Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/TNbxUiFA_umQvykwt3Iu_LF7CJg.roa
File: TNbxUiFA_umQvykwt3Iu_LF7CJg.roa (raw, json)
Hash identifier: NXX5izWtwfV8obTckhCDRFJla3tNI4Ymq5sn2Ta0SdQ=
Subject key identifier: 4C:D6:F1:52:21:40:FE:E9:90:BF:29:30:B7:72:2E:FC:B1:7B:08:98
Certificate issuer: /CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Certificate serial: 019428257E2C5FE818346B27B13D905DEE91
Authority key identifier: 88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/TNbxUiFA_umQvykwt3Iu_LF7CJg.roa
Signing time: Thu 02 Jan 2025 17:52:13 +0000
ROA not before: Thu 02 Jan 2025 17:52:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12859
IP address blocks: 93.175.159.0/24 maxlen: 24
2001:67c:2d7c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.mft
rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:7e:2c:5f:e8:18:34:6b:27:b1:3d:90:5d:ee:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8817aafec61c3a6b024b6a9f54ffb764ca3df922
Validity
Not Before: Jan 2 17:52:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4cd6f1522140fee990bf2930b7722efcb17b0898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ff:cb:52:e7:3c:d5:6a:24:58:d2:cc:f1:9c:
34:8f:e9:2a:82:50:93:70:35:9a:51:9b:45:43:45:
29:f1:7b:78:0a:f8:50:00:ea:48:88:e1:97:2e:60:
48:96:41:63:ce:c3:db:b6:97:90:d8:1c:08:1e:8a:
06:b3:5b:c0:3c:ae:d3:0b:22:c0:db:df:b9:27:3f:
6c:23:45:56:4f:4e:45:c5:3f:dc:99:22:c4:2b:05:
ed:23:92:d3:ce:e5:ee:12:3c:56:1b:b8:68:25:02:
23:5b:63:9a:f7:c4:b3:27:c3:db:78:30:cc:09:9f:
d7:eb:8a:f5:6d:03:7d:85:4d:7b:1b:46:7e:f7:94:
d7:9c:ac:3d:80:67:e8:7c:72:88:ed:67:fd:c2:52:
a4:89:27:c8:fa:dc:61:28:ef:5e:29:02:42:a1:08:
4a:48:6d:5c:b3:54:46:7a:1b:79:63:19:a5:9e:bc:
dc:eb:19:6e:eb:a1:b9:71:60:51:6a:f0:6f:56:e4:
70:f6:5d:0d:9e:51:97:e0:f0:90:65:1e:cb:db:e2:
73:5d:9e:31:d0:5e:bc:4b:8a:90:13:c2:d4:f1:f8:
15:be:5e:f8:ad:9e:23:ce:b6:c2:bd:67:5b:fc:47:
b6:17:6c:49:8e:75:a6:b4:93:86:52:5d:9a:c2:15:
68:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D6:F1:52:21:40:FE:E9:90:BF:29:30:B7:72:2E:FC:B1:7B:08:98
X509v3 Authority Key Identifier:
keyid:88:17:AA:FE:C6:1C:3A:6B:02:4B:6A:9F:54:FF:B7:64:CA:3D:F9:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/TNbxUiFA_umQvykwt3Iu_LF7CJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/fe2d72-c2dd-46c1-9429-e66369649411/1/iBeq_sYcOmsCS2qfVP-3ZMo9-SI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.175.159.0/24
IPv6:
2001:67c:2d7c::/48
Signature Algorithm: sha256WithRSAEncryption
0e:aa:f0:57:5b:0b:07:21:37:cd:95:89:11:77:ae:01:69:31:
8e:27:6b:3a:80:96:2c:06:5e:c7:05:4f:a3:a2:5f:ab:24:27:
23:7f:bb:dc:ec:c8:4c:d0:50:03:64:ac:52:84:df:17:cc:da:
3b:e5:ff:94:e1:a5:a4:9b:82:f7:47:ff:f6:c7:ed:7e:ab:df:
18:5e:e1:a8:95:07:f9:f7:ae:e3:ed:fe:85:23:c5:57:7b:0c:
3a:11:e4:d1:41:78:98:89:a0:93:f6:45:f6:86:b0:c4:14:59:
27:be:9e:35:7f:6d:51:e3:dd:4a:2d:33:50:81:cc:b6:a4:7c:
71:94:87:92:79:f3:54:42:c4:dd:e4:1b:66:04:cf:56:27:a6:
70:d1:04:9f:39:6d:74:f9:37:03:5e:6c:66:31:11:f8:d1:35:
66:4d:fd:ec:eb:b6:29:f8:06:68:02:8a:fc:38:7b:6a:ed:cd:
77:f7:f9:6a:57:15:25:63:fe:9f:99:45:59:37:79:9a:96:2d:
f2:48:9d:84:f1:f9:7e:87:a6:a0:dd:64:78:52:5f:ec:60:59:
3e:f7:30:4b:05:ac:df:c2:7e:fd:cf:0e:38:ae:01:31:d9:03:
e4:f8:9f:d7:cb:b9:07:3b:e7:0c:8e:e6:54:20:9f:e5:60:48:
f3:ee:c3:4f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQoJX4sX+gYNGsnsT2QXe6RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4MTdhYWZlYzYxYzNhNmIwMjRiNmE5ZjU0ZmZiNzY0Y2Ez
ZGY5MjIwHhcNMjUwMTAyMTc1MjEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Y2Q2ZjE1MjIxNDBmZWU5OTBiZjI5MzBiNzcyMmVmY2IxN2IwODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1//LUuc81WokWNLM8Zw0j+kqglCT
cDWaUZtFQ0Up8Xt4CvhQAOpIiOGXLmBIlkFjzsPbtpeQ2BwIHooGs1vAPK7TCyLA
29+5Jz9sI0VWT05FxT/cmSLEKwXtI5LTzuXuEjxWG7hoJQIjW2Oa98SzJ8PbeDDM
CZ/X64r1bQN9hU17G0Z+95TXnKw9gGfofHKI7Wf9wlKkiSfI+txhKO9eKQJCoQhK
SG1cs1RGeht5Yxmlnrzc6xlu66G5cWBRavBvVuRw9l0NnlGX4PCQZR7L2+JzXZ4x
0F68S4qQE8LU8fgVvl74rZ4jzrbCvWdb/Ee2F2xJjnWmtJOGUl2awhVorQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEzW8VIhQP7pkL8pMLdyLvyxewiYMB8GA1UdIwQY
MBaAFIgXqv7GHDprAktqn1T/t2TKPfkiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0Mjkt
ZTY2MzY5NjQ5NDExLzEvVE5ieFVpRkFfdW1Rdnlrd3QzSXVfTEY3Q0pnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9mZTJkNzItYzJkZC00NmMxLTk0MjktZTY2MzY5NjQ5NDEx
LzEvaUJlcV9zWWNPbXNDUzJxZlZQLTNaTW85LVNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAXa+fMA8E
AgACMAkDBwAgAQZ8LXwwDQYJKoZIhvcNAQELBQADggEBAA6q8FdbCwchN82ViRF3
rgFpMY4nazqAliwGXscFT6OiX6skJyN/u9zsyEzQUANkrFKE3xfM2jvl/5ThpaSb
gvdH//bH7X6r3xhe4aiVB/n3ruPt/oUjxVd7DDoR5NFBeJiJoJP2RfaGsMQUWSe+
njV/bVHj3UotM1CBzLakfHGUh5J581RCxN3kG2YEz1YnpnDRBJ85bXT5NwNebGYx
EfjRNWZN/ezrtin4BmgCivw4e2rtzXf3+WpXFSVj/p+ZRVk3eZqWLfJInYTx+X6H
pqDdZHhSX+xgWT73MEsFrN/Cfv3PDjiuATHZA+T4n9fLuQc75wyO5lQgn+VgSPPu
w08=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:40:51 2025 by rpki-client