Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dvTQjRyYYBYOqA-OqDgDs_ohPTA.roa
File: dvTQjRyYYBYOqA-OqDgDs_ohPTA.roa (raw, json)
Hash identifier: M47HUQjucs0HOViAfVZe1LnJcZYoBVXbxsBr7fveajI=
Subject key identifier: 76:F4:D0:8D:1C:98:60:16:0E:A8:0F:8E:A8:38:03:B3:FA:21:3D:30
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0196C392A85249578FFD7A26DA7D991FEE91
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dvTQjRyYYBYOqA-OqDgDs_ohPTA.roa
Signing time: Mon 12 May 2025 08:18:10 +0000
ROA not before: Mon 12 May 2025 08:18:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201409
IP address blocks: 93.123.118.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 10:50:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:92:a8:52:49:57:8f:fd:7a:26:da:7d:99:1f:ee:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: May 12 08:18:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=76f4d08d1c9860160ea80f8ea83803b3fa213d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d5:93:7f:85:e2:15:ad:bd:b3:c7:f9:54:e1:
ab:54:9a:af:2a:86:d1:cf:a4:5b:65:e5:83:7c:ec:
c4:b7:fa:14:2d:22:65:ef:e8:15:05:a1:53:bb:35:
95:ab:d4:fb:fc:3e:9f:ed:d7:de:df:3a:f8:a6:63:
22:17:1b:88:92:2d:a0:30:94:c8:eb:9f:f6:d9:45:
92:6e:52:6d:5b:2c:59:31:9a:dd:0f:0f:50:52:99:
bd:eb:43:72:81:ef:42:47:20:8b:e0:0b:6d:a0:55:
f6:7b:32:ed:06:b2:fa:76:41:7f:5b:48:4f:d1:6b:
31:e5:2d:22:f9:d5:e5:59:7c:af:44:f3:90:b4:6b:
1e:57:77:a4:b4:04:16:dd:5f:41:52:d1:bf:e5:fd:
bb:25:b3:d4:f0:4e:4d:59:ae:5b:a1:a5:57:d8:44:
a6:0d:71:43:19:f1:83:16:66:4a:62:ef:75:77:10:
11:0d:3e:01:ce:41:d3:c7:88:1f:5a:47:8f:5d:6e:
75:4d:bf:e7:91:ea:e3:e3:79:87:2f:b4:20:d4:e5:
0f:8d:ed:76:1f:09:a1:d1:76:9a:ae:a7:18:73:a2:
24:78:aa:19:e6:0e:a5:7f:0d:db:65:90:04:a9:37:
33:f0:db:19:c8:4d:f8:a7:d7:ea:c6:7c:e6:da:3b:
9f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F4:D0:8D:1C:98:60:16:0E:A8:0F:8E:A8:38:03:B3:FA:21:3D:30
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/dvTQjRyYYBYOqA-OqDgDs_ohPTA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.118.0/24
94.154.172.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:97:d9:3f:9d:f3:c1:88:88:92:65:24:3c:03:ac:ff:c7:88:
06:0f:e3:cb:7f:86:e7:9d:2f:6b:50:0c:c7:c8:d0:f3:ee:af:
e2:6d:3c:91:f7:9d:0a:6b:91:88:a8:56:58:af:b6:45:b3:df:
3a:61:93:27:93:c0:df:b9:e2:83:d7:37:0e:d9:94:1c:0d:51:
05:81:07:e0:ea:95:91:e0:b0:24:a6:3f:40:fd:1b:6a:53:32:
d1:2f:ab:c4:51:5e:79:0d:29:56:5e:72:a7:5d:de:e9:74:84:
96:a8:ae:e8:7a:d0:8e:25:da:37:d2:0f:ea:a7:37:96:67:a1:
ff:c8:e0:72:f1:88:b3:8e:a0:e4:b6:c8:fa:50:fe:0c:0d:33:
70:9b:0b:93:fa:15:e8:8d:ba:8d:8b:1a:1a:87:06:d1:1c:2c:
33:f8:93:de:f0:5c:18:cf:0d:fa:fb:d4:fc:e6:61:f2:74:d5:
d0:75:b5:ff:22:0d:da:84:fd:5c:4c:36:a5:99:aa:de:9f:f0:
c1:52:a5:00:08:e6:7b:fb:2a:79:72:27:d8:11:87:03:83:f6:
f0:c6:df:88:6b:91:d5:0e:23:b8:d1:03:90:d8:fc:74:e5:3d:
a6:bc:43:12:77:27:7a:b5:df:8c:ed:ca:09:56:74:0a:21:77:
68:01:be:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:20:41 2025 by rpki-client