Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/rK0Eq72dWOPledK-6OMEs2yx5ek.roa
File: rK0Eq72dWOPledK-6OMEs2yx5ek.roa (raw, json)
Hash identifier: rOpR3gnbXLhRTIo2YsdDPSSB6zzASfGvwqQ1BSGE8Ew=
Subject key identifier: AC:AD:04:AB:BD:9D:58:E3:E5:79:D2:BE:E8:E3:04:B3:6C:B1:E5:E9
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 019421B26A357A5A939252BE46C7D58BD504
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/rK0Eq72dWOPledK-6OMEs2yx5ek.roa
Signing time: Wed 01 Jan 2025 11:48:48 +0000
ROA not before: Wed 01 Jan 2025 11:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206337
IP address blocks: 188.93.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 09:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:6a:35:7a:5a:93:92:52:be:46:c7:d5:8b:d5:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acad04abbd9d58e3e579d2bee8e304b36cb1e5e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:55:f3:bf:0c:dd:ca:95:a1:89:7a:6d:98:8e:
95:15:b9:bb:df:71:d0:c0:d2:5f:dd:12:70:ed:d5:
d5:f0:81:5a:6d:f0:7d:a2:77:a4:89:ef:a9:a4:5c:
27:aa:04:94:20:85:f2:f5:14:9a:b0:fd:c5:16:19:
9d:a4:c5:42:b9:72:1b:9f:9b:f9:f1:39:e8:a4:d7:
b1:4e:02:c2:d5:f6:82:0b:27:ff:a9:dd:38:4f:41:
5a:a4:47:c0:a0:0d:98:f3:c8:d0:e1:b1:9a:49:c9:
2f:49:9d:4e:8f:8c:14:2e:54:5a:cc:6e:97:76:0a:
8a:7c:75:09:bf:fb:9a:04:93:d0:68:18:41:10:f8:
0e:0d:cd:6a:54:1c:ed:8a:fd:ff:f6:27:8c:01:d0:
34:13:e0:fa:3b:d2:ab:05:48:95:ca:b9:fd:5d:84:
48:7d:42:03:68:0c:7b:8b:15:6e:13:bd:5a:c5:35:
d9:90:51:b0:8f:17:0a:f1:81:7a:a8:53:11:b7:c5:
8a:3b:d6:ef:93:fa:31:fe:8f:fa:d8:b0:11:e3:76:
d4:38:cb:9d:c4:d5:c2:61:11:61:f5:24:91:00:31:
5e:c1:af:aa:ca:83:9f:7f:dd:9b:6b:53:65:1e:ff:
e3:6b:01:47:4c:0f:54:75:9d:71:d4:ff:6a:ef:bd:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:AD:04:AB:BD:9D:58:E3:E5:79:D2:BE:E8:E3:04:B3:6C:B1:E5:E9
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/rK0Eq72dWOPledK-6OMEs2yx5ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.106.0/24
Signature Algorithm: sha256WithRSAEncryption
21:e0:e1:ec:fe:74:d9:0e:56:7d:c1:f6:df:59:d3:89:2d:2d:
bf:49:1e:09:33:8d:fe:15:de:da:ed:81:67:b7:e3:b1:9c:82:
0c:52:f3:aa:68:3b:d9:89:23:0f:6c:ed:7e:70:47:e1:ba:5c:
53:42:dd:fb:98:8e:be:72:22:d8:8b:8d:36:3a:cf:5f:e8:c5:
a4:7e:ec:3f:41:31:dc:94:66:e4:74:b2:11:32:99:23:58:45:
ae:f3:a2:4e:52:1b:19:67:8c:f6:83:37:6d:29:83:9f:86:cc:
b2:e4:a2:bd:ba:fa:c3:68:81:41:37:7a:85:ff:4a:c1:0b:07:
a6:3a:64:fd:c5:ee:25:73:0b:6a:56:96:ca:59:71:e1:e0:5e:
ad:5b:a2:db:e4:b2:66:21:ee:47:ab:de:30:73:26:71:45:7f:
b5:c2:83:37:6e:66:b6:d6:c6:34:a0:1d:69:3c:28:41:a7:ed:
34:52:32:63:32:55:f1:5e:92:1a:80:12:4c:35:2e:f9:ae:8d:
4d:cd:12:c1:88:b8:23:27:31:08:a4:83:c3:59:a9:94:7c:5f:
3c:26:25:2b:c3:fb:8b:df:71:b9:c4:c7:f6:d9:6c:18:ba:a6:
35:de:11:78:d9:29:1a:be:89:d0:00:7e:a9:a2:14:66:42:f6:
c0:9d:76:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 18:32:50 2025 by rpki-client