Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/93H-M2YyFdByF3_m4UTdVNG3rnA.roa
File: 93H-M2YyFdByF3_m4UTdVNG3rnA.roa (raw, json)
Hash identifier: NZdZDzcAYrRqjG7IML02jAFdaMVtT3noP2YHjNJwoR0=
Subject key identifier: F7:71:FE:33:66:32:15:D0:72:17:7F:E6:E1:44:DD:54:D1:B7:AE:70
Certificate issuer: /CN=e87ce7df23140c0005125a61aad721531e681f0e
Certificate serial: 0194228E21E738D685CC139FD82D5ECFE480
Authority key identifier: E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/93H-M2YyFdByF3_m4UTdVNG3rnA.roa
Signing time: Wed 01 Jan 2025 15:48:47 +0000
ROA not before: Wed 01 Jan 2025 15:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214390
IP address blocks: 45.112.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:21:e7:38:d6:85:cc:13:9f:d8:2d:5e:cf:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e87ce7df23140c0005125a61aad721531e681f0e
Validity
Not Before: Jan 1 15:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f771fe33663215d072177fe6e144dd54d1b7ae70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e1:e7:68:c2:55:8d:fe:e3:1f:1b:b1:67:38:
be:4d:b2:c7:93:c5:c7:ef:2d:2a:0f:6a:4a:b4:3b:
1f:44:e4:39:f5:88:c3:a2:28:3b:07:d4:f8:e7:0f:
ba:f2:c1:b7:e5:27:5e:06:3b:1d:c1:b2:10:42:39:
8a:99:21:e4:2e:6b:97:4b:d3:75:e1:4c:eb:10:2e:
cb:14:cd:53:75:3b:ab:e9:8e:f4:7d:b5:45:52:1b:
4c:98:0c:df:3e:59:47:59:4a:7d:58:9a:87:c4:96:
3c:a1:b1:85:c7:05:79:ca:3b:67:73:cd:36:6d:2f:
ae:53:e7:c1:5a:4d:d3:7e:18:87:d0:b3:f6:cf:a4:
34:ab:f0:61:4f:d5:49:74:35:58:02:20:61:92:14:
24:66:70:16:69:ae:18:f3:3b:cd:e6:40:21:a4:74:
0a:33:56:11:b5:84:a8:7e:da:29:e9:e2:be:22:e7:
ca:d3:19:42:01:aa:ab:34:dd:f7:ac:1c:1b:eb:1f:
1c:6b:81:8e:03:58:20:75:81:f3:30:6f:16:e3:a8:
ac:b6:a4:59:18:ea:6e:8e:0d:a2:f4:35:3f:5b:e0:
49:62:aa:54:21:2e:8c:3b:3a:c6:7c:3b:09:df:75:
ad:fa:79:85:78:e2:67:52:8a:26:36:1c:b6:3d:13:
8a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:71:FE:33:66:32:15:D0:72:17:7F:E6:E1:44:DD:54:D1:B7:AE:70
X509v3 Authority Key Identifier:
keyid:E8:7C:E7:DF:23:14:0C:00:05:12:5A:61:AA:D7:21:53:1E:68:1F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Hzn3yMUDAAFElphqtchUx5oHw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/93H-M2YyFdByF3_m4UTdVNG3rnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/776747-624a-494e-94b2-323d34defc8a/1/6Hzn3yMUDAAFElphqtchUx5oHw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.112.123.0/24
Signature Algorithm: sha256WithRSAEncryption
12:af:6d:cc:2d:b2:75:18:b7:c1:c2:0e:45:df:ac:eb:2d:68:
c4:79:d5:0e:ac:4a:78:6e:18:c5:0f:f4:57:8a:9c:95:0c:e0:
58:51:2e:5d:f7:08:39:aa:34:f8:37:88:99:7a:48:5e:9e:86:
38:75:14:42:0c:c7:0d:09:f3:b4:b2:84:6b:d8:d2:5b:55:7b:
77:c0:f9:b8:9c:fa:a9:67:d8:dd:90:db:44:46:1c:7f:68:06:
af:ee:fa:8d:0d:6d:f2:e3:69:8e:91:cf:44:ce:40:91:d8:87:
10:39:9d:1b:2a:90:ca:8b:dd:51:39:bc:45:cf:3b:c4:1d:bb:
86:56:92:9d:7f:52:16:b0:af:0f:55:d8:b7:d5:91:12:ad:b8:
ca:7b:84:61:c6:34:91:a3:18:11:10:20:69:b8:f3:dd:ca:0c:
89:93:28:f2:19:ec:db:70:86:87:c8:32:c2:2e:25:97:5a:ff:
37:c7:d1:33:67:38:b1:25:6e:12:c6:72:16:cf:18:e9:0e:c1:
c8:30:fc:1a:67:66:06:53:a7:de:49:fb:fe:53:fb:c8:25:bd:
eb:38:05:cc:23:f5:86:0d:9b:4d:64:93:20:ae:9d:3e:57:15:
a9:ce:79:1f:92:4c:02:46:b3:06:78:89:08:44:48:c3:44:5c:
56:96:e2:73
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijiHnONaFzBOf2C1ez+SAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4N2NlN2RmMjMxNDBjMDAwNTEyNWE2MWFhZDcyMTUzMWU2
ODFmMGUwHhcNMjUwMTAxMTU0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzcxZmUzMzY2MzIxNWQwNzIxNzdmZTZlMTQ0ZGQ1NGQxYjdhZTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4eHnaMJVjf7jHxuxZzi+TbLHk8XH
7y0qD2pKtDsfROQ59YjDoig7B9T45w+68sG35SdeBjsdwbIQQjmKmSHkLmuXS9N1
4UzrEC7LFM1TdTur6Y70fbVFUhtMmAzfPllHWUp9WJqHxJY8obGFxwV5yjtnc802
bS+uU+fBWk3TfhiH0LP2z6Q0q/BhT9VJdDVYAiBhkhQkZnAWaa4Y8zvN5kAhpHQK
M1YRtYSoftop6eK+IufK0xlCAaqrNN33rBwb6x8ca4GOA1ggdYHzMG8W46istqRZ
GOpujg2i9DU/W+BJYqpUIS6MOzrGfDsJ33Wt+nmFeOJnUoomNhy2PROKhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPdx/jNmMhXQchd/5uFE3VTRt65wMB8GA1UdIwQY
MBaAFOh8598jFAwABRJaYarXIVMeaB8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC83NzY3NDctNjI0YS00OTRlLTk0YjIt
MzIzZDM0ZGVmYzhhLzEvOTNILU0yWXlGZEJ5RjNfbTRVVGRWTkczcm5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NC83NzY3NDctNjI0YS00OTRlLTk0YjItMzIzZDM0ZGVmYzhh
LzEvNkh6bjN5TVVEQUFGRWxwaHF0Y2hVeDVvSHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALXB7MA0G
CSqGSIb3DQEBCwUAA4IBAQASr23MLbJ1GLfBwg5F36zrLWjEedUOrEp4bhjFD/RX
ipyVDOBYUS5d9wg5qjT4N4iZekhenoY4dRRCDMcNCfO0soRr2NJbVXt3wPm4nPqp
Z9jdkNtERhx/aAav7vqNDW3y42mOkc9EzkCR2IcQOZ0bKpDKi91RObxFzzvEHbuG
VpKdf1IWsK8PVdi31ZESrbjKe4RhxjSRoxgRECBpuPPdygyJkyjyGezbcIaHyDLC
LiWXWv83x9EzZzixJW4SxnIWzxjpDsHIMPwaZ2YGU6feSfv+U/vIJb3rOAXMI/WG
DZtNZJMgrp0+VxWpznkfkkwCRrMGeIkIREjDRFxWluJz
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:12 2025 by rpki-client