Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1IJVf_pWhMDqW38_OHR7HJmaKYU.roa
File: 1IJVf_pWhMDqW38_OHR7HJmaKYU.roa (raw, json)
Hash identifier: UChXZCre2qaeBccYWfNOBYSBoP9XAWDtN0dBvmfIGGM=
Subject key identifier: D4:82:55:7F:FA:56:84:C0:EA:5B:7F:3F:38:74:7B:1C:99:9A:29:85
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6C0A67620504D8FFC985C7415C0AC
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1IJVf_pWhMDqW38_OHR7HJmaKYU.roa
Signing time: Wed 01 Jan 2025 21:47:43 +0000
ROA not before: Wed 01 Jan 2025 21:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56913
IP address blocks: 93.113.177.0/24 maxlen: 24
93.113.178.0/24 maxlen: 24
93.113.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Apr 2025 18:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c0:a6:76:20:50:4d:8f:fc:98:5c:74:15:c0:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d482557ffa5684c0ea5b7f3f38747b1c999a2985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:27:15:de:9c:f6:64:2e:58:be:2f:3f:4b:84:
e1:03:e4:57:98:92:3a:17:a3:02:63:65:41:21:a9:
9c:a6:48:04:14:4a:48:51:fd:9e:30:36:8b:93:2f:
0a:4c:26:7e:8c:d7:a7:40:bb:13:bd:c3:55:07:1c:
14:54:20:01:ce:2b:33:0a:ae:fb:34:8b:a9:a2:9d:
09:1b:16:80:56:90:f6:37:1f:56:dc:d6:35:71:72:
42:2f:53:ff:7f:4a:36:5a:c4:ba:70:58:92:76:61:
21:5b:ba:86:6c:71:90:ae:8f:e5:44:0c:5a:88:cb:
92:b5:f7:9c:20:00:00:d1:ae:1d:95:32:42:a4:03:
8f:55:fe:9f:8a:07:f0:9d:7b:4b:f2:f1:1e:e5:fa:
ec:b6:f7:8b:c5:db:d7:33:ec:43:41:b1:1e:35:bc:
b7:7b:56:8a:f7:5c:d2:63:a4:00:56:26:17:2d:41:
e5:96:ad:25:aa:0c:a4:22:80:de:87:f2:bf:64:11:
5a:71:69:22:ec:c0:f3:0a:d8:09:78:d2:f0:5d:20:
70:71:79:55:9b:f1:41:a0:18:ca:bd:1b:22:13:56:
d3:82:c6:49:ff:38:ec:99:df:b5:ba:81:7c:1a:75:
f8:51:56:b3:a8:59:94:e5:97:58:91:7f:c0:47:c8:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:82:55:7F:FA:56:84:C0:EA:5B:7F:3F:38:74:7B:1C:99:9A:29:85
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/1IJVf_pWhMDqW38_OHR7HJmaKYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.177.0-93.113.179.255
Signature Algorithm: sha256WithRSAEncryption
80:7f:65:60:eb:5f:a1:32:0b:86:e2:a8:d8:70:a3:f9:a1:62:
6a:48:89:04:81:0f:94:b7:c2:5f:81:ed:04:79:df:ad:65:49:
5f:f0:38:15:b2:1f:dd:0a:8e:61:4c:e6:af:dd:6c:36:b1:c9:
72:8f:11:8d:f7:f7:c7:23:61:7b:c7:da:cf:f6:30:a8:3f:bf:
ad:bb:80:62:8b:dd:29:0f:e8:b0:2c:a4:5c:e2:c0:7d:fc:0d:
a4:72:06:91:9a:d1:55:82:db:fd:cd:75:6c:0c:a3:f6:84:d9:
79:51:e5:a8:a3:83:27:39:27:37:ad:84:05:6f:db:eb:f5:bb:
90:26:9d:2a:9c:c8:9d:d1:cf:c1:05:09:05:b7:8e:4c:27:ec:
53:16:cf:2a:5a:0e:09:78:b1:22:ea:d5:46:d9:5d:1b:50:f5:
fd:f2:e0:95:86:2d:b2:f0:e5:9e:64:f5:13:71:ed:2c:de:a4:
82:b8:b8:37:48:05:90:ac:8c:d4:a9:fc:0e:a3:f8:31:bc:1f:
21:0f:78:3a:5f:b6:83:10:6b:47:dd:7c:23:db:97:0e:11:b0:
d7:43:de:89:af:69:68:54:61:cf:5f:89:b6:ea:57:cf:71:31:
f4:c3:05:06:8e:1c:b9:18:e0:fb:3b:ac:93:f9:75:3c:fa:a4:
89:3d:9f:35
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQj1sCmdiBQTY/8mFx0FcCsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMTAxMjE0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNDgyNTU3ZmZhNTY4NGMwZWE1YjdmM2YzODc0N2IxYzk5OWEyOTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ScV3pz2ZC5Yvi8/S4ThA+RXmJI6
F6MCY2VBIamcpkgEFEpIUf2eMDaLky8KTCZ+jNenQLsTvcNVBxwUVCABziszCq77
NIupop0JGxaAVpD2Nx9W3NY1cXJCL1P/f0o2WsS6cFiSdmEhW7qGbHGQro/lRAxa
iMuStfecIAAA0a4dlTJCpAOPVf6figfwnXtL8vEe5frstveLxdvXM+xDQbEeNby3
e1aK91zSY6QAViYXLUHllq0lqgykIoDeh/K/ZBFacWki7MDzCtgJeNLwXSBwcXlV
m/FBoBjKvRsiE1bTgsZJ/zjsmd+1uoF8GnX4UVazqFmU5ZdYkX/AR8hpkwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNSCVX/6VoTA6lt/Pzh0exyZmimFMB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvMUlKVmZfcFdoTURxVzM4X09IUjdISm1hS1lVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBABdcbED
BAJdcbAwDQYJKoZIhvcNAQELBQADggEBAIB/ZWDrX6EyC4biqNhwo/mhYmpIiQSB
D5S3wl+B7QR5361lSV/wOBWyH90KjmFM5q/dbDaxyXKPEY3398cjYXvH2s/2MKg/
v627gGKL3SkP6LAspFziwH38DaRyBpGa0VWC2/3NdWwMo/aE2XlR5aijgyc5Jzet
hAVv2+v1u5AmnSqcyJ3Rz8EFCQW3jkwn7FMWzypaDgl4sSLq1UbZXRtQ9f3y4JWG
LbLw5Z5k9RNx7SzepIK4uDdIBZCsjNSp/A6j+DG8HyEPeDpftoMQa0fdfCPblw4R
sNdD3omvaWhUYc9fibbqV89xMfTDBQaOHLkY4Ps7rJP5dTz6pIk9nzU=
-----END CERTIFICATE-----
Generated at Thu Apr 10 04:15:54 2025 by rpki-client