Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/M6XyFHtKP2ScUd5goZuFirggjdg.roa
File: M6XyFHtKP2ScUd5goZuFirggjdg.roa (raw, json)
Hash identifier: WxKRtZl8W5ksvHdugcbq1TzNNdB6TFW+EH2jsrvD9z8=
Subject key identifier: 33:A5:F2:14:7B:4A:3F:64:9C:51:DE:60:A1:9B:85:8A:B8:20:8D:D8
Certificate issuer: /CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Certificate serial: 019421B1D746F800ED58FEC35A0FA99D084D
Authority key identifier: 83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/M6XyFHtKP2ScUd5goZuFirggjdg.roa
Signing time: Wed 01 Jan 2025 11:48:10 +0000
ROA not before: Wed 01 Jan 2025 11:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210931
IP address blocks: 93.179.120.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d7:46:f8:00:ed:58:fe:c3:5a:0f:a9:9d:08:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8338ef41b2c0105a91ccbb9c89337faeb129ff84
Validity
Not Before: Jan 1 11:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=33a5f2147b4a3f649c51de60a19b858ab8208dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:50:5c:41:76:b7:96:53:b7:a3:38:ca:f7:
ca:6a:ed:ce:ab:5c:40:94:c6:ac:09:bb:df:8f:db:
59:a9:ff:9e:bb:47:77:32:58:a2:20:0c:1e:8c:31:
19:b7:55:2d:1a:b5:b7:ba:c6:d7:98:32:90:f0:a5:
46:36:8d:da:37:84:96:24:d2:21:71:f9:e1:b2:c0:
4b:1e:2b:39:7e:7d:ba:81:92:49:0f:d4:7f:ae:9d:
4f:03:7f:83:38:c0:cd:fe:75:ed:c6:65:ac:90:84:
ae:27:61:51:2b:18:e6:1e:9a:87:fb:26:25:6a:d0:
93:d8:d7:bf:ce:8c:b7:01:b2:c5:4d:0d:9d:ba:e4:
a4:59:89:ed:b3:b9:39:09:d1:dd:51:38:61:8b:74:
c7:b9:09:e2:c9:bd:38:42:a5:92:6a:8a:f2:3f:49:
70:f9:1c:d7:6c:00:0c:41:a6:1d:1a:c9:70:3b:e3:
99:ca:81:7f:ae:02:ae:94:0b:bd:9f:d2:87:2b:9e:
54:00:d1:5b:c5:8b:ef:ee:dd:12:44:cc:f3:8d:29:
2f:8d:17:4e:c1:5c:7b:15:ca:3c:dd:3a:68:f7:b8:
e7:63:59:30:1d:d9:d6:0d:9d:81:1d:d3:06:21:a0:
12:74:0f:e4:19:d0:f7:34:a6:aa:a8:97:d0:b7:59:
12:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A5:F2:14:7B:4A:3F:64:9C:51:DE:60:A1:9B:85:8A:B8:20:8D:D8
X509v3 Authority Key Identifier:
keyid:83:38:EF:41:B2:C0:10:5A:91:CC:BB:9C:89:33:7F:AE:B1:29:FF:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gzjvQbLAEFqRzLuciTN_rrEp_4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/M6XyFHtKP2ScUd5goZuFirggjdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/40d996-a2cd-41f1-a738-28fc77967763/1/gzjvQbLAEFqRzLuciTN_rrEp_4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.179.120.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9a:64:2f:8a:79:1f:c9:83:83:e5:a7:f8:9b:f0:ab:f2:58:
27:95:3f:71:1f:e1:8d:a8:57:6c:c0:dc:0f:39:da:7a:73:5d:
9b:18:48:d6:76:9b:dd:48:0d:a6:78:49:bc:24:a7:21:55:1a:
8e:f4:22:72:10:7e:79:81:bb:7c:13:2d:8f:f2:3c:2c:c2:43:
62:0a:8b:2a:8f:80:37:8b:ac:cd:00:57:6a:34:c2:f4:85:2b:
62:aa:ce:60:dc:92:5d:2d:26:9c:3d:97:b7:f4:d1:3d:30:8e:
0f:b0:e0:ea:28:39:73:37:64:11:f0:e9:46:ea:ca:25:d2:fd:
e7:65:56:fc:d8:bf:74:be:c5:b1:ad:a3:fa:11:a9:36:3d:e6:
b9:c0:9e:e7:1e:37:f3:03:bb:83:a0:77:4c:d3:d0:49:1b:fe:
a1:86:97:66:41:5d:3e:5c:01:6f:62:81:ad:26:cd:a9:58:33:
71:db:d8:fd:ec:d6:72:f2:81:1c:67:31:f0:6e:be:f8:9d:7f:
43:30:cc:a9:9a:96:df:12:af:2f:22:31:9a:97:d4:7b:c2:34:
46:75:a4:fc:86:ca:e2:db:73:d4:2a:d3:a6:b6:f9:f4:9c:32:
82:00:c6:55:19:de:8a:b8:ff:17:47:3b:15:5d:48:80:14:77:
9a:6c:95:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 21:06:32 2025 by rpki-client