Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/leN1ZjSIkeiTTxg94ft-0NR1M0A.roa
File: leN1ZjSIkeiTTxg94ft-0NR1M0A.roa (raw, json)
Hash identifier: yOUby0xW6Pis7c5t5gamQ41ap4NicfeURdAGrO0ouRw=
Subject key identifier: 95:E3:75:66:34:88:91:E8:93:4F:18:3D:E1:FB:7E:D0:D4:75:33:40
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019428276D91C893E3A18793830CB7A28CCC
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/leN1ZjSIkeiTTxg94ft-0NR1M0A.roa
Signing time: Thu 02 Jan 2025 17:54:19 +0000
ROA not before: Thu 02 Jan 2025 17:54:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213958
IP address blocks: 93.113.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:6d:91:c8:93:e3:a1:87:93:83:0c:b7:a2:8c:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 2 17:54:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95e37566348891e8934f183de1fb7ed0d4753340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:dd:c5:c8:d5:44:61:2d:b9:7e:60:16:29:
58:fc:2a:4a:39:a0:0f:ce:16:a1:ad:85:f8:0e:ef:
92:3e:57:46:8f:86:50:ba:b6:cd:2f:b2:b0:0f:80:
9a:73:5e:92:1e:69:8a:da:7a:68:c3:6e:a0:db:98:
97:32:03:fe:f3:02:1a:82:08:83:ca:bf:77:17:d8:
97:fc:01:7f:88:24:3b:46:3c:5c:fe:32:1f:0f:ee:
32:f3:be:84:67:01:d2:5f:5d:b2:d2:38:76:fc:d9:
b1:14:d5:ff:e3:bd:24:82:45:9b:12:70:86:7e:16:
b3:52:f6:96:04:fe:0a:e6:b2:92:7d:a5:a3:95:9f:
c6:e9:1a:5b:06:df:18:a9:10:ea:d4:13:5b:51:a2:
63:31:34:22:17:df:ee:75:48:bb:7d:35:94:1d:2d:
ed:fc:2c:6f:07:f5:dd:c4:81:6b:d7:d6:10:be:57:
5e:24:7e:e7:50:d3:8d:58:99:db:97:0d:c8:57:e6:
dc:b7:b1:a0:89:ae:fe:38:e4:85:f2:ab:ed:df:c8:
dd:e5:c3:b2:eb:b5:ae:e6:62:b0:40:ba:b5:b0:9f:
c4:aa:62:b2:6a:1e:a6:0c:6c:c8:88:42:ec:29:f0:
1e:d1:08:b5:3d:b6:a7:08:d8:28:65:39:35:97:3b:
70:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:E3:75:66:34:88:91:E8:93:4F:18:3D:E1:FB:7E:D0:D4:75:33:40
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/leN1ZjSIkeiTTxg94ft-0NR1M0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.57.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:c3:0f:90:07:02:32:5c:ba:fc:b6:27:70:ee:f0:a2:0a:9a:
a7:a3:51:ea:7a:74:cf:54:5c:a6:31:3c:b5:55:53:92:7a:50:
cb:32:07:ab:32:5a:46:7e:37:1e:ed:c4:c1:16:21:af:66:0a:
4a:8b:86:ee:bf:4a:05:ac:1a:50:89:bd:6a:a9:46:87:ab:4e:
f8:a1:1c:a5:66:ba:2d:49:73:a8:de:49:da:ff:b6:f2:8a:0b:
81:c6:0b:14:06:33:8f:18:e2:a1:37:bf:33:b7:8d:53:9b:65:
fa:79:f7:29:9f:d3:55:79:e0:3e:f1:21:38:99:ca:fb:80:15:
72:95:32:54:a8:7b:3a:cd:45:6b:3c:1f:67:2f:44:24:c6:ef:
6a:42:88:df:97:9f:23:62:25:9b:50:9b:5f:eb:20:c4:48:ec:
11:ba:11:0c:a8:c4:ad:dd:25:2e:3a:ac:8b:0d:5a:d5:b8:a0:
fc:fb:81:8e:bc:cb:9c:75:fc:d0:bb:59:5e:91:34:17:22:56:
2e:32:cc:49:82:67:9c:cb:46:46:eb:35:61:44:ae:41:2f:24:
3b:ff:6d:65:5c:35:40:0d:00:a9:f7:6e:4f:a8:03:bd:cd:40:
62:19:e1:db:3c:29:8b:7a:af:02:b5:64:c5:32:6d:9b:50:a1:
75:c8:d2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:57:24 2025 by rpki-client