Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/fE9GzrH3d-6Th3wBzYY1G9LbRew.roa
File: fE9GzrH3d-6Th3wBzYY1G9LbRew.roa (raw, json)
Hash identifier: xyXKNFQngeKokd5hS0djUT+QlJzpKydn7zNDkVQlZFI=
Subject key identifier: 7C:4F:46:CE:B1:F7:77:EE:93:87:7C:01:CD:86:35:1B:D2:DB:45:EC
Certificate issuer: /CN=7331dbed0897cce85c148371b47cc80782e5e72b
Certificate serial: 019446FD163D74BFD00B76138D75F836F615
Authority key identifier: 73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/fE9GzrH3d-6Th3wBzYY1G9LbRew.roa
Signing time: Wed 08 Jan 2025 17:36:18 +0000
ROA not before: Wed 08 Jan 2025 17:36:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16789
IP address blocks: 93.93.203.0/24 maxlen: 24
94.127.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.mft
rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:46:fd:16:3d:74:bf:d0:0b:76:13:8d:75:f8:36:f6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7331dbed0897cce85c148371b47cc80782e5e72b
Validity
Not Before: Jan 8 17:36:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c4f46ceb1f777ee93877c01cd86351bd2db45ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:15:cd:a1:fc:9d:d9:e2:07:f7:da:c2:29:f5:
23:89:68:60:fa:fe:87:5b:af:dc:b2:71:38:75:be:
b2:d9:6f:3c:35:ae:5b:fd:0f:c3:ef:c9:20:3d:cb:
03:9b:22:f4:e4:ea:1a:a9:f6:ad:52:1b:c9:a4:db:
b4:98:5d:2f:4e:26:6e:bf:da:92:a1:f3:35:1f:3c:
e4:a2:16:24:22:0e:35:00:06:54:66:5f:8c:54:01:
09:36:db:07:90:70:57:a4:0f:77:98:4a:a6:1e:58:
67:14:42:91:38:79:25:db:75:da:4f:a6:9c:75:79:
d9:c2:88:b1:1a:7e:b3:b3:7f:9e:5e:fe:1f:7f:60:
08:0b:52:dc:80:4d:82:6d:95:48:e2:81:9a:0c:e0:
65:ba:87:c3:61:83:59:2e:62:d8:a5:45:84:6a:c2:
ba:54:34:da:0f:af:05:f2:54:2f:63:1c:1d:33:72:
25:42:36:b7:4f:63:97:3c:b5:bc:6a:b6:a1:3e:55:
a5:10:95:35:13:9e:c4:f9:28:87:b5:90:3f:3e:d0:
56:c9:4b:24:f9:d7:ea:e3:bf:9a:6b:ee:91:90:d6:
77:e5:c4:25:78:39:21:3d:6c:3a:91:19:7d:8c:de:
65:2c:b0:9b:23:62:2b:cd:8e:a6:e8:49:89:4e:c7:
29:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:4F:46:CE:B1:F7:77:EE:93:87:7C:01:CD:86:35:1B:D2:DB:45:EC
X509v3 Authority Key Identifier:
keyid:73:31:DB:ED:08:97:CC:E8:5C:14:83:71:B4:7C:C8:07:82:E5:E7:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/czHb7QiXzOhcFINxtHzIB4Ll5ys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/fE9GzrH3d-6Th3wBzYY1G9LbRew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c5f0c3-22e5-4801-90fb-0465072e41a3/1/czHb7QiXzOhcFINxtHzIB4Ll5ys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.203.0/24
94.127.118.0/23
Signature Algorithm: sha256WithRSAEncryption
9e:30:69:30:ee:dd:d1:1b:b5:07:91:46:7d:98:1a:cf:c0:79:
22:24:c2:e6:70:cc:e9:69:3a:1a:83:25:e9:c1:24:26:28:f8:
2b:a9:6c:85:67:50:f0:2e:71:3a:61:45:1e:7a:aa:11:10:d3:
ec:df:77:4c:91:bf:42:c2:09:dd:d5:97:65:c8:25:1d:77:33:
a0:ea:9f:cf:cc:e5:56:f8:df:51:af:18:ee:de:35:11:94:6d:
56:18:96:2d:a6:86:22:5e:ca:5f:ba:8b:3d:4f:cf:6a:52:f9:
8f:0c:29:bb:7a:f5:fb:4a:49:cc:54:f1:d5:30:3b:d0:eb:f2:
95:e1:6f:97:f7:d4:dd:c1:7d:2a:b0:15:a6:91:6e:2b:a9:9e:
84:6c:e8:06:d5:8b:d7:f3:9c:96:25:87:d3:aa:7e:33:92:9b:
a1:60:10:90:dc:a4:a5:10:17:9c:e1:04:7c:88:0d:58:5c:8e:
43:54:cc:e5:87:0f:96:32:48:08:3f:51:38:a2:b6:77:57:df:
66:9b:cd:9c:7e:a6:cc:4c:bb:91:7f:00:56:68:87:ee:12:52:
8f:81:c9:f6:d2:b5:0c:8a:62:e9:0f:6c:d7:3d:76:5c:80:0d:
93:30:b8:c8:49:51:64:91:f8:af:8e:c3:cb:a1:ef:02:ca:17:
ad:8d:6b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:38 2025 by rpki-client