Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/AslEALjD3jqgb7OYY5yS1FROuRs.roa
File: AslEALjD3jqgb7OYY5yS1FROuRs.roa (raw, json)
Hash identifier: FMQQmm86scKl0oq+daLBTizZR/b5Mb49RI9X4+SNpF4=
Subject key identifier: 02:C9:44:00:B8:C3:DE:3A:A0:6F:B3:98:63:9C:92:D4:54:4E:B9:1B
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 019498967D80E11412F2E524CB17B555C09A
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/AslEALjD3jqgb7OYY5yS1FROuRs.roa
Signing time: Fri 24 Jan 2025 13:53:06 +0000
ROA not before: Fri 24 Jan 2025 13:53:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15525
IP address blocks: 93.127.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 00:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:96:7d:80:e1:14:12:f2:e5:24:cb:17:b5:55:c0:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Jan 24 13:53:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02c94400b8c3de3aa06fb398639c92d4544eb91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c5:55:62:78:05:73:9f:ec:73:ec:c0:73:12:
bd:af:00:b3:42:8e:16:45:30:29:67:bc:3b:cc:f5:
f6:cf:ba:9d:5c:13:33:ac:de:19:0b:b3:a9:cd:50:
c7:78:e1:f7:f9:64:9b:3c:74:27:a8:bf:69:7d:a5:
fd:6d:e8:1e:20:b6:4e:cd:fd:ae:d4:4a:ff:2b:51:
f9:37:af:c5:9f:9f:8b:da:99:16:88:16:3f:a5:f3:
3a:90:6d:af:29:bf:cc:b2:ac:92:45:6f:51:b8:49:
77:6d:4a:0d:6a:be:f8:88:f2:19:bd:10:ea:87:01:
2a:04:a3:6f:0c:83:ea:24:ca:34:f4:b8:ca:90:03:
b1:fd:37:8c:d3:1f:77:6d:a1:1f:cf:ed:05:73:39:
db:d4:25:32:38:fd:62:6e:a1:18:10:40:95:24:5c:
fe:0a:2b:e2:05:e0:d2:ae:ab:e0:5f:b4:ba:e6:b6:
f7:cc:ba:b9:b6:54:02:cf:7c:a2:46:2a:77:32:8c:
38:7b:2f:e8:f2:24:16:7f:f2:d2:87:e4:d7:c7:0f:
8f:c9:cd:cd:d8:cc:70:cd:2d:30:58:1d:a1:71:08:
38:a7:94:ff:35:07:39:8b:31:d7:3c:09:84:db:3c:
3f:f6:00:f3:93:79:0d:18:ab:ca:87:f9:e9:61:51:
08:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C9:44:00:B8:C3:DE:3A:A0:6F:B3:98:63:9C:92:D4:54:4E:B9:1B
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/AslEALjD3jqgb7OYY5yS1FROuRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.164.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a0:c8:94:29:25:9d:62:05:a2:2b:ed:1f:00:ba:39:52:f4:
7f:be:ce:e4:c0:1c:43:eb:df:f8:0d:a6:77:b1:47:70:6d:12:
fb:1a:cf:05:93:6d:26:06:87:03:e9:c7:04:34:14:4f:18:3d:
be:b9:cc:8b:1f:7f:a5:b3:78:ee:3c:bf:f3:a1:83:ef:ec:7d:
27:44:ad:ff:60:93:d7:2f:5c:bb:53:2f:df:e1:8b:5a:34:1b:
6b:67:54:f8:dc:d0:2d:33:36:19:7f:99:ec:52:d8:03:53:0a:
b6:ad:df:f3:68:37:ae:fd:57:67:11:f9:c5:f0:d3:e7:e2:db:
b0:70:08:90:19:f8:4c:1e:52:df:3c:40:16:3d:cf:34:b2:b6:
b3:3d:c8:b8:5a:dc:c3:95:dd:dd:c4:bd:75:3c:bf:db:c8:3e:
80:5c:3e:ee:23:4a:51:39:77:bc:d3:a5:02:8d:34:53:20:96:
77:63:1e:b0:f6:24:a7:ac:8e:7e:52:38:79:0f:4c:21:00:d3:
ad:7e:37:ab:d4:70:8a:54:66:cd:30:4b:e8:3b:32:66:64:7c:
df:69:89:b5:2c:9f:a9:f7:d7:64:b1:17:19:4a:e5:31:1b:2b:
d0:5c:c1:07:0f:66:f1:55:aa:dd:a5:6d:20:90:fd:9c:00:69:
42:06:2c:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSYln2A4RQS8uUkyxe1VcCaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzNzhiYzNiZDM1MGVlZGM0ZjM3N2MyMjQ1NTZiMjUwZGE2
ZGRlNmYwHhcNMjUwMTI0MTM1MzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmM5NDQwMGI4YzNkZTNhYTA2ZmIzOTg2MzljOTJkNDU0NGViOTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMVVYngFc5/sc+zAcxK9rwCzQo4W
RTApZ7w7zPX2z7qdXBMzrN4ZC7OpzVDHeOH3+WSbPHQnqL9pfaX9begeILZOzf2u
1Er/K1H5N6/Fn5+L2pkWiBY/pfM6kG2vKb/MsqySRW9RuEl3bUoNar74iPIZvRDq
hwEqBKNvDIPqJMo09LjKkAOx/TeM0x93baEfz+0Fcznb1CUyOP1ibqEYEECVJFz+
CiviBeDSrqvgX7S65rb3zLq5tlQCz3yiRip3Mow4ey/o8iQWf/LSh+TXxw+Pyc3N
2MxwzS0wWB2hcQg4p5T/NQc5izHXPAmE2zw/9gDzk3kNGKvKh/npYVEIxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFALJRAC4w946oG+zmGOcktRUTrkbMB8GA1UdIwQY
MBaAFMN4vDvTUO7cTzd8IkVWslDabd5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYt
NDQxNDU1OGZkY2JiLzEvQXNsRUFMakQzanFnYjdPWVk1eVMxRlJPdVJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9iZTY2ZTQtZjE0Yi00YjMxLWJkYWYtNDQxNDU1OGZkY2Ji
LzEvdzNpOE85TlE3dHhQTjN3aVJWYXlVTnB0M204LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXX+kMA0G
CSqGSIb3DQEBCwUAA4IBAQAyoMiUKSWdYgWiK+0fALo5UvR/vs7kwBxD69/4DaZ3
sUdwbRL7Gs8Fk20mBocD6ccENBRPGD2+ucyLH3+ls3juPL/zoYPv7H0nRK3/YJPX
L1y7Uy/f4YtaNBtrZ1T43NAtMzYZf5nsUtgDUwq2rd/zaDeu/VdnEfnF8NPn4tuw
cAiQGfhMHlLfPEAWPc80srazPci4WtzDld3dxL11PL/byD6AXD7uI0pROXe806UC
jTRTIJZ3Yx6w9iSnrI5+Ujh5D0whANOtfjer1HCKVGbNMEvoOzJmZHzfaYm1LJ+p
99dksRcZSuUxGyvQXMEHD2bxVardpW0gkP2cAGlCBizN
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:47:50 2025 by rpki-client