Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/lXMs99__wPFL_tQdoxzgPhccZK0.roa
File: lXMs99__wPFL_tQdoxzgPhccZK0.roa (raw, json)
Hash identifier: OuWROGz9NUYwdhgN+POUZ2OWYBha2GAUM0PW+Sf4wFM=
Subject key identifier: 95:73:2C:F7:DF:FF:C0:F1:4B:FE:D4:1D:A3:1C:E0:3E:17:1C:64:AD
Certificate issuer: /CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Certificate serial: 019425FDC3ED98D42C10764D7BBDE5696A0B
Authority key identifier: DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/lXMs99__wPFL_tQdoxzgPhccZK0.roa
Signing time: Thu 02 Jan 2025 07:49:35 +0000
ROA not before: Thu 02 Jan 2025 07:49:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56484
IP address blocks: 93.187.32.0/21 maxlen: 21
93.187.32.0/24 maxlen: 24
93.187.33.0/24 maxlen: 24
93.187.34.0/24 maxlen: 24
93.187.35.0/24 maxlen: 24
93.187.36.0/24 maxlen: 24
93.187.37.0/24 maxlen: 24
93.187.38.0/24 maxlen: 24
93.187.39.0/24 maxlen: 24
185.52.116.0/22 maxlen: 22
185.52.116.0/24 maxlen: 24
185.52.117.0/24 maxlen: 24
185.52.118.0/24 maxlen: 24
185.52.119.0/24 maxlen: 24
2a00:dd00::/32 maxlen: 32
2a00:dd00:3::/48 maxlen: 48
2a00:dd00:4::/48 maxlen: 48
2a00:dd00:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.mft
rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Apr 2025 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:c3:ed:98:d4:2c:10:76:4d:7b:bd:e5:69:6a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc02b18f588a50b9274fe3469ff8bd4a1649d74d
Validity
Not Before: Jan 2 07:49:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=95732cf7dfffc0f14bfed41da31ce03e171c64ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:24:16:02:7c:e2:3a:72:10:bb:16:44:0e:e1:
dc:cb:45:18:48:09:d6:d8:5b:24:c5:2b:bf:59:53:
2e:6f:a9:5f:9b:22:43:7e:1d:4e:99:c1:e1:49:76:
67:98:52:b4:11:38:ee:42:be:f8:28:7c:e9:26:40:
d3:81:6e:48:ff:b6:be:9c:b4:68:56:78:eb:e8:88:
f0:c1:57:49:9d:98:67:74:83:d2:33:57:67:e3:47:
71:df:77:eb:05:18:1d:b4:82:25:df:a3:39:11:60:
03:2d:1c:b2:52:45:cf:e9:40:9e:4e:51:70:de:52:
40:ff:61:16:14:05:d5:1f:86:3d:a5:51:4c:3d:74:
a4:33:be:54:c0:04:ea:10:c6:6e:66:a8:38:4f:a2:
5f:ed:69:d4:75:25:58:95:96:c4:7e:bc:59:e8:b1:
91:d5:92:c6:3b:e7:6d:35:b3:9f:f7:c2:ea:8a:86:
48:c4:d4:95:85:25:33:70:47:1f:27:fd:dc:5a:93:
c1:c3:69:80:3a:ae:67:da:82:e9:7e:28:80:66:c4:
6c:4c:65:8c:53:ac:ff:3e:a6:ea:49:36:8f:72:c4:
82:b8:b3:01:70:ed:cc:10:f0:47:2a:21:16:22:63:
40:4e:8f:43:9c:4f:a8:4a:ea:69:df:78:0c:eb:07:
14:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:73:2C:F7:DF:FF:C0:F1:4B:FE:D4:1D:A3:1C:E0:3E:17:1C:64:AD
X509v3 Authority Key Identifier:
keyid:DC:02:B1:8F:58:8A:50:B9:27:4F:E3:46:9F:F8:BD:4A:16:49:D7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3AKxj1iKULknT-NGn_i9ShZJ100.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/lXMs99__wPFL_tQdoxzgPhccZK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c861c8-c89a-4043-a02d-664f04d2a68d/1/3AKxj1iKULknT-NGn_i9ShZJ100.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.187.32.0/21
185.52.116.0/22
IPv6:
2a00:dd00::/32
Signature Algorithm: sha256WithRSAEncryption
37:e7:be:b6:81:00:22:41:e6:ad:2d:0c:0a:50:16:01:af:06:
d2:b8:1a:0a:69:fd:26:33:5e:b9:6f:fb:ba:b3:f5:58:9c:79:
04:0d:fe:23:2e:d3:ea:56:de:52:e2:5a:4f:e2:ba:d2:e2:d9:
6c:42:a7:7e:de:2f:59:64:b6:cb:dc:b3:39:60:73:17:a5:79:
ae:47:72:c9:c7:48:c3:eb:7f:06:d5:f8:7b:1e:6e:8e:36:04:
64:a9:aa:65:85:e0:fb:2f:66:50:d2:53:1e:0b:e8:87:7d:60:
c7:9f:48:d2:45:a9:09:17:f5:73:cc:58:7b:c9:5b:91:ff:af:
02:a6:ec:b0:91:52:58:fc:d6:ea:da:6d:76:ba:90:fe:f5:81:
11:c7:11:35:fe:d2:bb:78:1a:20:8a:46:86:49:a2:9a:e0:7e:
e3:90:84:c1:84:eb:05:e8:44:55:20:e6:e6:f3:a6:f2:6a:9b:
cc:0e:21:17:d4:7a:46:b6:54:f9:3c:6e:8d:80:80:70:29:eb:
0e:d0:2c:f8:48:85:0a:71:54:71:64:8d:3e:bd:58:18:ba:c6:
28:01:a1:72:cf:2e:6d:c4:ae:4e:52:a2:27:73:2d:81:c2:f8:
12:d7:a9:a3:93:8b:50:47:6c:d6:ab:91:ea:17:ba:0d:c1:69:
f8:07:d4:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 15:28:10 2025 by rpki-client