Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GEajGMiTlHObeT_RMsheOz2svxo.roa
File: GEajGMiTlHObeT_RMsheOz2svxo.roa (raw, json)
Hash identifier: oToXar1bTf7k0hc47zdNT/ONTAOGrn+rzK8FSdnB+fs=
Subject key identifier: 18:46:A3:18:C8:93:94:73:9B:79:3F:D1:32:C8:5E:3B:3D:AC:BF:1A
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0195186EB2AB976FB1AC454095874FF127EC
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GEajGMiTlHObeT_RMsheOz2svxo.roa
Signing time: Tue 18 Feb 2025 09:41:02 +0000
ROA not before: Tue 18 Feb 2025 09:41:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6079
IP address blocks: 93.114.74.0/24 maxlen: 24
93.114.75.0/24 maxlen: 24
93.114.76.0/24 maxlen: 24
93.114.77.0/24 maxlen: 24
93.114.78.0/24 maxlen: 24
93.114.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Apr 2025 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:18:6e:b2:ab:97:6f:b1:ac:45:40:95:87:4f:f1:27:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Feb 18 09:41:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1846a318c89394739b793fd132c85e3b3dacbf1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:37:b6:3b:ac:8a:6a:35:2c:82:20:55:cd:4c:
20:46:fe:a0:19:0b:25:90:73:2d:ee:d7:75:92:74:
e1:ea:ee:68:54:62:16:66:0a:f6:50:bf:4c:c2:ad:
48:8c:d3:2a:29:e1:cc:56:76:cf:3f:24:c4:63:4c:
eb:25:c4:44:c5:1d:3f:41:e8:d8:a2:c9:70:68:b9:
e6:37:30:5f:1c:98:cb:a8:02:a9:2f:58:55:7b:0f:
09:34:66:cb:e4:db:b1:0f:84:82:58:6c:7b:b3:b3:
19:aa:c7:fe:a0:69:d3:0b:5d:1d:0c:8d:09:48:64:
c9:ea:90:8e:d5:56:1c:7a:fd:ab:a7:cd:42:bf:7c:
15:da:fc:81:e1:2a:82:d9:c6:f2:60:17:fb:5f:f9:
35:b7:ed:b6:df:0b:4c:b9:a3:2f:b5:5b:ae:b9:ad:
1c:96:48:90:27:9a:58:30:b9:d8:59:73:b4:66:6d:
2a:e4:ae:9f:e9:68:65:a8:e4:1f:96:d8:c5:4d:08:
22:30:ef:74:e3:ff:7e:89:ae:ad:08:c3:44:0a:87:
b0:d6:7a:55:40:e6:8c:ad:b6:60:48:d7:0b:c8:64:
4d:90:99:20:0e:4b:e6:34:7c:e9:17:9e:c7:ef:5e:
9a:44:27:94:30:0a:94:d1:43:12:e8:e0:f1:3c:3a:
3a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:46:A3:18:C8:93:94:73:9B:79:3F:D1:32:C8:5E:3B:3D:AC:BF:1A
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/GEajGMiTlHObeT_RMsheOz2svxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.74.0-93.114.79.255
Signature Algorithm: sha256WithRSAEncryption
79:09:fa:f6:25:75:80:85:a4:51:da:cd:ab:25:a1:c9:66:fc:
83:2c:b8:c8:ce:e3:09:b9:b7:18:d7:81:d6:14:8d:b8:56:a0:
25:c6:bd:21:38:8d:f9:2c:ff:01:e8:f4:57:8f:3e:3d:86:35:
90:27:a3:3c:26:0a:15:2a:42:ab:3f:45:ff:c9:e0:e2:e3:a4:
34:9d:dd:90:46:e4:17:c5:74:c3:c9:09:8a:92:8b:b6:55:90:
89:86:1f:2c:68:de:be:a3:3f:f9:60:49:3c:97:09:40:2d:3b:
5f:72:45:e1:bd:89:6d:e4:eb:1a:b8:00:51:e4:ac:ae:e3:ab:
0c:31:0b:64:4b:19:39:88:51:d6:ad:08:7e:44:7a:9c:99:d2:
c6:70:ab:2b:38:f2:75:7d:b1:f0:10:66:d2:b0:73:36:b2:f5:
3a:e1:74:e7:8e:09:5c:ca:f3:c7:77:29:42:90:de:2b:d4:85:
88:d1:6e:93:6b:89:99:64:99:d6:54:4c:84:e2:ea:1f:c3:1f:
aa:7d:6f:54:1b:c8:41:eb:4d:64:02:11:ee:49:f7:25:e3:bb:
f1:4c:33:43:1d:e6:39:06:80:b0:2e:01:2e:a9:a0:c7:5f:3e:
5a:00:23:9a:78:55:39:d4:4e:e8:e2:0a:88:4e:f4:90:76:c1:
bf:d9:cc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:20:57 2025 by rpki-client