Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/dK2uMFUtEa8mJvzI5jfPlkvOrV0.roa
File: dK2uMFUtEa8mJvzI5jfPlkvOrV0.roa (raw, json)
Hash identifier: UyKK2/i5Yn8gqe/TaIulEkQyB+tb4FXt18YdvEC0TSo=
Subject key identifier: 74:AD:AE:30:55:2D:11:AF:26:26:FC:C8:E6:37:CF:96:4B:CE:AD:5D
Certificate issuer: /CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Certificate serial: 01942444E8985DC4D2312FEDB3455F2F29BA
Authority key identifier: 4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/dK2uMFUtEa8mJvzI5jfPlkvOrV0.roa
Signing time: Wed 01 Jan 2025 23:48:03 +0000
ROA not before: Wed 01 Jan 2025 23:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8934
IP address blocks: 93.93.144.0/21 maxlen: 24
185.109.120.0/22 maxlen: 24
193.188.64.0/19 maxlen: 24
2a02:9c0::/29 maxlen: 29
2a02:9c0::/32 maxlen: 64
2a02:9c6::/32 maxlen: 32
2a02:9c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Apr 2025 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e8:98:5d:c4:d2:31:2f:ed:b3:45:5f:2f:29:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eeb6b2c3e09ca1c45fd7547e458946cc8a468b4
Validity
Not Before: Jan 1 23:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=74adae30552d11af2626fcc8e637cf964bcead5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:c3:48:dc:15:a7:dc:33:32:b5:58:57:c7:
b1:b8:e1:4b:82:35:7b:1c:48:de:82:1b:87:42:6f:
2f:34:99:0e:6c:98:5b:fc:25:9d:26:cb:0b:26:ef:
3c:ad:7c:50:cf:6f:9c:08:30:2a:f8:e2:48:89:e7:
2f:cf:59:97:bb:43:4f:90:01:99:6e:15:dc:ba:a2:
8f:0b:ab:f2:b8:d6:dd:b3:33:71:c5:67:20:f6:88:
68:51:5e:9e:f8:53:de:80:b1:0f:15:f9:00:fd:17:
89:6d:41:7f:06:14:51:75:e9:0a:e8:79:8f:dd:ce:
dc:a9:e4:1a:83:ac:b0:1a:66:31:32:ad:a4:d6:cd:
58:82:d8:ff:56:0d:13:ff:0c:49:f7:cc:a9:ef:02:
22:ee:eb:ea:99:72:1d:0d:58:2e:cf:92:f9:88:51:
07:cb:57:fb:20:a3:ea:e9:3b:e7:9e:c5:a9:8e:7b:
94:a0:3f:a2:22:ba:42:a8:5d:b7:5a:d3:4f:a1:4b:
2b:3d:68:0a:0b:75:74:5b:ce:61:d5:59:f9:09:2b:
7d:7a:75:fa:ec:fe:cd:37:73:15:34:00:ed:ec:c9:
f3:23:87:4a:59:24:c5:eb:f2:40:26:ac:6c:c1:62:
de:71:d8:f8:cf:d1:19:b3:53:b6:00:28:7e:ff:40:
9f:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:AD:AE:30:55:2D:11:AF:26:26:FC:C8:E6:37:CF:96:4B:CE:AD:5D
X509v3 Authority Key Identifier:
keyid:4E:EB:6B:2C:3E:09:CA:1C:45:FD:75:47:E4:58:94:6C:C8:A4:68:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TutrLD4JyhxF_XVH5FiUbMikaLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/dK2uMFUtEa8mJvzI5jfPlkvOrV0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8f59ec-f92c-423d-8fb7-6e9addc8162b/1/TutrLD4JyhxF_XVH5FiUbMikaLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.144.0/21
185.109.120.0/22
193.188.64.0/19
IPv6:
2a02:9c0::/29
Signature Algorithm: sha256WithRSAEncryption
ec:42:aa:69:05:7d:57:fe:e0:9a:b2:07:f7:ab:61:6a:a4:7e:
87:b4:bb:ab:18:33:53:ec:29:44:d9:f0:84:f2:55:cc:1f:c3:
eb:49:07:7a:76:81:4a:0c:89:50:c1:92:c3:96:c5:62:c6:a2:
73:50:d8:d9:a0:85:ba:50:f1:a7:55:49:7a:19:13:af:f8:97:
74:e0:dd:00:f5:b5:95:ff:38:62:8f:df:f2:87:98:c7:01:66:
10:f5:a4:34:2b:57:33:7b:92:8a:82:84:47:35:9a:9c:63:fe:
e0:c6:f7:9a:5f:b8:ab:61:ca:e3:94:29:dd:93:60:1c:de:f3:
8d:d2:62:d2:ec:7f:a3:fa:04:84:5c:29:a2:54:fd:c9:f6:a9:
8d:7b:ad:1f:27:f8:74:d7:b8:25:93:57:21:0d:d7:c3:b7:8b:
8b:ae:b9:62:cd:f2:f8:19:79:d4:5f:0b:8d:98:4f:8b:4a:8b:
9e:22:99:6e:d6:c0:77:1a:f5:f0:13:56:fb:95:6a:6e:53:90:
0f:5e:29:df:99:1d:63:2e:06:19:80:cc:bb:e5:9f:bc:e4:e6:
0e:45:ef:26:47:0d:ae:c7:3d:79:eb:31:6e:2e:cd:21:4c:94:
24:c5:7b:59:a4:55:79:01:d3:69:e9:04:31:01:4c:3c:b7:62:
75:4a:4d:ce
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQkROiYXcTSMS/ts0VfLym6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZWI2YjJjM2UwOWNhMWM0NWZkNzU0N2U0NTg5NDZjYzhh
NDY4YjQwHhcNMjUwMTAxMjM0ODAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NGFkYWUzMDU1MmQxMWFmMjYyNmZjYzhlNjM3Y2Y5NjRiY2VhZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwM3DSNwVp9wzMrVYV8exuOFLgjV7
HEjeghuHQm8vNJkObJhb/CWdJssLJu88rXxQz2+cCDAq+OJIiecvz1mXu0NPkAGZ
bhXcuqKPC6vyuNbdszNxxWcg9ohoUV6e+FPegLEPFfkA/ReJbUF/BhRRdekK6HmP
3c7cqeQag6ywGmYxMq2k1s1Ygtj/Vg0T/wxJ98yp7wIi7uvqmXIdDVguz5L5iFEH
y1f7IKPq6TvnnsWpjnuUoD+iIrpCqF23WtNPoUsrPWgKC3V0W85h1Vn5CSt9enX6
7P7NN3MVNADt7MnzI4dKWSTF6/JAJqxswWLecdj4z9EZs1O2ACh+/0Cf6wIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFHStrjBVLRGvJib8yOY3z5ZLzq1dMB8GA1UdIwQY
MBaAFE7rayw+CcocRf11R+RYlGzIpGi0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZjU5ZWMtZjkyYy00MjNkLThmYjct
NmU5YWRkYzgxNjJiLzEvZEsydU1GVXRFYThtSnZ6STVqZlBsa3ZPclYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84ZjU5ZWMtZjkyYy00MjNkLThmYjctNmU5YWRkYzgxNjJi
LzEvVHV0ckxENEp5aHhGX1hWSDVGaVViTWlrYUxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQDXV2QAwQC
uW14AwQFwbxAMA0EAgACMAcDBQMqAgnAMA0GCSqGSIb3DQEBCwUAA4IBAQDsQqpp
BX1X/uCasgf3q2FqpH6HtLurGDNT7ClE2fCE8lXMH8PrSQd6doFKDIlQwZLDlsVi
xqJzUNjZoIW6UPGnVUl6GROv+Jd04N0A9bWV/zhij9/yh5jHAWYQ9aQ0K1cze5KK
goRHNZqcY/7gxveaX7irYcrjlCndk2Ac3vON0mLS7H+j+gSEXCmiVP3J9qmNe60f
J/h017glk1chDdfDt4uLrrlizfL4GXnUXwuNmE+LSoueIplu1sB3GvXwE1b7lWpu
U5APXinfmR1jLgYZgMy75Z+85OYORe8mRw2uxz156zFuLs0hTJQkxXtZpFV5AdNp
6QQxAUw8t2J1Sk3O
-----END CERTIFICATE-----
Generated at Thu Apr 17 22:49:51 2025 by rpki-client