Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/L3gVEYY-SNWWzxbViYwIk4pbExk.roa
File: L3gVEYY-SNWWzxbViYwIk4pbExk.roa (raw, json)
Hash identifier: 7OeYXRKEQzoTeSepGK6jCDC4REoaBlzhDjxELJRYDKc=
Subject key identifier: 2F:78:15:11:86:3E:48:D5:96:CF:16:D5:89:8C:08:93:8A:5B:13:19
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 01942521EBBB6F5C5BEB77F5BF98123421FB
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/L3gVEYY-SNWWzxbViYwIk4pbExk.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 19905
IP address blocks: 93.93.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:eb:bb:6f:5c:5b:eb:77:f5:bf:98:12:34:21:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f781511863e48d596cf16d5898c08938a5b1319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:61:8a:7c:bc:df:87:33:84:0e:80:f8:17:d9:
fc:3f:f7:9e:a1:2b:37:bd:9a:46:ce:c3:d0:5f:8b:
5c:44:df:b0:f5:3e:67:7f:27:42:23:99:bf:db:57:
04:29:e3:21:bf:e9:08:c6:b3:a9:1d:42:0c:db:f2:
b9:7c:0e:4f:5a:99:a9:86:10:c1:30:45:ed:3b:08:
0f:b5:d0:dc:bf:d9:bc:8b:bd:ac:2d:1b:41:fe:41:
71:45:52:a6:17:b1:c5:6c:60:8b:4a:20:0d:9e:ce:
e8:dd:aa:ed:17:73:88:7b:21:99:13:59:f4:3a:30:
87:9e:80:39:9d:be:9a:89:d9:ed:d6:27:68:39:87:
15:de:b9:39:fe:d4:a8:d8:c6:60:2d:70:21:d1:e0:
d6:86:a9:c6:13:07:4b:60:94:4c:7d:8d:ec:b7:ab:
05:4d:86:da:12:de:fc:79:de:95:e9:19:8c:67:ab:
d9:5b:1f:46:02:89:b0:d1:c1:13:72:62:90:78:83:
a5:ce:11:1a:8f:82:1f:f9:38:42:98:1b:c7:e6:84:
19:e0:80:88:a8:65:6f:4f:66:2b:a3:56:21:f7:b3:
c1:60:dd:0e:d8:40:07:4d:44:4e:bc:2a:e1:0c:e0:
14:1d:67:e6:be:cd:ab:47:b8:5b:a7:52:e1:ce:23:
f7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:78:15:11:86:3E:48:D5:96:CF:16:D5:89:8C:08:93:8A:5B:13:19
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/L3gVEYY-SNWWzxbViYwIk4pbExk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.80.0/24
Signature Algorithm: sha256WithRSAEncryption
75:55:99:12:08:48:07:67:79:2c:a4:d0:5f:0c:71:2f:9c:33:
80:49:42:55:35:d4:f6:ed:93:d8:fa:23:d9:39:01:45:b4:80:
f3:9d:60:ab:08:ad:a7:4c:31:b2:aa:23:67:02:32:90:f8:0d:
55:75:d1:59:fd:4e:fd:68:f8:ff:3a:a6:d2:b7:6c:dc:ee:07:
69:05:28:24:50:b0:a6:aa:1a:d8:11:ec:18:ef:b3:1f:b6:27:
0d:49:25:8b:f8:eb:16:00:bf:bf:2a:5f:f5:bc:f0:42:c4:ee:
44:24:a9:82:c6:c1:7d:87:bc:9e:5d:93:c4:1d:9f:d6:a5:65:
20:52:85:36:a9:4d:51:34:8c:48:da:6c:c4:e9:14:4f:80:a5:
6d:c2:7c:97:8b:cf:de:59:bb:43:8c:dc:8c:5d:6a:12:e8:ba:
70:5b:ec:fb:87:03:a9:51:9b:6e:8b:89:fe:5e:8e:02:d2:8d:
8f:c9:d6:93:42:04:d1:19:dd:ee:4f:06:9f:86:33:d7:13:a8:
8e:71:d4:37:ff:78:fa:3c:47:e8:e8:ae:b3:df:cc:62:de:dc:
9e:bf:79:dd:39:d4:a8:71:c5:c6:f9:4e:06:c1:b9:c8:d6:f8:
a5:af:83:c2:e6:8e:81:7e:d3:3b:cf:4d:0c:a8:0c:48:aa:37:
f9:7d:bc:19
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIeu7b1xb63f1v5gSNCH7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5NzZkN2QwYmJjYzA4NTE2NTIzZDVkZjI0ZTY4ODJiNzJj
YTU2OTMwHhcNMjUwMTAyMDM0OTI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyZjc4MTUxMTg2M2U0OGQ1OTZjZjE2ZDU4OThjMDg5MzhhNWIxMzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GGKfLzfhzOEDoD4F9n8P/eeoSs3
vZpGzsPQX4tcRN+w9T5nfydCI5m/21cEKeMhv+kIxrOpHUIM2/K5fA5PWpmphhDB
MEXtOwgPtdDcv9m8i72sLRtB/kFxRVKmF7HFbGCLSiANns7o3artF3OIeyGZE1n0
OjCHnoA5nb6aidnt1idoOYcV3rk5/tSo2MZgLXAh0eDWhqnGEwdLYJRMfY3st6sF
TYbaEt78ed6V6RmMZ6vZWx9GAomw0cETcmKQeIOlzhEaj4If+ThCmBvH5oQZ4ICI
qGVvT2Yro1Yh97PBYN0O2EAHTUROvCrhDOAUHWfmvs2rR7hbp1LhziP3WQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFC94FRGGPkjVls8W1YmMCJOKWxMZMB8GA1UdIwQY
MBaAFHl219C7zAhRZSPV3yTmiCtyylaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMt
ODU0MTgyY2IwNmE2LzEvTDNnVkVZWS1TTldXenhiVmlZd0lrNHBiRXhrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9kZDY5NDMtNmZjZS00MzA5LTg3MTMtODU0MTgyY2IwNmE2
LzEvZVhiWDBMdk1DRkZsSTlYZkpPYUlLM0xLVnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV1QMA0G
CSqGSIb3DQEBCwUAA4IBAQB1VZkSCEgHZ3kspNBfDHEvnDOASUJVNdT27ZPY+iPZ
OQFFtIDznWCrCK2nTDGyqiNnAjKQ+A1VddFZ/U79aPj/OqbSt2zc7gdpBSgkULCm
qhrYEewY77MfticNSSWL+OsWAL+/Kl/1vPBCxO5EJKmCxsF9h7yeXZPEHZ/WpWUg
UoU2qU1RNIxI2mzE6RRPgKVtwnyXi8/eWbtDjNyMXWoS6LpwW+z7hwOpUZtui4n+
Xo4C0o2PydaTQgTRGd3uTwafhjPXE6iOcdQ3/3j6PEfo6K6z38xi3tyev3ndOdSo
ccXG+U4GwbnI1vilr4PC5o6BftM7z00MqAxIqjf5fbwZ
-----END CERTIFICATE-----
Generated at Sat Apr 12 16:44:24 2025 by rpki-client