Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/dLKTEkbiLuMxJ2yOUJIoZEwUrdY.roa
File: dLKTEkbiLuMxJ2yOUJIoZEwUrdY.roa (raw, json)
Hash identifier: RRTb9hjGX5e3eDXQaXOf0UYAPlQTcjlQylghvEN9gn4=
Subject key identifier: 74:B2:93:12:46:E2:2E:E3:31:27:6C:8E:50:92:28:64:4C:14:AD:D6
Certificate issuer: /CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Certificate serial: 0194228D6BBD9958B6852F830F53540F0099
Authority key identifier: E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/dLKTEkbiLuMxJ2yOUJIoZEwUrdY.roa
Signing time: Wed 01 Jan 2025 15:48:01 +0000
ROA not before: Wed 01 Jan 2025 15:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49558
IP address blocks: 93.183.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:6b:bd:99:58:b6:85:2f:83:0f:53:54:0f:00:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9e4dc968ed52935a04dee3b229c21ca9bfdbd7e
Validity
Not Before: Jan 1 15:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74b2931246e22ee331276c8e509228644c14add6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:cd:bb:47:96:8a:be:ef:b3:3b:09:e6:7c:
c8:6a:62:f9:f7:99:65:b5:77:9f:fe:a9:bf:c7:44:
73:cc:93:42:d0:49:76:24:9f:7a:1d:b9:26:c5:03:
10:97:b9:3f:db:67:2b:b1:9c:85:03:1a:75:90:ae:
eb:78:3d:10:33:c2:de:7a:0d:fa:86:99:ea:1d:88:
67:50:7d:e0:16:42:42:47:52:71:f0:83:96:0e:6f:
ce:98:4a:65:39:28:c9:1c:12:13:02:df:46:1c:ba:
22:2b:3a:5e:e4:89:e6:03:88:45:31:bf:ee:df:60:
9a:34:95:d0:3d:64:dc:ff:21:53:66:72:50:b0:06:
24:8e:65:ba:62:19:1d:8b:b5:8e:70:84:43:dd:90:
33:3e:7e:d0:8a:df:c6:9e:69:90:e7:d8:fd:4a:10:
9f:0d:fa:89:de:64:bf:a1:0e:7d:9a:37:e0:35:5d:
d6:df:2f:2f:6a:ee:c8:0d:ed:bb:fc:09:78:12:72:
94:2e:c5:94:95:e4:92:c6:07:6d:c8:2b:c1:13:2f:
b0:2b:8c:e6:92:68:87:fa:f4:dd:be:5a:cb:39:72:
ef:f0:6a:a5:7a:89:ac:05:0f:5f:4c:27:27:73:2c:
09:fc:8d:ff:71:0c:5d:82:ea:6c:8f:71:9f:2a:a3:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:B2:93:12:46:E2:2E:E3:31:27:6C:8E:50:92:28:64:4C:14:AD:D6
X509v3 Authority Key Identifier:
keyid:E9:E4:DC:96:8E:D5:29:35:A0:4D:EE:3B:22:9C:21:CA:9B:FD:BD:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6eTclo7VKTWgTe47Ipwhypv9vX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/dLKTEkbiLuMxJ2yOUJIoZEwUrdY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/1a134f-030a-43e7-b041-6c7856ef7b31/1/6eTclo7VKTWgTe47Ipwhypv9vX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.183.120.0/22
Signature Algorithm: sha256WithRSAEncryption
34:b0:fb:2e:2b:dc:b9:cc:3f:74:7e:d7:b5:b4:4e:51:32:e6:
d1:84:ab:ff:e6:14:2a:43:bf:bd:ca:98:95:8b:0f:e8:21:52:
a3:7f:22:11:3b:46:75:d1:53:67:f3:f7:25:9b:26:d4:64:bd:
69:2f:28:94:ec:a2:7d:5c:23:29:d8:04:6f:1f:5a:3a:10:26:
b3:3b:ed:c7:97:9c:7c:c1:3c:12:5f:f3:04:84:ed:c3:0d:a4:
97:36:31:26:da:b5:32:78:e9:71:b4:15:55:74:97:ff:42:69:
0d:58:29:f4:1f:ad:7b:2c:b4:0e:5a:c0:a7:4d:41:a6:d1:2b:
62:85:3c:14:02:88:7b:46:e8:f0:79:c5:a2:01:ce:8a:ad:1c:
95:34:b1:6e:97:65:59:c3:83:5f:ac:f7:e7:af:be:8d:16:39:
3d:93:32:45:23:55:bb:f6:63:34:14:37:ad:06:e5:8e:9a:93:
47:b7:a0:64:19:c9:4f:c7:7b:bf:dd:32:75:be:00:46:53:37:
37:1d:80:ed:57:96:5c:0d:86:32:62:25:79:8b:67:e4:48:cd:
d1:48:52:b4:9b:ff:dd:1b:31:aa:bf:c1:e3:50:73:bc:56:29:
68:a7:76:4a:2c:22:5b:bd:3a:c1:36:13:a2:80:61:e7:89:bf:
a1:3d:ef:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijWu9mVi2hS+DD1NUDwCZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZTRkYzk2OGVkNTI5MzVhMDRkZWUzYjIyOWMyMWNhOWJm
ZGJkN2UwHhcNMjUwMTAxMTU0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGIyOTMxMjQ2ZTIyZWUzMzEyNzZjOGU1MDkyMjg2NDRjMTRhZGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFrNu0eWir7vszsJ5nzIamL595ll
tXef/qm/x0RzzJNC0El2JJ96HbkmxQMQl7k/22crsZyFAxp1kK7reD0QM8Leeg36
hpnqHYhnUH3gFkJCR1Jx8IOWDm/OmEplOSjJHBITAt9GHLoiKzpe5InmA4hFMb/u
32CaNJXQPWTc/yFTZnJQsAYkjmW6Yhkdi7WOcIRD3ZAzPn7Qit/GnmmQ59j9ShCf
DfqJ3mS/oQ59mjfgNV3W3y8vau7IDe27/Al4EnKULsWUleSSxgdtyCvBEy+wK4zm
kmiH+vTdvlrLOXLv8GqleomsBQ9fTCcncywJ/I3/cQxdgupsj3GfKqNlOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHSykxJG4i7jMSdsjlCSKGRMFK3WMB8GA1UdIwQY
MBaAFOnk3JaO1Sk1oE3uOyKcIcqb/b1+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmVUY2xvN1ZLVFdnVGU0N0lwd2h5cHY5dlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy8xYTEzNGYtMDMwYS00M2U3LWIwNDEt
NmM3ODU2ZWY3YjMxLzEvZExLVEVrYmlMdU14SjJ5T1VKSW9aRXdVcmRZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy8xYTEzNGYtMDMwYS00M2U3LWIwNDEtNmM3ODU2ZWY3YjMx
LzEvNmVUY2xvN1ZLVFdnVGU0N0lwd2h5cHY5dlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCXbd4MA0G
CSqGSIb3DQEBCwUAA4IBAQA0sPsuK9y5zD90fte1tE5RMubRhKv/5hQqQ7+9ypiV
iw/oIVKjfyIRO0Z10VNn8/clmybUZL1pLyiU7KJ9XCMp2ARvH1o6ECazO+3Hl5x8
wTwSX/MEhO3DDaSXNjEm2rUyeOlxtBVVdJf/QmkNWCn0H617LLQOWsCnTUGm0Sti
hTwUAoh7RujwecWiAc6KrRyVNLFul2VZw4NfrPfnr76NFjk9kzJFI1W79mM0FDet
BuWOmpNHt6BkGclPx3u/3TJ1vgBGUzc3HYDtV5ZcDYYyYiV5i2fkSM3RSFK0m//d
GzGqv8HjUHO8Vilop3ZKLCJbvTrBNhOigGHnib+hPe+d
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:02 2025 by rpki-client