Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2XNX-E8xw0yV0q1zJtr_ODrxuPs.roa
File: 2XNX-E8xw0yV0q1zJtr_ODrxuPs.roa (raw, json)
Hash identifier: /R9mxTLiBDYFSrvq1l37O7HnlJ4e1GAqBIez62ZWIbA=
Subject key identifier: D9:73:57:F8:4F:31:C3:4C:95:D2:AD:73:26:DA:FF:38:3A:F1:B8:FB
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019423D6C4DC3F6C684C5EB6539B0168E629
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2XNX-E8xw0yV0q1zJtr_ODrxuPs.roa
Signing time: Wed 01 Jan 2025 21:47:45 +0000
ROA not before: Wed 01 Jan 2025 21:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138195
IP address blocks: 93.113.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c4:dc:3f:6c:68:4c:5e:b6:53:9b:01:68:e6:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jan 1 21:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d97357f84f31c34c95d2ad7326daff383af1b8fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:33:86:ba:09:e8:71:7b:f1:4d:10:90:4c:cc:
23:bd:66:66:00:e1:f3:3f:63:d6:6b:58:97:52:5d:
e5:2e:0e:e7:55:f9:84:49:f9:75:c2:9c:92:10:5f:
97:fd:f6:20:36:3c:b7:ab:2f:c4:f9:29:6b:0b:54:
2d:8d:40:b6:e2:ea:61:d5:37:21:16:6e:51:34:8c:
09:52:41:a8:d4:d3:20:c3:58:e8:09:bd:78:73:06:
77:be:e9:c0:21:ff:60:f8:3c:45:66:f9:01:f9:94:
f6:a1:ae:8c:f0:3e:01:50:c9:4b:70:e0:de:7c:2d:
33:01:44:73:5f:c0:c7:36:68:81:a2:4d:f1:17:55:
5f:6c:e7:28:50:b5:5e:ce:c4:46:d6:ce:60:66:fa:
9d:06:4c:99:be:0a:7f:2b:62:45:e7:95:a3:63:68:
e4:80:21:ea:ce:25:2c:af:a1:96:68:b5:aa:69:86:
5d:3d:9e:10:71:22:50:cb:cc:d4:f6:7d:44:37:8d:
9c:93:31:82:af:3b:9e:01:a2:e6:bb:c6:4f:40:df:
26:49:cd:82:e3:b0:d1:29:6f:da:77:46:92:bc:71:
3f:b7:64:04:65:50:03:43:4c:a9:f0:0c:80:5e:08:
17:56:f6:c6:d8:b0:4c:b1:dd:97:cf:0a:aa:a5:f1:
15:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:73:57:F8:4F:31:C3:4C:95:D2:AD:73:26:DA:FF:38:3A:F1:B8:FB
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/2XNX-E8xw0yV0q1zJtr_ODrxuPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.177.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:74:8d:36:8c:67:d9:11:8d:fb:a9:d3:50:4f:e8:3d:fb:76:
ce:e8:e5:b8:68:b7:d3:cf:d8:9d:61:92:a3:6a:f1:4f:00:d6:
7e:a0:19:44:7f:85:13:54:8e:2c:36:53:92:ba:fd:94:a3:81:
84:ea:a7:7e:d9:72:2f:fe:ea:ad:e8:45:fc:7e:32:f7:93:26:
cb:8f:21:2f:a7:c2:d4:51:2f:c3:32:36:fc:f2:65:6f:3a:2a:
08:12:c1:21:d9:87:c1:44:5f:4c:11:6e:dd:bb:f5:4d:3c:18:
c1:7e:65:5d:a4:86:5f:f2:cf:4d:29:13:4a:92:b0:dc:9c:57:
24:6d:11:7d:5a:14:6c:db:6b:9e:90:f5:fc:bb:78:5c:ea:38:
46:7f:a1:f0:83:c2:6a:1a:73:61:b5:30:78:6a:29:c9:d0:79:
78:f2:38:39:77:63:06:ec:17:8a:c3:85:de:5e:c9:49:8f:ce:
d2:38:a9:23:36:74:5b:71:63:e5:d9:e5:17:cc:b4:71:b9:2a:
ff:67:e7:c1:7a:7b:e4:3c:f4:90:cb:99:0b:f3:31:b7:07:71:
ee:de:fd:7d:af:dc:a3:5f:7a:08:fe:0e:f4:3a:50:e6:5a:1e:
64:a0:01:11:ca:db:b3:e1:ae:bf:a7:8f:3a:cc:fa:a3:43:08:
22:1c:ae:8f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1sTcP2xoTF62U5sBaOYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxZDQ2ZTBlM2U4Y2FhYWVkNGE1MjliZDdkNzMwOGJkMWVm
MDFjMWQwHhcNMjUwMTAxMjE0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTczNTdmODRmMzFjMzRjOTVkMmFkNzMyNmRhZmYzODNhZjFiOGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDOGugnocXvxTRCQTMwjvWZmAOHz
P2PWa1iXUl3lLg7nVfmESfl1wpySEF+X/fYgNjy3qy/E+SlrC1QtjUC24uph1Tch
Fm5RNIwJUkGo1NMgw1joCb14cwZ3vunAIf9g+DxFZvkB+ZT2oa6M8D4BUMlLcODe
fC0zAURzX8DHNmiBok3xF1VfbOcoULVezsRG1s5gZvqdBkyZvgp/K2JF55WjY2jk
gCHqziUsr6GWaLWqaYZdPZ4QcSJQy8zU9n1EN42ckzGCrzueAaLmu8ZPQN8mSc2C
47DRKW/ad0aSvHE/t2QEZVADQ0yp8AyAXggXVvbG2LBMsd2XzwqqpfEVmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNlzV/hPMcNMldKtcyba/zg68bj7MB8GA1UdIwQY
MBaAFPHUbg4+jKqu1KUpvX1zCL0e8BwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMt
YjQyZjIzZDgyOGMzLzEvMlhOWC1FOHh3MHlWMHExekp0cl9PRHJ4dVBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi84NGViNDQtYmJkZi00NmMxLWIwNDMtYjQyZjIzZDgyOGMz
LzEvOGRSdURqNk1xcTdVcFNtOWZYTUl2Ujd3SEIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXXGxMA0G
CSqGSIb3DQEBCwUAA4IBAQBadI02jGfZEY37qdNQT+g9+3bO6OW4aLfTz9idYZKj
avFPANZ+oBlEf4UTVI4sNlOSuv2Uo4GE6qd+2XIv/uqt6EX8fjL3kybLjyEvp8LU
US/DMjb88mVvOioIEsEh2YfBRF9MEW7du/VNPBjBfmVdpIZf8s9NKRNKkrDcnFck
bRF9WhRs22uekPX8u3hc6jhGf6Hwg8JqGnNhtTB4ainJ0Hl48jg5d2MG7BeKw4Xe
XslJj87SOKkjNnRbcWPl2eUXzLRxuSr/Z+fBenvkPPSQy5kL8zG3B3Hu3v19r9yj
X3oI/g70OlDmWh5koAERytuz4a6/p486zPqjQwgiHK6P
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:01:52 2025 by rpki-client