Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/gui2rKy07mBGawSGkp9QeFk0qxw.roa
File: gui2rKy07mBGawSGkp9QeFk0qxw.roa (raw, json)
Hash identifier: et5CCH/OIQ0YHHUbTJtb5Xv6ESwWIQuP+SrQEvRVr8w=
Subject key identifier: 82:E8:B6:AC:AC:B4:EE:60:46:6B:04:86:92:9F:50:78:59:34:AB:1C
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 0197B0D5D7D9BC085C98B272835C2B59D3D7
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/gui2rKy07mBGawSGkp9QeFk0qxw.roa
Signing time: Fri 27 Jun 2025 10:01:33 +0000
ROA not before: Fri 27 Jun 2025 10:01:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137235
IP address blocks: 93.113.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b0:d5:d7:d9:bc:08:5c:98:b2:72:83:5c:2b:59:d3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Jun 27 10:01:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=82e8b6acacb4ee60466b0486929f50785934ab1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5c:47:aa:74:c4:a4:c7:a6:0e:23:84:11:c9:
86:ab:9c:95:12:f3:59:be:8f:78:4e:36:63:a9:56:
0d:a3:0a:e2:3a:27:94:c6:b7:0c:cd:30:55:50:b0:
bb:78:65:99:4f:29:11:eb:5c:50:e6:4e:a4:7e:b0:
c8:ba:75:8e:c6:1a:de:6b:8c:98:cf:36:2c:d1:6c:
b9:68:ea:3f:b6:44:ef:31:b0:d8:70:5d:12:47:5f:
f0:b1:55:50:2f:ef:ec:5c:99:d7:f0:cc:97:fc:79:
1e:12:1e:74:f0:b1:86:77:5f:85:28:9f:90:15:9f:
63:a5:6c:5c:03:3c:f1:43:d3:59:27:6c:21:40:f1:
ca:8b:4a:f9:78:08:f0:35:c6:c7:54:d6:a8:44:bc:
b1:1b:f4:b6:03:27:f6:2d:16:5b:c7:47:59:79:96:
7f:80:8b:1b:a2:4f:e6:19:8e:7a:7d:9d:30:dc:9a:
3b:fe:66:d3:ef:f1:5f:3e:fc:bb:39:03:48:dd:4f:
a8:55:f6:97:bd:61:4e:e6:ad:17:07:08:2c:1b:b3:
06:05:6a:10:a0:5f:32:52:51:02:8e:27:7d:48:c3:
c2:90:63:b5:bc:96:81:40:92:9b:65:2b:ab:53:c0:
20:d3:2c:2a:52:e9:0a:65:06:54:cc:cd:4d:34:0d:
76:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E8:B6:AC:AC:B4:EE:60:46:6B:04:86:92:9F:50:78:59:34:AB:1C
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/gui2rKy07mBGawSGkp9QeFk0qxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.179.0/24
Signature Algorithm: sha256WithRSAEncryption
67:03:08:cc:fd:e3:24:50:dd:08:36:01:d7:7d:18:2b:b2:be:
2b:a3:99:d1:50:58:76:e6:3d:a6:39:7a:85:8a:5c:74:c6:63:
58:06:4c:d9:ce:3d:d7:82:aa:5d:4b:5b:52:5b:73:70:8d:a7:
7a:e2:b5:fe:93:66:c1:1c:74:96:38:af:1d:e5:21:6a:84:42:
0e:9d:2f:c7:34:ae:af:63:10:2c:42:cc:ec:53:18:94:15:28:
b5:b0:92:7a:75:c2:78:13:3f:68:84:81:24:cf:51:df:a3:d8:
f4:a8:72:26:a7:79:61:05:3e:2a:ac:bd:b0:cc:76:50:c2:f2:
5c:8e:d3:d3:1f:a8:ea:ea:ae:14:08:82:bd:62:36:12:b8:60:
00:03:83:57:ac:52:85:e7:1b:1a:78:be:70:5c:ce:44:4e:0c:
39:89:f9:22:be:f2:3c:51:c8:9d:b5:8a:a6:2c:2b:b9:f0:26:
0b:d9:32:09:a4:d2:19:ce:d3:b2:cd:71:5b:60:50:9d:56:c3:
17:12:a4:f1:ab:fe:a2:6e:c3:0d:7e:dc:6d:d5:3e:36:99:ec:
2b:d8:ec:0f:37:a2:b6:b0:7e:a6:b2:f9:e8:9a:60:be:7a:58:
7d:e0:f9:2a:4e:75:cf:fd:08:be:17:93:d1:f7:3c:5b:08:1e:
96:2a:dd:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:18:55 2025 by rpki-client