Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/mr1YbEvgdQuYhoAQxLq13pDG3Xk.roa
File: mr1YbEvgdQuYhoAQxLq13pDG3Xk.roa (raw, json)
Hash identifier: w701bJj/u4XbtOJf+uHhePRlT4YH8B1JtsulPqw9bWk=
Subject key identifier: 9A:BD:58:6C:4B:E0:75:0B:98:86:80:10:C4:BA:B5:DE:90:C6:DD:79
Certificate issuer: /CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Certificate serial: 019425217096A685D2D3DC87265D406BE4CB
Authority key identifier: C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/mr1YbEvgdQuYhoAQxLq13pDG3Xk.roa
Signing time: Thu 02 Jan 2025 03:48:56 +0000
ROA not before: Thu 02 Jan 2025 03:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13037
IP address blocks: 193.19.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.mft
rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:28:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:70:96:a6:85:d2:d3:dc:87:26:5d:40:6b:e4:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9c02d4234f4bc4e87555e41c03779d5620a5155
Validity
Not Before: Jan 2 03:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9abd586c4be0750b98868010c4bab5de90c6dd79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:30:dc:43:b4:e2:d4:8b:cf:1f:4e:3f:17:
c7:45:78:36:66:26:d6:1c:ce:94:79:c0:18:1c:e8:
b0:ba:de:e1:a5:3f:46:cd:80:59:e7:21:19:f5:f9:
34:64:e6:a8:e8:7f:25:0a:b8:ac:16:3f:bd:b6:8a:
32:9f:45:32:8c:84:a8:ca:6a:da:47:e2:58:c0:32:
de:16:4f:e0:4a:14:34:c1:68:07:e1:db:f7:61:74:
53:16:c8:d6:29:2e:d5:12:5e:fc:1f:d5:ee:a8:da:
ae:90:2d:f6:64:5e:a3:49:df:4d:84:d9:83:e3:b0:
fd:9b:cc:cc:0d:90:cf:cf:fd:50:9a:c6:a0:fb:48:
1f:36:10:23:09:56:ac:f1:d8:3b:81:95:72:9a:b0:
4a:56:68:f2:84:1a:53:68:c7:ef:92:f8:59:60:8e:
a1:8d:4d:5d:e2:2e:2a:89:f8:81:48:02:f4:29:ef:
27:76:d9:b2:a9:94:67:2d:c0:0e:2d:34:01:1d:b1:
7d:32:02:7c:3f:e5:8e:c1:95:74:c6:68:9d:15:31:
7e:f2:6f:73:70:a3:d5:42:d5:77:69:0d:55:1d:a4:
cc:2a:d0:42:e8:88:c4:03:a8:6a:68:5b:71:45:b7:
fe:f6:af:a7:4a:51:51:d6:4f:19:6c:75:a2:a0:90:
c1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BD:58:6C:4B:E0:75:0B:98:86:80:10:C4:BA:B5:DE:90:C6:DD:79
X509v3 Authority Key Identifier:
keyid:C9:C0:2D:42:34:F4:BC:4E:87:55:5E:41:C0:37:79:D5:62:0A:51:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ycAtQjT0vE6HVV5BwDd51WIKUVU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/mr1YbEvgdQuYhoAQxLq13pDG3Xk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/685232-f5e9-41d6-b94e-1a6ce5faf916/1/ycAtQjT0vE6HVV5BwDd51WIKUVU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.156.0/23
Signature Algorithm: sha256WithRSAEncryption
92:fe:9c:67:30:4f:37:b3:ca:89:d8:d7:6d:b4:89:82:ec:6a:
59:e0:64:3a:88:f5:3e:d4:8b:a0:12:4d:00:de:8d:51:73:09:
b5:7d:94:ab:81:b6:59:ee:57:d0:ff:93:1b:1d:bb:19:3d:d1:
95:1f:57:a7:91:04:05:de:3d:ef:71:ec:66:58:ed:15:4b:9a:
53:96:db:d4:e7:bc:61:77:c9:29:d3:9f:53:85:92:c6:aa:07:
8c:21:b7:e6:a5:8c:4e:b2:1e:f9:b3:1f:41:0f:72:24:9a:a1:
b9:8d:88:9b:97:c5:63:03:32:a9:83:dc:be:1a:a1:3f:8d:7a:
81:7f:3f:12:1c:f9:4e:3d:ab:e4:7e:ca:48:ac:1d:2b:9d:cf:
29:54:2b:3a:21:ef:32:03:d9:8f:e4:bb:10:64:cf:43:a6:44:
e0:81:0a:47:e2:09:2c:68:f8:16:47:44:66:d2:17:b7:ad:a7:
d3:81:e9:71:a8:ec:43:c6:3a:13:c5:63:2b:75:64:0a:dd:21:
16:10:3d:ec:58:24:b8:91:28:17:30:96:53:0a:75:c3:71:5d:
23:37:db:be:77:5c:06:04:9c:4d:6d:ce:ff:06:a8:11:98:d3:
19:b3:8a:04:b5:08:fc:9b:f0:dc:1c:79:c0:76:e5:10:45:dd:
3f:e4:87:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIXCWpoXS09yHJl1Aa+TLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5YzAyZDQyMzRmNGJjNGU4NzU1NWU0MWMwMzc3OWQ1NjIw
YTUxNTUwHhcNMjUwMTAyMDM0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YWJkNTg2YzRiZTA3NTBiOTg4NjgwMTBjNGJhYjVkZTkwYzZkZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqgw3EO04tSLzx9OPxfHRXg2ZibW
HM6UecAYHOiwut7hpT9GzYBZ5yEZ9fk0ZOao6H8lCrisFj+9tooyn0UyjISoymra
R+JYwDLeFk/gShQ0wWgH4dv3YXRTFsjWKS7VEl78H9XuqNqukC32ZF6jSd9NhNmD
47D9m8zMDZDPz/1Qmsag+0gfNhAjCVas8dg7gZVymrBKVmjyhBpTaMfvkvhZYI6h
jU1d4i4qifiBSAL0Ke8ndtmyqZRnLcAOLTQBHbF9MgJ8P+WOwZV0xmidFTF+8m9z
cKPVQtV3aQ1VHaTMKtBC6IjEA6hqaFtxRbf+9q+nSlFR1k8ZbHWioJDBawIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJq9WGxL4HULmIaAEMS6td6Qxt15MB8GA1UdIwQY
MBaAFMnALUI09LxOh1VeQcA3edViClFVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82ODUyMzItZjVlOS00MWQ2LWI5NGUt
MWE2Y2U1ZmFmOTE2LzEvbXIxWWJFdmdkUXVZaG9BUXhMcTEzcERHM1hrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS82ODUyMzItZjVlOS00MWQ2LWI5NGUtMWE2Y2U1ZmFmOTE2
LzEveWNBdFFqVDB2RTZIVlY1QndEZDUxV0lLVVZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwROcMA0G
CSqGSIb3DQEBCwUAA4IBAQCS/pxnME83s8qJ2NdttImC7GpZ4GQ6iPU+1IugEk0A
3o1Rcwm1fZSrgbZZ7lfQ/5MbHbsZPdGVH1enkQQF3j3vcexmWO0VS5pTltvU57xh
d8kp059ThZLGqgeMIbfmpYxOsh75sx9BD3IkmqG5jYibl8VjAzKpg9y+GqE/jXqB
fz8SHPlOPavkfspIrB0rnc8pVCs6Ie8yA9mP5LsQZM9DpkTggQpH4gksaPgWR0Rm
0he3rafTgelxqOxDxjoTxWMrdWQK3SEWED3sWCS4kSgXMJZTCnXDcV0jN9u+d1wG
BJxNbc7/BqgRmNMZs4oEtQj8m/DcHHnAduUQRd0/5IdV
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:25 2025 by rpki-client