Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/bS5YSgAKX0HkW54E0HVUNxldIao.roa
File: bS5YSgAKX0HkW54E0HVUNxldIao.roa (raw, json)
Hash identifier: bgWqYBeGr9CBOGfawWHHQ8eLh1SoZErK0UBEsECW+bA=
Subject key identifier: 6D:2E:58:4A:00:0A:5F:41:E4:5B:9E:04:D0:75:54:37:19:5D:21:AA
Certificate issuer: /CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Certificate serial: 0197B2BFC86D013F640B5A86A1FEDDCC0B34
Authority key identifier: 2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/bS5YSgAKX0HkW54E0HVUNxldIao.roa
Signing time: Fri 27 Jun 2025 18:56:42 +0000
ROA not before: Fri 27 Jun 2025 18:56:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34984
IP address blocks: 93.93.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b2:bf:c8:6d:01:3f:64:0b:5a:86:a1:fe:dd:cc:0b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1172c1c73f971a9fb2e89b7917200c500ee407
Validity
Not Before: Jun 27 18:56:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6d2e584a000a5f41e45b9e04d0755437195d21aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:67:2e:c3:67:2a:04:61:48:6b:93:7f:91:
98:8b:1c:23:dc:d3:d1:fc:15:ee:56:9d:f8:ed:4c:
76:97:0f:1a:94:28:cd:df:f8:19:f3:86:ee:7b:95:
1e:00:02:e6:eb:a8:07:38:46:65:60:7a:09:b5:45:
4c:66:05:fb:5e:21:0e:94:f0:41:af:de:20:c1:2d:
cd:09:92:a7:8b:74:ac:20:4d:00:16:ca:35:06:63:
68:04:33:44:ba:a9:b2:23:28:0b:c2:00:41:02:c2:
4f:79:8a:d9:48:33:02:29:47:35:fd:59:85:df:30:
fb:93:9f:5e:00:88:81:08:c5:7a:1d:13:65:fd:32:
68:81:3b:60:4d:32:05:c0:56:69:78:ea:de:e9:c7:
e7:a0:47:7f:8f:2b:ed:d2:d2:93:62:b8:65:e4:c8:
e0:ba:3d:01:e6:9e:02:2d:63:17:3c:14:bc:0c:5e:
25:21:90:81:02:3f:d5:91:20:93:e1:f9:3a:b2:9c:
86:3d:71:16:e6:76:82:0c:48:ec:d2:be:ad:d1:cc:
8c:10:ac:72:54:54:ec:9e:36:94:6e:65:42:69:3f:
59:92:48:de:40:ea:22:fb:d8:49:4b:c8:5b:9a:ca:
fc:d0:e0:79:92:e9:15:e1:4a:8f:79:a1:f7:32:17:
25:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:2E:58:4A:00:0A:5F:41:E4:5B:9E:04:D0:75:54:37:19:5D:21:AA
X509v3 Authority Key Identifier:
keyid:2D:11:72:C1:C7:3F:97:1A:9F:B2:E8:9B:79:17:20:0C:50:0E:E4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRFywcc_lxqfsuibeRcgDFAO5Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/bS5YSgAKX0HkW54E0HVUNxldIao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/79aca9-51dd-4f22-b404-d53866e9186a/1/LRFywcc_lxqfsuibeRcgDFAO5Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.93.104.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:a9:4c:07:0f:44:5d:4b:27:a0:28:9b:75:3e:d1:7e:82:21:
e7:b4:ea:3d:b5:de:ef:70:e0:44:62:cb:a5:6c:22:ba:6f:02:
be:d9:fd:75:09:68:27:97:26:b1:cc:d3:3d:81:e4:aa:ad:35:
d9:81:68:0a:68:c9:f5:26:2c:48:a4:9e:62:fa:38:ec:e6:01:
c1:f2:0e:38:26:13:9e:4b:e0:a8:c0:fa:74:f5:14:53:80:b9:
e1:b0:84:d4:92:48:b5:07:45:bc:ab:f6:ff:ad:15:d7:4e:13:
6c:fb:e6:d4:81:ef:26:2e:0d:62:95:dd:ca:92:06:2b:da:bb:
bc:55:29:f5:f5:8e:f0:b0:23:72:0b:8b:17:1e:cc:9f:99:58:
17:02:e3:c8:3b:83:39:a2:2f:1c:62:d4:70:2a:21:d2:57:e5:
40:1b:b6:b8:17:7a:bf:05:48:ca:08:dd:a6:fb:98:9c:ca:26:
ba:4b:48:6c:7b:26:15:23:30:f3:d7:ae:87:51:f1:65:ac:6e:
eb:96:d4:0d:55:69:c4:53:36:37:a4:50:f6:76:54:97:25:1a:
df:65:ba:ad:16:72:24:d5:d3:f6:cc:cd:09:e7:ce:51:b4:6b:
d5:80:25:dd:a5:6e:6b:9f:48:09:92:3c:78:1c:bc:df:a9:28:
90:fd:ff:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 14:08:44 2025 by rpki-client