Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa
File: d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa (raw, json)
Hash identifier: /7Xb7BgMP/VziPk4Q/U+uMUdmAyttT7O93i5sL6urDU=
Subject key identifier: 77:9C:18:37:8B:2A:62:68:0A:28:A5:0D:F5:7F:BC:8E:9F:4F:29:3B
Certificate issuer: /CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Certificate serial: 019425214657CDC6295953C8E031946C8463
Authority key identifier: B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa
Signing time: Thu 02 Jan 2025 03:48:45 +0000
ROA not before: Thu 02 Jan 2025 03:48:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210538
IP address blocks: 93.177.102.0/24 maxlen: 24
193.164.4.0/24 maxlen: 24
193.164.6.0/24 maxlen: 24
193.164.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:46:57:cd:c6:29:59:53:c8:e0:31:94:6c:84:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0b5a80a7106e0a4b8545c8150bb72c699fcc9a0
Validity
Not Before: Jan 2 03:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=779c18378b2a62680a28a50df57fbc8e9f4f293b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:64:bb:19:75:26:d9:f8:b3:d5:ab:fb:a1:27:
2d:1b:74:d8:3f:d0:52:a4:63:f0:c8:4e:24:14:2c:
b7:5d:bd:a2:76:27:3b:f5:aa:c5:0d:cb:4f:c8:d1:
ea:06:95:e6:03:7a:56:07:7b:5f:0c:bc:25:3e:85:
b4:65:5c:ff:da:7f:71:cc:25:1f:83:c5:db:3d:d5:
e4:cf:ce:17:a1:9b:21:7d:d0:41:71:f8:d5:ff:40:
f2:53:de:5f:1b:68:60:f0:ee:2e:c8:1b:de:8d:ed:
50:d9:4c:d1:3c:d6:fc:3a:76:b9:82:44:05:a7:0d:
4e:35:d2:75:bc:8d:33:f9:60:b3:99:d8:37:5d:9f:
02:eb:8c:09:d2:31:82:ab:89:f0:98:29:03:5a:79:
02:01:ce:9c:0b:a3:18:97:cb:1f:73:df:55:24:0f:
c2:03:6d:1c:1f:a4:ca:cc:61:14:51:dc:d4:3a:82:
be:49:6a:b0:4c:4e:65:59:aa:97:8f:8a:83:0f:ca:
58:04:62:31:03:3c:75:02:36:81:04:cd:cc:c2:b2:
82:59:bd:28:bf:fc:b0:ed:bf:2b:50:cb:e3:f2:c1:
7a:2b:eb:83:2b:a9:bb:2e:66:9a:b7:06:0e:ca:0e:
c2:79:76:55:5c:ea:38:3d:86:3d:32:ea:ab:f3:85:
09:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9C:18:37:8B:2A:62:68:0A:28:A5:0D:F5:7F:BC:8E:9F:4F:29:3B
X509v3 Authority Key Identifier:
keyid:B0:B5:A8:0A:71:06:E0:A4:B8:54:5C:81:50:BB:72:C6:99:FC:C9:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sLWoCnEG4KS4VFyBULtyxpn8yaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/d5wYN4sqYmgKKKUN9X-8jp9PKTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/f153dc-cbfb-4a4f-80d2-745e08fe58c6/1/sLWoCnEG4KS4VFyBULtyxpn8yaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.177.102.0/24
193.164.4.0/24
193.164.6.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:2b:8b:2b:04:e7:0a:43:0b:ff:2e:8d:34:70:d1:7d:20:bb:
46:f4:c1:9d:e1:3b:fc:04:6e:f4:9d:36:82:39:23:1a:ae:32:
3e:0e:80:ac:5b:a0:cc:ee:46:60:73:00:49:9b:bf:53:c3:55:
4a:13:a1:bc:bd:0c:51:e3:20:0c:74:6b:6f:c2:b4:78:75:ec:
cf:2d:22:bc:57:78:81:8f:7d:55:9b:dc:29:63:3c:ea:9d:34:
e1:e3:ed:96:c7:5b:6e:3d:db:30:97:87:18:a8:4b:bc:05:d8:
71:cf:ed:14:77:6d:fc:66:01:56:e2:73:fe:d2:21:d0:6b:6e:
2d:6c:b9:33:dc:4a:a5:d6:71:91:1c:58:d1:4e:89:32:0c:7e:
cf:66:a1:59:29:bf:b1:a4:bb:8e:d7:69:9e:45:b9:84:a7:33:
c9:96:2c:0e:23:c1:52:d2:ec:c0:19:2a:9e:88:19:2c:66:35:
bd:4e:00:8f:fc:06:d2:c6:c1:28:9a:f0:37:bb:9c:14:58:ca:
eb:f5:03:63:4e:21:cd:14:db:9f:99:16:ee:84:28:cf:7a:0e:
df:80:94:9f:be:32:84:4f:f3:c9:56:ba:7d:66:0f:75:96:31:
7c:43:32:06:cf:70:28:27:9b:30:df:6a:2c:da:30:e2:9f:ed:
95:1f:c5:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:34:31 2025 by rpki-client