Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/5h3t2pWJDqUvxhvyunvRgkoYtr0.roa
File: 5h3t2pWJDqUvxhvyunvRgkoYtr0.roa (raw, json)
Hash identifier: zlmE38toKgsTchslrcJAQYJh+knYE7y1w/+qPx3IIbY=
Subject key identifier: E6:1D:ED:DA:95:89:0E:A5:2F:C6:1B:F2:BA:7B:D1:82:4A:18:B6:BD
Certificate issuer: /CN=8353accb94e10cf8c2c29679067ee39099f404d3
Certificate serial: 01941FFA676DBC6C1248902A09983D039F18
Authority key identifier: 83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/5h3t2pWJDqUvxhvyunvRgkoYtr0.roa
Signing time: Wed 01 Jan 2025 03:48:11 +0000
ROA not before: Wed 01 Jan 2025 03:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206854
IP address blocks: 93.126.16.0/24 maxlen: 24
93.126.30.0/24 maxlen: 24
93.126.52.0/24 maxlen: 24
93.126.53.0/24 maxlen: 24
93.126.55.0/24 maxlen: 24
193.178.201.0/24 maxlen: 24
193.178.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Apr 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:67:6d:bc:6c:12:48:90:2a:09:98:3d:03:9f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8353accb94e10cf8c2c29679067ee39099f404d3
Validity
Not Before: Jan 1 03:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e61dedda95890ea52fc61bf2ba7bd1824a18b6bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2d:09:16:8a:ff:67:4d:39:ed:28:b9:64:bd:
36:18:11:99:56:70:60:de:41:75:36:bd:d1:55:7c:
1d:7a:35:a3:52:f5:28:69:50:7a:fc:36:f7:97:b7:
f2:ca:b7:5f:de:5f:92:c9:f7:e4:a7:35:54:e0:18:
f6:40:6b:79:8b:4f:35:7b:07:a4:e3:44:a6:12:94:
d4:c6:3b:3e:05:8f:0c:c3:8a:5e:09:33:f9:f6:11:
68:c0:6a:09:df:ba:f5:d3:c6:38:fa:e3:dc:0e:96:
84:f2:9f:7d:16:51:c9:aa:f7:b5:8f:e0:c9:4a:73:
84:f6:68:de:05:58:9e:38:da:a2:7d:c0:83:59:68:
ca:a4:33:5d:10:ab:ff:30:a5:0c:9c:62:9d:44:38:
cb:79:02:f8:74:b3:de:3f:45:79:2f:88:d0:df:2d:
7c:23:d7:e3:f9:67:cb:67:91:c1:88:5e:d8:27:4d:
2a:ab:b6:28:76:40:ed:02:07:d4:90:d0:3c:70:d7:
e3:c9:2f:db:1e:03:34:e0:c6:1b:46:10:81:de:31:
36:56:d9:24:c6:a7:f2:88:0c:4a:71:f8:7a:14:31:
4a:78:38:8a:79:b1:e7:6d:80:e2:d4:26:f6:94:e8:
d0:7d:58:d2:68:44:39:70:ce:86:0c:43:12:fb:5b:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:1D:ED:DA:95:89:0E:A5:2F:C6:1B:F2:BA:7B:D1:82:4A:18:B6:BD
X509v3 Authority Key Identifier:
keyid:83:53:AC:CB:94:E1:0C:F8:C2:C2:96:79:06:7E:E3:90:99:F4:04:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/5h3t2pWJDqUvxhvyunvRgkoYtr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/993772-5fba-40bf-b721-6c3950194370/1/g1Osy5ThDPjCwpZ5Bn7jkJn0BNM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.126.16.0/24
93.126.30.0/24
93.126.52.0/23
93.126.55.0/24
193.178.201.0-193.178.202.255
Signature Algorithm: sha256WithRSAEncryption
57:a6:60:09:4c:42:30:57:93:d0:8c:6c:63:7b:ef:24:a4:38:
85:76:2c:37:81:15:a4:ae:27:a0:7d:46:8f:c6:8e:10:95:3f:
af:e5:1c:6b:a2:a2:a2:07:1a:d7:1d:6f:df:b5:92:4c:3e:bc:
d9:b7:69:a6:14:e1:a3:9c:d2:47:97:98:b0:93:87:16:48:d7:
ac:ec:d1:1d:a1:e8:49:a6:ef:79:1d:6e:42:72:45:0d:f8:7a:
65:7b:b2:47:ad:d8:75:81:a2:a3:8b:94:72:84:e3:ee:de:e3:
57:8d:cc:23:f4:4f:09:d0:74:cc:d9:9c:e8:78:83:3c:0f:ce:
bf:bc:f3:a6:54:d4:33:93:96:9d:9d:8c:31:96:ad:16:0a:34:
d1:ce:b7:88:63:09:82:d1:a5:af:4b:8a:f1:b4:5c:72:09:6e:
56:62:5f:fb:8b:d4:3f:8d:77:f0:ab:f3:f7:d4:08:56:2f:6d:
f4:22:db:a0:3d:68:5e:96:fd:4d:21:2f:fd:5f:8f:42:23:71:
b5:60:51:52:da:67:bc:96:86:40:37:bc:55:98:23:f5:d5:73:
05:cc:8b:85:f2:e2:84:a3:4c:a9:4d:eb:a1:05:ed:ec:ea:e1:
00:78:40:31:2e:75:7a:e8:fd:44:18:22:be:cb:5a:7d:e0:64:
0e:bc:2b:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 14:08:19 2025 by rpki-client