Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/roSBaoRvAnTIt76C3C33nUHwU3g.roa
File: roSBaoRvAnTIt76C3C33nUHwU3g.roa (raw, json)
Hash identifier: l3sqdOHSiVFg15vNcDdfbgIjlCa4lIwHlmQgrqAJ+sQ=
Subject key identifier: AE:84:81:6A:84:6F:02:74:C8:B7:BE:82:DC:2D:F7:9D:41:F0:53:78
Certificate issuer: /CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Certificate serial: 01942521EBEE8F6873D4CF1635326FBCAFE8
Authority key identifier: 79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/roSBaoRvAnTIt76C3C33nUHwU3g.roa
Signing time: Thu 02 Jan 2025 03:49:27 +0000
ROA not before: Thu 02 Jan 2025 03:49:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44646
IP address blocks: 93.93.80.0/24 maxlen: 24
93.93.81.0/24 maxlen: 24
93.93.82.0/24 maxlen: 24
93.93.83.0/24 maxlen: 24
93.93.84.0/24 maxlen: 24
93.93.85.0/24 maxlen: 24
93.93.86.0/24 maxlen: 24
93.93.87.0/24 maxlen: 24
185.40.204.0/24 maxlen: 24
185.40.205.0/24 maxlen: 24
185.40.206.0/24 maxlen: 24
185.40.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:eb:ee:8f:68:73:d4:cf:16:35:32:6f:bc:af:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7976d7d0bbcc08516523d5df24e6882b72ca5693
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae84816a846f0274c8b7be82dc2df79d41f05378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:38:a5:80:54:f6:79:7d:9f:af:9f:d1:dc:1b:
9c:9a:f9:7e:d4:44:a5:39:96:8e:e7:77:3a:df:05:
5c:f4:23:30:9e:e6:4a:74:be:b2:de:e3:49:01:69:
96:4d:40:3f:5b:ed:84:bd:b9:db:b7:d0:7e:f7:44:
6d:d8:7e:02:40:8b:45:2e:b1:c5:b9:14:a2:9b:8c:
19:b9:2b:d7:06:d9:bf:b4:d1:3f:0b:ec:00:65:21:
7e:05:d1:32:76:72:c0:7e:e8:e8:60:ce:c6:d5:5e:
cd:4e:0d:4b:0a:e8:be:1e:9c:af:6c:69:40:56:a8:
42:f0:ec:fd:57:91:52:d1:8b:12:f1:1c:c1:9d:9d:
78:33:e2:2c:8c:08:61:39:24:ed:12:54:4c:0e:c8:
cf:06:fe:71:76:1e:bd:fd:57:f0:0b:48:fa:a5:9a:
08:cc:fa:37:12:cf:12:25:23:f5:2c:28:10:00:b8:
0a:e4:03:b2:a2:2f:b1:f1:cf:c8:79:f7:5b:23:78:
bd:68:7d:17:7d:d0:7a:3e:f5:ba:eb:32:aa:a9:b0:
b9:33:aa:41:fe:de:63:83:97:49:6e:b3:7e:60:90:
6f:c8:98:0c:0d:ae:2e:2b:ab:59:41:66:51:72:be:
a5:b2:93:1c:79:90:5a:66:5d:e0:79:ce:42:6c:15:
ae:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:84:81:6A:84:6F:02:74:C8:B7:BE:82:DC:2D:F7:9D:41:F0:53:78
X509v3 Authority Key Identifier:
keyid:79:76:D7:D0:BB:CC:08:51:65:23:D5:DF:24:E6:88:2B:72:CA:56:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXbX0LvMCFFlI9XfJOaIK3LKVpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/roSBaoRvAnTIt76C3C33nUHwU3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/dd6943-6fce-4309-8713-854182cb06a6/1/eXbX0LvMCFFlI9XfJOaIK3LKVpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.80.0/21
185.40.204.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:59:77:97:f0:49:64:5a:8f:7b:b1:5c:60:ee:df:a3:a5:e3:
43:57:ed:b7:0f:7c:a2:40:d3:c8:aa:34:dc:14:07:e8:f8:52:
64:d4:b9:68:76:73:7c:79:52:60:58:9a:7b:9e:b2:5d:80:19:
7e:40:63:66:3d:ea:41:14:2a:db:7a:a2:4a:5a:66:11:dc:2e:
c0:f6:31:98:cf:8d:54:8b:b5:c3:db:91:06:47:eb:21:0c:bb:
50:59:56:8e:3e:4b:ee:3b:9e:97:0a:c9:94:07:46:92:5c:26:
a0:4f:d6:e5:05:5b:95:b6:20:ec:9d:fa:b2:80:28:2e:b6:d3:
0a:31:3d:50:c2:47:3e:21:8c:39:51:e0:34:bd:41:41:d0:b2:
24:ca:3f:ca:08:1e:f0:e9:dc:9a:86:e6:f1:b3:07:2d:c9:ad:
e1:6a:c0:a3:f5:c2:bb:da:4e:5a:3c:a0:d5:b1:b8:f0:40:79:
85:e4:31:04:bc:a5:89:09:cc:e4:b3:93:56:2f:e2:05:47:50:
1f:57:17:2b:4e:76:50:85:52:cf:1f:69:43:63:98:dd:af:0f:
da:0e:7b:01:48:ed:02:25:ef:1d:d5:f5:c0:68:83:33:a2:96:
05:3b:71:4d:b2:34:64:5c:2a:84:a8:b5:d8:e1:61:71:5f:e7:
9c:61:6a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 15:09:54 2025 by rpki-client