Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/FMf3Dlx3xe3o0oQ5H7VvQF4482M.roa
File: FMf3Dlx3xe3o0oQ5H7VvQF4482M.roa (raw, json)
Hash identifier: Ky+yUEaNAFCmWfk3pIxAZYoORhQc8JCWg+sBVNOj1UU=
Subject key identifier: 14:C7:F7:0E:5C:77:C5:ED:E8:D2:84:39:1F:B5:6F:40:5E:38:F3:63
Certificate issuer: /CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Certificate serial: 01941FFA505C9AC9C26FBA6BB27FC9AF055C
Authority key identifier: 5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/FMf3Dlx3xe3o0oQ5H7VvQF4482M.roa
Signing time: Wed 01 Jan 2025 03:48:05 +0000
ROA not before: Wed 01 Jan 2025 03:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200854
IP address blocks: 185.93.176.0/22 maxlen: 22
185.93.176.0/24 maxlen: 24
185.93.177.0/24 maxlen: 24
185.93.178.0/24 maxlen: 24
185.93.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 23:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:50:5c:9a:c9:c2:6f:ba:6b:b2:7f:c9:af:05:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eba57e1707e43b2fa97fceb078a5d460e56c1bf
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14c7f70e5c77c5ede8d284391fb56f405e38f363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:41:9c:39:8f:8f:8c:c7:90:ea:cb:1c:b1:
19:47:80:92:d2:01:c4:0a:2c:5b:0b:b0:60:c0:fd:
50:65:9b:d0:79:43:1a:02:d9:8f:6e:af:a5:3a:1c:
76:58:5c:45:5c:9a:22:2b:1e:90:c8:2b:6b:18:e1:
ed:49:37:9a:a3:b9:e2:de:11:3a:d2:1c:4b:f6:ab:
6c:ba:58:99:9d:a5:70:6e:91:e2:fa:84:d8:85:4a:
b0:8b:8e:57:b0:e8:48:33:91:42:74:b6:86:5d:26:
8a:2c:56:09:06:95:1b:0f:dd:f8:01:b8:9c:c8:3c:
4e:dd:4f:f0:cd:f7:14:e1:e7:76:f4:df:ca:c2:d8:
f4:53:c9:de:e0:ad:b0:cb:2a:31:6f:5f:8d:d6:49:
ba:b6:33:c4:86:6d:d0:72:51:aa:4c:fe:5c:01:05:
58:19:6c:88:b3:f9:0d:fb:78:3d:71:d9:98:36:c6:
c5:10:54:27:09:c8:f9:74:4e:cc:92:14:3c:d4:e3:
48:b7:27:e9:5c:eb:f5:35:07:47:2a:80:85:a0:6b:
d0:0d:f5:86:90:76:90:62:4a:2f:75:c6:a0:65:64:
74:f2:29:79:2b:a9:bb:4d:a6:06:a1:be:3c:95:1f:
30:8d:b0:97:d8:e0:ef:3a:bc:f2:ab:33:e5:f3:0a:
c8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C7:F7:0E:5C:77:C5:ED:E8:D2:84:39:1F:B5:6F:40:5E:38:F3:63
X509v3 Authority Key Identifier:
keyid:5E:BA:57:E1:70:7E:43:B2:FA:97:FC:EB:07:8A:5D:46:0E:56:C1:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/FMf3Dlx3xe3o0oQ5H7VvQF4482M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/cbcac6-abeb-4a38-8ccc-b5972709bb02/1/XrpX4XB-Q7L6l_zrB4pdRg5Wwb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.176.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:43:7e:d9:3c:da:aa:99:ca:10:a5:51:68:8d:b4:ec:1c:ec:
6e:2f:12:73:07:05:a9:2e:e6:70:40:17:3d:ff:f2:cd:9c:2c:
b2:09:bd:91:bf:99:60:40:92:ac:45:df:9d:34:a4:fc:75:6f:
b0:37:25:84:c2:7c:4d:f7:9d:98:14:ee:8b:06:21:85:29:99:
5a:cc:99:0a:46:84:3e:60:3a:58:3a:47:d4:3a:67:e0:82:14:
c1:52:f5:7d:f1:0b:38:6f:dd:06:85:59:aa:4b:a4:3f:49:74:
3d:2c:07:03:6d:03:ed:af:79:a3:5b:17:b1:d9:7f:f7:dc:0a:
4a:d0:6d:a7:af:7a:7f:ca:ab:bc:52:80:9b:2d:05:e2:25:fd:
7b:e2:31:45:de:f7:26:1f:bd:92:c6:e1:56:5f:a4:01:3a:c2:
c2:25:af:cf:4f:a4:bf:bf:c3:59:3a:36:51:eb:4b:d7:e7:be:
7f:51:a9:c4:c0:c4:1b:f9:42:0f:4e:94:68:b0:fe:63:91:d2:
fd:ba:ae:a8:75:aa:5d:f6:78:19:0c:21:ac:e1:fb:98:1e:eb:
71:1f:f1:a1:23:97:0e:e9:66:5b:87:43:48:4e:e9:53:21:fa:
ea:ee:7e:b5:e3:8b:f9:a2:19:5c:2b:b4:b4:79:7c:16:67:d4:
8f:19:f4:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQf+lBcmsnCb7prsn/JrwVcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlYmE1N2UxNzA3ZTQzYjJmYTk3ZmNlYjA3OGE1ZDQ2MGU1
NmMxYmYwHhcNMjUwMTAxMDM0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNGM3ZjcwZTVjNzdjNWVkZThkMjg0MzkxZmI1NmY0MDVlMzhmMzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos9BnDmPj4zHkOrLHLEZR4CS0gHE
CixbC7BgwP1QZZvQeUMaAtmPbq+lOhx2WFxFXJoiKx6QyCtrGOHtSTeao7ni3hE6
0hxL9qtsuliZnaVwbpHi+oTYhUqwi45XsOhIM5FCdLaGXSaKLFYJBpUbD934Abic
yDxO3U/wzfcU4ed29N/Kwtj0U8ne4K2wyyoxb1+N1km6tjPEhm3QclGqTP5cAQVY
GWyIs/kN+3g9cdmYNsbFEFQnCcj5dE7MkhQ81ONItyfpXOv1NQdHKoCFoGvQDfWG
kHaQYkovdcagZWR08il5K6m7TaYGob48lR8wjbCX2ODvOrzyqzPl8wrIwQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBTH9w5cd8Xt6NKEOR+1b0BeOPNjMB8GA1UdIwQY
MBaAFF66V+FwfkOy+pf86weKXUYOVsG/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9jYmNhYzYtYWJlYi00YTM4LThjY2Mt
YjU5NzI3MDliYjAyLzEvRk1mM0RseDN4ZTNvMG9RNUg3VnZRRjQ0ODJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9jYmNhYzYtYWJlYi00YTM4LThjY2MtYjU5NzI3MDliYjAy
LzEvWHJwWDRYQi1RN0w2bF96ckI0cGRSZzVXd2I4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV2wMA0G
CSqGSIb3DQEBCwUAA4IBAQB9Q37ZPNqqmcoQpVFojbTsHOxuLxJzBwWpLuZwQBc9
//LNnCyyCb2Rv5lgQJKsRd+dNKT8dW+wNyWEwnxN952YFO6LBiGFKZlazJkKRoQ+
YDpYOkfUOmfgghTBUvV98Qs4b90GhVmqS6Q/SXQ9LAcDbQPtr3mjWxex2X/33ApK
0G2nr3p/yqu8UoCbLQXiJf174jFF3vcmH72SxuFWX6QBOsLCJa/PT6S/v8NZOjZR
60vX575/UanEwMQb+UIPTpRosP5jkdL9uq6odapd9ngZDCGs4fuYHutxH/GhI5cO
6WZbh0NITulTIfrq7n6144v5ohlcK7S0eXwWZ9SPGfQp
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:48:28 2025 by rpki-client