Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/02CMi4OTO4vZiYrzGtogQxpcXEc.roa
File: 02CMi4OTO4vZiYrzGtogQxpcXEc.roa (raw, json)
Hash identifier: iknCWltgVqFd7SHwlHZszfR2yHocPi5ARDy7dg6JF5E=
Subject key identifier: D3:60:8C:8B:83:93:3B:8B:D9:89:8A:F3:1A:DA:20:43:1A:5C:5C:47
Certificate issuer: /CN=7df132df13e4be53d8250c8c48420264eef6c14c
Certificate serial: 01941FFA437DB69B03C0234E9CAF19FF142B
Authority key identifier: 7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/02CMi4OTO4vZiYrzGtogQxpcXEc.roa
Signing time: Wed 01 Jan 2025 03:48:02 +0000
ROA not before: Wed 01 Jan 2025 03:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215973
IP address blocks: 93.119.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Mar 2025 00:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:43:7d:b6:9b:03:c0:23:4e:9c:af:19:ff:14:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df132df13e4be53d8250c8c48420264eef6c14c
Validity
Not Before: Jan 1 03:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d3608c8b83933b8bd9898af31ada20431a5c5c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:01:3c:0a:39:f9:f3:ef:93:4e:c0:d6:c3:90:
1e:bc:36:f2:b3:2c:4f:31:7b:03:a1:d6:91:2b:7b:
0e:20:53:50:2d:47:5e:eb:88:95:3c:26:29:ea:0a:
13:b1:24:4f:45:67:17:40:9d:52:10:81:5c:79:09:
4e:ba:eb:28:6e:df:3f:f0:aa:0b:46:a6:a5:99:f0:
f0:a6:a9:1f:f1:3e:99:c3:19:28:5a:cf:50:a1:f1:
a2:b4:f6:cf:6b:ed:94:8c:48:77:10:bf:a4:5f:09:
a1:5d:04:8c:f6:a6:51:1e:73:01:29:16:9d:ee:61:
97:7a:82:61:02:fe:8e:12:41:f9:82:ea:6c:9e:6f:
3e:a6:5a:1d:db:22:eb:a6:48:1b:ec:16:f0:36:21:
a5:55:40:ee:02:5f:f9:4a:1d:63:be:42:2a:d5:4a:
9a:a2:e6:df:e0:40:96:13:58:2f:83:2c:1f:08:ac:
c8:62:b0:e6:53:a8:fc:73:31:82:9d:70:65:93:48:
6e:3c:f1:9c:55:f3:7c:9e:f1:c0:17:4a:ff:4e:53:
64:a5:e8:26:df:86:80:11:b8:ba:29:88:d7:ea:49:
99:85:b2:af:4e:7f:33:1e:1d:ec:28:84:d9:30:fb:
d6:9e:18:b3:a1:23:df:cf:4c:04:0d:ca:d6:73:80:
b2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:60:8C:8B:83:93:3B:8B:D9:89:8A:F3:1A:DA:20:43:1A:5C:5C:47
X509v3 Authority Key Identifier:
keyid:7D:F1:32:DF:13:E4:BE:53:D8:25:0C:8C:48:42:02:64:EE:F6:C1:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffEy3xPkvlPYJQyMSEICZO72wUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/02CMi4OTO4vZiYrzGtogQxpcXEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/c37497-6376-461e-93c6-9778674edc97/1/ffEy3xPkvlPYJQyMSEICZO72wUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.119.171.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:92:7b:7c:c6:a0:b4:f7:66:df:e3:9c:f0:ad:d7:bc:66:cd:
58:e8:aa:ed:46:cd:8a:af:e8:19:ba:aa:8f:fa:db:6d:d3:42:
92:c1:bb:84:4a:17:0a:48:1f:ad:0d:f6:ed:bd:b8:8f:b5:55:
ad:fc:70:f5:d7:54:6d:74:be:cc:5a:5d:83:6e:ce:16:1c:8f:
c7:8f:0c:d0:53:e3:ce:41:b7:21:50:3b:02:69:b0:55:dc:6a:
3f:68:02:0d:33:4b:11:88:e4:48:c7:ab:b3:bb:fd:26:88:4a:
df:1f:23:41:e6:38:84:96:5b:bb:1f:11:c6:f6:1f:68:c9:b9:
ff:a3:70:ee:cf:24:f3:34:fe:66:6f:30:8f:2a:3d:7d:ce:74:
22:b9:58:0a:07:c0:0f:7a:92:58:7b:95:c4:0c:50:80:11:85:
73:2b:e7:44:a9:6b:dd:f4:c2:41:71:86:6d:bb:fe:92:0f:1b:
5a:4f:ed:11:39:62:a7:db:fe:a8:36:10:ae:ab:7d:b3:b7:c8:
9b:7f:f9:9c:ae:30:c5:3a:36:a7:45:54:60:a6:e1:77:c8:56:
8b:aa:a7:5b:e7:a4:1d:ef:36:e6:74:e1:46:e6:e5:cb:7c:9a:
6d:a8:ef:af:f5:96:ff:79:8a:1f:d8:6f:2d:a6:7b:78:c0:02:
ef:04:39:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:45:35 2025 by rpki-client