNCMIw5Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.170.1.0/24
95.47.112.0/22
146.120.160.0/21
146.158.58.0/23
Signature Algorithm: sha256WithRSAEncryption
27:f9:c2:10:d6:9a:f4:34:bf:f5:ff:35:2b:b4:c3:00:eb:9b:
69:4d:62:c5:b5:43:44:73:a5:f7:2d:93:01:34:07:a0:41:f8:
a0:c5:ef:b8:24:11:51:5d:0d:be:f1:d8:df:59:8f:bc:1d:19:
f9:93:7e:55:1c:8d:07:93:c1:8c:f0:9d:31:7c:4f:20:cd:1f:
ba:df:6b:03:d9:97:4a:54:ba:b7:b7:3a:4b:4b:0f:8b:f8:f7:
81:16:56:4a:aa:3a:4b:a0:bf:cf:c4:81:66:0d:f0:e1:ba:70:
7c:7a:50:24:46:82:da:f1:67:20:a1:64:5b:74:f7:94:fc:fd:
05:a2:d6:82:69:67:18:0e:3c:e1:b2:a6:fe:33:ed:cf:e2:a0:
6e:d2:84:4a:c1:03:63:a9:2f:e9:42:d4:32:2e:88:71:89:7e:
f7:51:26:46:28:18:f6:58:7e:97:dc:5a:6c:9f:cb:0c:1d:51:
aa:84:c4:e0:b2:8e:88:11:0b:c4:dd:a6:e8:02:ec:60:1c:b7:
53:a1:5c:f0:b4:36:3d:a8:da:ef:35:6e:b2:6f:f8:be:b1:2d:
47:ac:3e:f3:e8:e7:b1:e9:d4:41:78:7a:08:cd:c9:67:b2:fe:
59:ee:81:18:37:0a:35:73:77:8d:c2:33:77:a8:68:dd:e7:21:
9b:85:3a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:50 2025 by rpki-client