Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/0HKshb-mSBdiPT8rzC35f_ZU7UQ.roa
File: 0HKshb-mSBdiPT8rzC35f_ZU7UQ.roa (raw, json)
Hash identifier: hF9BYbX+aU6Xe7lbRtg8LFUuOtXHeJr7ExZ5hZljljc=
Subject key identifier: D0:72:AC:85:BF:A6:48:17:62:3D:3F:2B:CC:2D:F9:7F:F6:54:ED:44
Certificate issuer: /CN=f416539e74934d23a0572f6625dbfdb54e820873
Certificate serial: 01951365A2F4D300DB29398507649110A10D
Authority key identifier: F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/0HKshb-mSBdiPT8rzC35f_ZU7UQ.roa
Signing time: Mon 17 Feb 2025 10:13:02 +0000
ROA not before: Mon 17 Feb 2025 10:13:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 196838
IP address blocks: 93.159.192.0/24 maxlen: 24
93.159.193.0/24 maxlen: 24
93.159.194.0/24 maxlen: 24
93.159.195.0/24 maxlen: 24
93.159.196.0/24 maxlen: 24
93.159.197.0/24 maxlen: 24
93.159.198.0/24 maxlen: 24
93.159.199.0/24 maxlen: 24
109.69.160.0/24 maxlen: 24
109.69.161.0/24 maxlen: 24
109.69.162.0/24 maxlen: 24
109.69.163.0/24 maxlen: 24
194.156.252.0/24 maxlen: 24
194.156.253.0/24 maxlen: 24
194.156.254.0/24 maxlen: 24
194.156.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 07:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:65:a2:f4:d3:00:db:29:39:85:07:64:91:10:a1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f416539e74934d23a0572f6625dbfdb54e820873
Validity
Not Before: Feb 17 10:13:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d072ac85bfa64817623d3f2bcc2df97ff654ed44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:10:48:87:b2:31:9a:d8:6e:c7:df:7a:89:70:
f2:b9:33:24:7b:02:fa:a9:aa:2e:87:3f:33:2f:74:
a6:7f:ec:21:95:7a:49:f1:43:b8:45:5c:5c:40:cc:
15:60:49:08:bc:8c:62:fe:41:ad:b6:54:24:c0:45:
57:7e:f8:12:12:e8:c1:5d:60:e3:34:f9:bd:7e:c1:
71:a1:07:21:a0:80:7b:70:02:9f:af:ba:05:0b:7a:
4a:3e:5d:09:3e:69:93:b7:58:73:70:e6:03:31:92:
5f:96:b3:35:63:d4:37:c3:a3:6e:fb:21:03:f2:37:
bd:98:ff:a6:67:a3:b3:83:cf:e8:62:c7:34:3c:99:
d0:3a:18:c8:0e:80:18:8f:68:a0:ac:f0:0c:9d:d1:
92:12:60:07:53:21:e5:fb:e6:b4:ed:d9:95:be:39:
10:46:72:71:55:6e:4e:91:bd:08:df:89:dd:9d:34:
c3:31:49:9b:3c:5a:79:87:80:a3:ac:b8:1a:47:5f:
94:91:4e:a5:3e:2c:eb:95:e7:27:c7:c7:42:7f:75:
16:ff:5c:00:e6:2a:93:e0:9a:e2:94:a4:3d:98:4d:
19:14:6c:b8:ba:3d:b3:8e:0c:cd:f1:31:6e:f3:f6:
fc:d2:53:12:d3:9b:cd:79:92:98:a0:8f:e6:a1:f7:
55:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:72:AC:85:BF:A6:48:17:62:3D:3F:2B:CC:2D:F9:7F:F6:54:ED:44
X509v3 Authority Key Identifier:
keyid:F4:16:53:9E:74:93:4D:23:A0:57:2F:66:25:DB:FD:B5:4E:82:08:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BZTnnSTTSOgVy9mJdv9tU6CCHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/0HKshb-mSBdiPT8rzC35f_ZU7UQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/53e496-0097-462a-a989-d67a61d5416d/1/9BZTnnSTTSOgVy9mJdv9tU6CCHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.192.0/21
109.69.160.0/22
194.156.252.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:32:9c:38:1c:16:02:00:55:9f:82:a1:38:2f:7e:9d:73:bd:
a5:13:7b:bd:f7:2e:7e:47:f6:bd:ef:ac:9d:15:b3:05:d5:ea:
b6:c3:ec:a0:8b:aa:32:4c:b4:30:b2:1f:c4:c3:10:2a:f0:e7:
3d:3a:f0:75:c6:e2:05:df:80:94:75:90:9a:cd:61:f8:5e:65:
9f:6a:92:c9:02:3e:3c:f4:35:ea:a6:4c:40:8a:39:62:1b:15:
7a:f3:80:ad:bc:20:45:46:2c:79:c4:2f:45:34:25:9f:1f:e8:
0f:d7:0b:aa:41:cb:64:c4:b0:76:bc:29:0d:35:f6:f7:06:69:
42:d3:5c:0f:14:3f:73:11:36:ef:2e:d1:01:72:3f:3a:52:3e:
6e:56:f5:be:e3:af:79:0d:f5:18:9d:37:e5:f7:21:8a:2b:04:
4e:a5:54:d9:94:d7:aa:7a:a8:91:bd:0a:6a:d3:a6:58:0e:3b:
0b:08:3d:c9:3e:02:ba:c0:18:ef:a9:10:e7:9f:9c:4d:e6:92:
a5:b6:7d:e6:45:ad:e9:34:4f:56:60:cd:7d:6c:6d:5e:1d:65:
6f:7a:45:1b:c0:2f:97:36:27:f7:03:2d:ec:a9:c7:3f:c5:74:
0b:96:b3:b4:66:12:35:e7:40:e5:49:48:59:ea:df:d4:1d:9c:
71:99:d5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 14:14:36 2025 by rpki-client