Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/F7b03g0Ee-fSPcMxx0o1NC5o-jc.roa
File: F7b03g0Ee-fSPcMxx0o1NC5o-jc.roa (raw, json)
Hash identifier: GEJYViG+J67xVcFsrJoAONaDjeNj+DXXpZDr8Fb7EbI=
Subject key identifier: 17:B6:F4:DE:0D:04:7B:E7:D2:3D:C3:31:C7:4A:35:34:2E:68:FA:37
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 01951F260FBDFC69F9D833516EE042547D8B
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/F7b03g0Ee-fSPcMxx0o1NC5o-jc.roa
Signing time: Wed 19 Feb 2025 16:59:02 +0000
ROA not before: Wed 19 Feb 2025 16:59:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213497
IP address blocks: 93.179.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:1f:26:0f:bd:fc:69:f9:d8:33:51:6e:e0:42:54:7d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Feb 19 16:59:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17b6f4de0d047be7d23dc331c74a35342e68fa37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7f:53:34:3f:d1:ee:4b:6d:da:e0:0f:6e:a5:
44:1c:a9:a8:31:52:75:31:3b:d9:d0:9c:6c:ea:d8:
4f:62:76:99:04:20:09:4d:dc:a8:51:5d:a1:08:a1:
97:af:4b:85:1d:a6:ef:c3:6c:51:54:35:67:86:a0:
21:81:91:d2:e9:d2:09:28:89:cd:aa:8a:fd:b2:b9:
c9:52:74:b1:cb:75:df:3d:88:1a:96:73:35:32:69:
dd:2b:f0:e6:c3:bd:cd:8b:9e:1c:3e:cf:55:ef:bb:
91:58:01:e8:1b:3e:a6:99:8c:bb:35:38:6c:f8:9b:
9a:f9:7d:3a:f2:6d:b3:c7:65:7e:97:db:59:e9:05:
e8:30:58:a5:63:7e:6e:f9:cd:31:5c:1b:c2:6c:ab:
59:14:0e:da:e1:34:f0:51:51:2f:f1:25:b9:ce:56:
41:00:7e:0c:60:2f:37:66:1f:7f:64:fc:14:a6:17:
e3:74:26:cc:84:65:9f:c7:32:f5:5a:c2:6b:23:08:
cc:f5:2d:1f:b5:eb:c8:75:f8:22:de:2d:ca:26:a2:
c6:d9:30:a3:61:73:a8:3b:01:0c:c4:b4:3b:79:75:
95:a4:82:2d:e3:71:0b:26:d4:c5:a5:e4:eb:bb:0a:
f9:92:83:d3:a7:fc:4e:d2:58:94:96:cd:f3:c6:c6:
d0:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B6:F4:DE:0D:04:7B:E7:D2:3D:C3:31:C7:4A:35:34:2E:68:FA:37
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/F7b03g0Ee-fSPcMxx0o1NC5o-jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.93.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:3b:1d:8f:0f:30:ce:b7:ca:81:93:18:6d:a8:14:40:8d:0d:
76:15:29:f8:b3:55:82:3c:68:b4:5e:7c:01:c1:8d:40:62:33:
ab:49:d4:6c:da:19:80:f6:f0:00:a3:66:fa:1e:ec:c2:eb:de:
d8:63:a4:3b:62:57:df:87:5d:68:c8:f4:26:58:eb:f3:8f:08:
3b:a4:be:f5:8d:6d:94:6c:b9:68:72:46:8e:a0:fe:c2:c5:87:
66:26:7f:f3:bd:2b:8a:ec:b8:75:ff:9b:3f:ad:1f:49:75:2d:
37:de:c7:74:c3:ed:b2:90:54:2c:a6:fd:39:8e:88:ab:3f:57:
82:8a:52:99:eb:e7:ab:da:ff:98:77:a9:a4:e3:53:84:15:43:
48:46:cb:c8:0f:f4:22:52:6b:6e:99:20:a8:8d:75:80:bb:35:
16:37:56:91:11:4e:14:06:6c:dc:97:9a:21:0e:7c:54:78:c1:
a2:fd:0b:9b:fc:3b:4c:79:80:0e:48:85:86:4e:af:f6:0e:c8:
7c:0c:af:42:9d:e5:97:a0:de:7a:32:fe:17:2e:7b:8f:fc:cc:
79:15:22:16:bb:7c:00:8a:c1:0c:33:55:2f:4b:93:f8:83:fc:
8a:30:a6:8a:51:32:75:35:74:39:f5:5b:d6:db:11:5f:62:a9:
d4:c3:26:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 20:53:10 2025 by rpki-client