Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1e3pGqIyrfm9l4tqQ_0wPiVutMo.roa
File: 1e3pGqIyrfm9l4tqQ_0wPiVutMo.roa (raw, json)
Hash identifier: 24aexiYaXRGqjdfXTQOXvZln1lsCByoueSHYTaaj6Pg=
Subject key identifier: D5:ED:E9:1A:A2:32:AD:F9:BD:97:8B:6A:43:FD:30:3E:25:6E:B4:CA
Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Certificate serial: 019778FF78374BC893B1F813EF5A4DF9D7D3
Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1e3pGqIyrfm9l4tqQ_0wPiVutMo.roa
Signing time: Mon 16 Jun 2025 13:48:17 +0000
ROA not before: Mon 16 Jun 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213511
IP address blocks: 93.152.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 05:58:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:ff:78:37:4b:c8:93:b1:f8:13:ef:5a:4d:f9:d7:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c
Validity
Not Before: Jun 16 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5ede91aa232adf9bd978b6a43fd303e256eb4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f8:42:40:e2:4e:c5:6a:d4:57:e0:90:43:45:
f5:27:f1:ee:c2:a2:10:19:10:ca:82:32:d0:cf:5f:
06:b6:0d:93:15:e1:62:0c:b5:e2:e5:25:7f:1b:6f:
06:b9:d2:5d:b0:53:20:81:62:f1:8f:1d:a6:11:9e:
bb:db:9e:54:c8:90:b7:e6:38:89:5c:83:bd:1d:88:
9c:a2:bf:c6:32:60:cd:8f:0d:98:ba:27:d5:c1:f7:
b0:91:06:d6:81:e3:d6:85:33:f4:3e:26:c4:60:8c:
93:33:ac:98:c8:06:52:62:f1:b2:eb:fe:bc:9d:9f:
ff:6f:37:f4:86:5b:bf:17:3e:5b:3b:60:d6:b0:0f:
b1:f2:79:6e:6d:6b:68:64:b2:b2:05:79:27:47:d2:
27:f5:f4:0e:ae:5d:1b:91:be:eb:4c:af:b1:fb:7b:
5f:b0:aa:80:77:d4:26:0b:50:2c:e1:29:c3:d7:86:
10:fa:09:59:e0:e0:f7:43:57:63:82:19:ab:04:8a:
da:62:a9:f8:39:57:45:2f:8e:81:85:c9:b1:e2:18:
b2:9f:03:25:7b:72:e0:25:40:ac:77:fe:0c:64:db:
75:64:4e:4b:95:8d:18:8f:21:5e:b7:0d:eb:ed:bc:
17:8f:e2:a2:a4:bf:44:9c:0e:3d:b9:15:95:4d:02:
54:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:ED:E9:1A:A2:32:AD:F9:BD:97:8B:6A:43:FD:30:3E:25:6E:B4:CA
X509v3 Authority Key Identifier:
keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/1e3pGqIyrfm9l4tqQ_0wPiVutMo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.152.219.0/24
Signature Algorithm: sha256WithRSAEncryption
12:63:27:7d:c9:ad:fd:86:ef:f2:20:86:ea:75:57:bf:4c:0e:
4d:fe:ea:a3:2e:7a:05:03:26:7a:e6:af:84:e4:0d:a8:d8:b0:
8e:a1:ee:1e:68:6f:74:53:c4:c7:c1:e5:2d:30:17:b9:68:02:
08:d2:d2:a5:19:ad:b9:83:7f:ce:9d:cd:25:0d:ae:ec:cc:cd:
1f:73:dc:c4:2a:d6:9d:e4:4d:70:b9:4f:03:8c:9c:4a:5f:da:
f0:48:5a:87:21:83:d0:90:d2:a2:7a:1a:1c:54:8c:8d:8b:ce:
90:dd:f7:7c:58:ff:06:3c:4e:9a:a2:d5:08:27:ee:d9:fc:0a:
15:b3:52:59:0c:e8:7c:e5:65:4d:5c:a6:49:2e:99:4a:b6:72:
58:91:67:88:f8:a3:fb:1e:83:d0:cb:7d:cb:c2:57:eb:35:a4:
4f:b8:e6:99:de:35:f1:d5:1d:33:40:60:4e:51:76:06:91:cb:
8b:be:e0:25:e0:69:c1:94:fe:65:a5:e8:c0:7e:cb:2c:e7:60:
15:2e:86:af:20:0f:28:26:45:66:1d:bd:3a:63:5a:ae:03:c4:
60:c5:d4:c0:ef:db:bf:11:7d:8a:34:30:f7:63:ac:9b:bb:d1:
fe:35:ab:b5:2f:56:33:8b:98:fc:a2:19:70:79:73:2d:0b:6d:
64:e5:67:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 14:44:54 2025 by rpki-client