Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/Oxq3b11n6uCTM0uPwvJREK86m_M.roa
File: Oxq3b11n6uCTM0uPwvJREK86m_M.roa (raw, json)
Hash identifier: WeeN+4UbvcXB1SOJyNyRYKOsQ4tcgwaNpWz1JcCaJfM=
Subject key identifier: 3B:1A:B7:6F:5D:67:EA:E0:93:33:4B:8F:C2:F2:51:10:AF:3A:9B:F3
Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Certificate serial: 0194252181DDF22BB2C960B165BF324EF263
Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/Oxq3b11n6uCTM0uPwvJREK86m_M.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216127
IP address blocks: 93.185.156.0/24 maxlen: 24
93.185.158.0/24 maxlen: 24
93.185.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:81:dd:f2:2b:b2:c9:60:b1:65:bf:32:4e:f2:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3b1ab76f5d67eae093334b8fc2f25110af3a9bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:0b:be:98:e8:6f:e0:0c:7c:21:5e:49:f0:f6:
02:26:38:57:c1:a5:4c:10:04:cb:f8:f2:97:42:d8:
13:08:c8:e9:98:36:53:29:49:63:5f:f7:cd:d2:30:
4d:de:53:6c:76:bc:21:be:a1:be:32:95:16:19:e4:
02:09:d3:da:7d:4f:bb:75:6d:c7:7f:ff:46:df:79:
7b:59:ee:0f:5f:99:c4:bb:e6:43:d4:11:61:c1:07:
80:a0:57:f5:75:30:0b:1e:14:4b:7f:fb:dd:37:00:
11:90:1e:1d:6f:04:54:6a:0b:a3:e6:eb:7e:bf:9f:
76:14:86:a4:fa:b7:a6:ac:1c:8a:81:17:64:76:7d:
5c:40:b0:59:43:22:5a:b6:17:10:0e:76:f6:de:1a:
8f:53:81:c1:2a:97:ec:bb:f6:3c:f3:ae:b2:7c:7a:
24:c1:40:04:51:94:e8:26:44:c7:f7:2e:a8:ec:8c:
15:63:57:09:8d:c8:7f:4f:00:8a:9e:2e:db:85:20:
bc:1f:f7:d3:bb:03:b3:24:ad:f8:19:12:40:21:4e:
8c:d9:45:ab:14:06:5f:eb:e3:c2:92:28:62:52:e1:
69:9e:4e:57:5e:69:33:47:d5:4f:b8:3e:47:64:de:
7f:23:54:bb:f8:5c:6d:c0:c6:65:46:8f:7a:50:5a:
ca:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1A:B7:6F:5D:67:EA:E0:93:33:4B:8F:C2:F2:51:10:AF:3A:9B:F3
X509v3 Authority Key Identifier:
keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/Oxq3b11n6uCTM0uPwvJREK86m_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.185.156.0/24
93.185.158.0/23
Signature Algorithm: sha256WithRSAEncryption
67:93:51:d2:d7:4a:58:e8:7e:73:c9:21:47:f7:6d:05:3b:ff:
ec:73:bc:66:87:b3:71:a7:5d:b9:e6:d5:4c:be:11:8c:92:ab:
14:78:9b:24:fa:e0:cf:af:4f:18:41:ef:ae:9a:c1:d1:16:94:
13:6d:cf:23:fe:65:99:e5:4b:21:9c:c9:44:54:5d:cc:ee:0e:
f9:3a:08:cf:68:ce:12:f5:b2:87:86:6d:2c:20:41:74:73:1d:
fe:1d:e4:32:75:de:de:de:d0:6b:85:23:2e:f4:92:10:25:44:
ab:d0:c9:b2:7e:ba:c7:2b:3e:e3:3c:43:39:94:14:1e:f2:08:
e3:df:b1:e4:10:f0:f6:a3:f8:16:ae:59:c7:64:1d:10:cd:69:
e3:fb:0e:bb:bb:5d:53:1b:49:df:52:6c:62:ef:96:91:e2:43:
4a:16:6f:55:f2:98:0a:50:d1:6b:39:15:d4:0c:9e:0e:2a:66:
7f:e8:49:e8:b0:46:0f:33:46:e8:e6:61:72:d3:79:95:3f:cd:
1b:83:70:3c:0d:c5:58:11:a7:4a:d4:d8:7b:61:15:b3:e6:dc:
0b:a0:32:91:a6:ba:32:2a:99:f0:22:42:73:16:0b:fd:ce:20:
e7:40:ad:04:a2:ae:25:04:87:e9:ff:70:ed:f6:de:b5:6b:5f:
77:f1:3b:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:32:50 2025 by rpki-client