Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/pBOBaEWXkYoN8gJBhZMkD24bH8M.roa
File: pBOBaEWXkYoN8gJBhZMkD24bH8M.roa (raw, json)
Hash identifier: yYFHTbbCS/jQtr+ov28WxXyLXELdV4Do2QZ+inX5RdA=
Subject key identifier: A4:13:81:68:45:97:91:8A:0D:F2:02:41:85:93:24:0F:6E:1B:1F:C3
Certificate issuer: /CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Certificate serial: 0194252225D2112D5726B6006370B77E0948
Authority key identifier: B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/pBOBaEWXkYoN8gJBhZMkD24bH8M.roa
Signing time: Thu 02 Jan 2025 03:49:42 +0000
ROA not before: Thu 02 Jan 2025 03:49:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35461
IP address blocks: 93.191.116.0/24 maxlen: 24
93.191.117.0/24 maxlen: 24
93.191.118.0/24 maxlen: 24
93.191.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Apr 2025 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:25:d2:11:2d:57:26:b6:00:63:70:b7:7e:09:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b316a0684d1d38bacf4338c2b01db3b41370eb45
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a41381684597918a0df202418593240f6e1b1fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:77:59:c2:02:8c:fe:17:1f:a0:00:b3:d2:c2:
b6:c0:ed:25:77:4f:2c:1c:c8:68:d8:80:d4:6a:0a:
97:0c:2f:c8:23:10:27:7e:87:51:34:0d:93:c3:cb:
a2:8e:67:57:f8:32:51:fa:cd:9a:c1:74:c5:5b:ce:
9b:cd:ad:33:30:5b:9d:0d:e9:2b:ca:35:e6:3e:af:
32:1f:17:17:c7:5e:e0:c3:f1:cf:28:2d:e7:be:b6:
6f:bf:5f:08:49:2c:ff:d3:d5:ab:5d:72:c5:df:0a:
7d:9c:a4:77:84:2b:f5:61:6f:57:cf:80:59:f0:5d:
b6:f8:08:2c:c6:4b:7b:4b:36:00:2f:db:c7:14:f1:
f3:d0:21:e6:e1:94:6f:b3:b4:d3:7d:12:0d:5f:cb:
7d:f4:4d:5c:49:e2:a8:cc:a5:1e:bf:05:f6:78:34:
e0:49:75:82:5f:40:6c:01:b7:a4:4f:89:87:05:64:
85:10:68:16:28:c2:b2:23:63:32:c3:43:ed:4f:90:
5d:fe:34:c7:22:3e:97:ef:45:a6:6e:5b:ec:a7:28:
66:84:e0:38:3b:67:8d:07:1c:13:74:65:3f:8d:a6:
6b:59:5d:8c:e1:7a:77:23:73:35:74:e4:45:29:28:
a6:0c:ff:b0:be:ac:8f:b8:6c:82:07:6f:6d:e2:a2:
50:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:13:81:68:45:97:91:8A:0D:F2:02:41:85:93:24:0F:6E:1B:1F:C3
X509v3 Authority Key Identifier:
keyid:B3:16:A0:68:4D:1D:38:BA:CF:43:38:C2:B0:1D:B3:B4:13:70:EB:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxagaE0dOLrPQzjCsB2ztBNw60U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/pBOBaEWXkYoN8gJBhZMkD24bH8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/6c4d62-8daf-4502-b3f7-14b97cfbad47/1/sxagaE0dOLrPQzjCsB2ztBNw60U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.191.116.0/22
Signature Algorithm: sha256WithRSAEncryption
50:fb:b6:2f:f6:64:6e:55:ad:22:13:75:2f:b7:3f:d4:75:04:
f6:69:fd:c7:c8:a8:f2:ce:d4:4d:73:a7:3a:ec:37:a5:c3:2b:
a1:96:f1:f3:eb:d1:3c:53:3e:66:93:8b:c9:89:5b:3c:6e:06:
2f:d4:cc:bf:69:b0:a9:18:50:14:86:85:42:b1:45:c5:5c:02:
83:e8:a7:4a:9d:5e:67:41:86:74:34:52:24:82:c3:0f:67:55:
4c:25:eb:9f:8c:3c:ad:40:5c:5f:92:33:48:2b:0e:64:08:37:
e0:ad:0f:d4:bf:a0:6c:4c:88:48:a7:3a:e3:7e:a9:5f:e0:c0:
90:f5:58:27:a2:21:d0:21:6b:d3:f7:fd:9b:c4:70:33:0c:a5:
20:4e:5c:8b:3d:74:1f:de:5b:be:46:9d:19:12:39:f8:c0:74:
02:0c:b5:f2:26:c4:5b:f0:d0:8c:73:ea:c0:a4:36:94:a3:a7:
59:b8:f3:3a:fb:67:d6:bb:d8:18:6c:f1:52:8e:2a:ed:6b:09:
80:e8:5f:57:6b:6f:22:2a:f4:25:8f:ae:73:b1:27:dc:5b:0e:
2c:14:bc:18:33:7f:b7:08:fc:41:9b:6a:84:de:81:d9:60:73:
d0:a1:18:2b:fa:32:12:42:ad:42:f0:d1:41:bc:c6:54:b5:bc:
91:3a:cd:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIiXSES1XJrYAY3C3fglIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMTZhMDY4NGQxZDM4YmFjZjQzMzhjMmIwMWRiM2I0MTM3
MGViNDUwHhcNMjUwMTAyMDM0OTQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDEzODE2ODQ1OTc5MThhMGRmMjAyNDE4NTkzMjQwZjZlMWIxZmMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhndZwgKM/hcfoACz0sK2wO0ld08s
HMho2IDUagqXDC/IIxAnfodRNA2Tw8uijmdX+DJR+s2awXTFW86bza0zMFudDekr
yjXmPq8yHxcXx17gw/HPKC3nvrZvv18ISSz/09WrXXLF3wp9nKR3hCv1YW9Xz4BZ
8F22+Agsxkt7SzYAL9vHFPHz0CHm4ZRvs7TTfRINX8t99E1cSeKozKUevwX2eDTg
SXWCX0BsAbekT4mHBWSFEGgWKMKyI2Myw0PtT5Bd/jTHIj6X70WmblvspyhmhOA4
O2eNBxwTdGU/jaZrWV2M4Xp3I3M1dORFKSimDP+wvqyPuGyCB29t4qJQyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKQTgWhFl5GKDfICQYWTJA9uGx/DMB8GA1UdIwQY
MBaAFLMWoGhNHTi6z0M4wrAds7QTcOtFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3hhZ2FFMGRPTHJQUXpqQ3NCMnp0Qk53NjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC82YzRkNjItOGRhZi00NTAyLWIzZjct
MTRiOTdjZmJhZDQ3LzEvcEJPQmFFV1hrWW9OOGdKQmhaTWtEMjRiSDhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZC82YzRkNjItOGRhZi00NTAyLWIzZjctMTRiOTdjZmJhZDQ3
LzEvc3hhZ2FFMGRPTHJQUXpqQ3NCMnp0Qk53NjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXb90MA0G
CSqGSIb3DQEBCwUAA4IBAQBQ+7Yv9mRuVa0iE3Uvtz/UdQT2af3HyKjyztRNc6c6
7DelwyuhlvHz69E8Uz5mk4vJiVs8bgYv1My/abCpGFAUhoVCsUXFXAKD6KdKnV5n
QYZ0NFIkgsMPZ1VMJeufjDytQFxfkjNIKw5kCDfgrQ/Uv6BsTIhIpzrjfqlf4MCQ
9VgnoiHQIWvT9/2bxHAzDKUgTlyLPXQf3lu+Rp0ZEjn4wHQCDLXyJsRb8NCMc+rA
pDaUo6dZuPM6+2fWu9gYbPFSjirtawmA6F9Xa28iKvQlj65zsSfcWw4sFLwYM3+3
CPxBm2qE3oHZYHPQoRgr+jISQq1C8NFBvMZUtbyROs1W
-----END CERTIFICATE-----
Generated at Tue Apr 8 11:30:06 2025 by rpki-client