Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/93oAKYvO6XYFsiZOJUeBk34alow.roa
File: 93oAKYvO6XYFsiZOJUeBk34alow.roa (raw, json)
Hash identifier: OMaRC1Me7Y5SHCHx/1b5M8xkqo0CIdN293P1j1+C9f0=
Subject key identifier: F7:7A:00:29:8B:CE:E9:76:05:B2:26:4E:25:47:81:93:7E:1A:96:8C
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 019420D5F3121B63D76D3910B648C2FB1240
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/93oAKYvO6XYFsiZOJUeBk34alow.roa
Signing time: Wed 01 Jan 2025 07:47:59 +0000
ROA not before: Wed 01 Jan 2025 07:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51453
IP address blocks: 37.235.0.0/23 maxlen: 23
37.235.2.0/24 maxlen: 24
185.81.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f3:12:1b:63:d7:6d:39:10:b6:48:c2:fb:12:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f77a00298bcee97605b2264e254781937e1a968c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7b:6f:4d:97:a5:ad:7f:d2:68:68:c0:87:43:
10:cc:0e:9c:24:df:9e:c1:55:39:39:70:67:83:63:
6a:d2:93:8b:0d:07:95:64:27:b0:24:e8:c6:b8:f3:
b2:6c:66:38:b1:5e:67:96:76:19:1a:52:91:52:e6:
63:94:e1:bb:66:ae:1c:30:05:43:28:17:c5:cf:3e:
2b:92:0e:0a:67:68:b2:07:f9:fc:0c:b8:ea:21:fd:
af:db:a5:38:39:e9:74:97:0a:27:63:ad:a8:78:f7:
29:ad:0d:5e:b4:97:2e:ba:ac:53:3e:bc:3a:60:44:
34:ac:0f:05:a5:cc:f1:69:5f:5c:eb:77:83:6a:79:
cc:24:d5:95:05:35:76:f6:66:91:ab:b4:8a:7f:e4:
2d:69:79:bf:33:72:5e:d9:d7:94:98:cd:f8:40:52:
80:33:e1:21:f3:28:1b:ce:14:38:88:18:eb:39:40:
29:96:bc:ab:fe:3e:25:b0:4f:ae:19:fb:1e:22:19:
ef:a4:78:b4:6f:e0:f4:30:28:a7:f8:4e:43:da:36:
ff:7f:b2:7a:90:61:a8:32:6a:80:7f:04:b6:e0:48:
33:fe:de:e0:b5:38:f8:35:4d:de:52:45:bb:6e:16:
3b:62:0f:b8:67:d7:f8:21:2c:b7:44:cc:3d:63:86:
a0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7A:00:29:8B:CE:E9:76:05:B2:26:4E:25:47:81:93:7E:1A:96:8C
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/93oAKYvO6XYFsiZOJUeBk34alow.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.235.0.0-37.235.2.255
185.81.204.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:4d:3c:42:65:ca:87:d8:4b:dc:1f:db:2d:95:2d:d5:c1:46:
3c:87:c1:69:1e:dc:5b:0e:b9:83:2b:df:d9:a0:01:10:e1:f6:
fd:af:86:69:e1:e2:24:0b:b9:97:32:98:80:1e:37:d1:af:4c:
f9:66:44:b7:fb:42:75:56:7f:21:c3:71:ec:92:ee:d2:11:dd:
c0:06:dd:d5:ab:0e:3f:77:76:63:57:a4:a7:62:cc:ef:76:40:
ce:bd:89:5f:cd:36:95:bd:b0:ff:ae:c3:0b:a8:be:a8:43:88:
0a:81:53:fc:1f:79:a8:76:33:17:fc:a7:7b:44:f9:56:05:ca:
00:5f:5f:83:97:5c:37:7d:9a:86:1b:51:ca:f0:f6:f1:ff:38:
9c:ab:9f:0d:60:a8:50:4e:04:32:41:89:03:89:95:5a:97:54:
d4:61:58:d8:66:70:f4:31:f2:11:66:03:fb:6d:10:eb:87:53:
f9:a7:d3:12:39:6f:27:25:bc:b6:4d:22:0b:72:50:78:71:a8:
e2:7f:f7:5a:a7:fe:b9:32:8b:b5:b1:3b:90:59:ff:c4:e4:9e:
b3:15:3e:c7:62:6a:cc:4d:a5:77:41:f2:5b:fe:60:32:a2:c7:
3e:e4:5e:28:8b:04:51:19:07:0e:46:10:79:e5:1e:49:d1:a4:
93:3b:71:9e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 13:14:03 2025 by rpki-client