Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/keFbyWRx9CXFGktePoeob--QEYA.roa
File: keFbyWRx9CXFGktePoeob--QEYA.roa (raw, json)
Hash identifier: iRz71Y07r23FnbminnQhY3v7rzlViMoRNVr4WwEmWj0=
Subject key identifier: 91:E1:5B:C9:64:71:F4:25:C5:1A:4B:5E:3E:87:A8:6F:EF:90:11:80
Certificate issuer: /CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Certificate serial: 0194266BC5F43E8A8D580A95239FA0B31024
Authority key identifier: F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/keFbyWRx9CXFGktePoeob--QEYA.roa
Signing time: Thu 02 Jan 2025 09:49:44 +0000
ROA not before: Thu 02 Jan 2025 09:49:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 194.30.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c5:f4:3e:8a:8d:58:0a:95:23:9f:a0:b3:10:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f454f84f78085f8ea03a49689cbe372e74ac153c
Validity
Not Before: Jan 2 09:49:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91e15bc96471f425c51a4b5e3e87a86fef901180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5d:7a:a7:0b:b2:ae:a3:92:0d:a9:7a:e7:02:
6b:04:7f:6e:80:12:69:bf:e4:ef:ab:8f:e3:a7:36:
0c:fe:75:f0:00:71:10:75:78:5c:3d:03:c5:2c:a0:
70:a2:e9:4f:89:05:47:f8:38:b1:c5:43:6d:7d:de:
a0:d7:6d:52:5f:81:53:f1:69:5a:a5:0e:3f:bb:2e:
2e:b5:ca:53:84:0d:17:fe:83:a0:ed:da:59:c6:8e:
75:40:7c:87:93:9b:37:a0:e0:51:58:2d:ff:55:9a:
7b:4c:4f:ee:e5:dd:8d:56:49:54:ff:d4:43:ad:f5:
6e:b0:ac:ab:52:85:3f:76:29:63:a9:0f:b4:1b:2a:
56:4c:5d:15:3f:18:17:b4:9d:2b:b7:59:25:0b:8e:
ef:44:cb:05:e1:25:73:95:62:6d:64:f2:78:8c:b1:
89:f8:0d:4d:cb:fd:f6:41:9f:cb:c2:5f:0a:2b:e4:
89:8f:37:5b:40:5e:e8:38:70:b1:03:3b:7e:5e:d2:
e9:52:c0:3e:71:47:b7:3b:51:e2:f7:16:88:ee:e3:
63:69:9b:13:0b:92:31:fa:68:9b:30:c4:7a:2e:12:
30:12:25:aa:46:bc:36:c1:45:c8:18:a5:3f:34:29:
de:bd:f5:6b:cd:8a:52:b6:f5:d7:19:c4:a7:51:04:
5f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:E1:5B:C9:64:71:F4:25:C5:1A:4B:5E:3E:87:A8:6F:EF:90:11:80
X509v3 Authority Key Identifier:
keyid:F4:54:F8:4F:78:08:5F:8E:A0:3A:49:68:9C:BE:37:2E:74:AC:15:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9FT4T3gIX46gOklonL43LnSsFTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/keFbyWRx9CXFGktePoeob--QEYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/03a0aa-2b69-4a98-a61b-60b988c95230/1/9FT4T3gIX46gOklonL43LnSsFTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.30.175.0/24
Signature Algorithm: sha256WithRSAEncryption
17:a6:f0:2a:6e:4f:d3:8f:a5:4a:59:7f:24:d1:04:94:8d:34:
b4:ff:c2:8f:b5:3a:3a:75:12:dd:62:0b:7b:e5:e5:ec:db:eb:
58:8a:e7:c6:37:a8:20:9c:ea:cd:b3:f8:c2:76:d9:a1:11:f1:
fb:cf:cd:ee:5d:20:13:21:65:4d:9b:01:e8:24:e5:ee:47:d9:
a1:79:f3:25:25:f2:ab:06:af:cb:6a:a5:c8:b4:fc:05:79:ff:
17:dc:e9:1b:32:57:e3:c1:c0:cc:48:8e:f6:59:a6:f0:89:4b:
b7:02:f3:a1:1e:7f:ab:c0:c5:cb:1f:c1:49:22:72:d1:c4:52:
99:47:46:d4:75:c2:bb:00:bd:67:98:cd:3c:87:69:e1:10:ae:
f3:6d:4d:36:1f:22:1c:98:fa:bc:1e:e4:b4:66:57:ad:37:b3:
03:cf:c8:f9:f0:7d:a5:ad:30:ff:a2:98:4e:72:0a:06:3d:ae:
44:97:16:0b:ed:15:06:9d:d2:ce:47:0d:1f:2f:44:9e:d7:86:
9b:0c:d5:0f:27:e7:7f:e1:4b:61:2b:1e:16:34:9d:02:07:5a:
f0:29:66:63:fb:cd:ff:f1:77:79:63:b7:bb:a6:7a:59:b2:d7:
a0:25:27:90:66:1d:a1:47:e7:30:3c:7f:13:80:ba:58:a3:27:
77:63:85:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma8X0PoqNWAqVI5+gsxAkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0NTRmODRmNzgwODVmOGVhMDNhNDk2ODljYmUzNzJlNzRh
YzE1M2MwHhcNMjUwMTAyMDk0OTQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWUxNWJjOTY0NzFmNDI1YzUxYTRiNWUzZTg3YTg2ZmVmOTAxMTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5V16pwuyrqOSDal65wJrBH9ugBJp
v+Tvq4/jpzYM/nXwAHEQdXhcPQPFLKBwoulPiQVH+DixxUNtfd6g121SX4FT8Wla
pQ4/uy4utcpThA0X/oOg7dpZxo51QHyHk5s3oOBRWC3/VZp7TE/u5d2NVklU/9RD
rfVusKyrUoU/diljqQ+0GypWTF0VPxgXtJ0rt1klC47vRMsF4SVzlWJtZPJ4jLGJ
+A1Ny/32QZ/Lwl8KK+SJjzdbQF7oOHCxAzt+XtLpUsA+cUe3O1Hi9xaI7uNjaZsT
C5Ix+mibMMR6LhIwEiWqRrw2wUXIGKU/NCnevfVrzYpStvXXGcSnUQRfvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJHhW8lkcfQlxRpLXj6HqG/vkBGAMB8GA1UdIwQY
MBaAFPRU+E94CF+OoDpJaJy+Ny50rBU8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUZUNFQzZ0lYNDZnT2tsb25MNDNMblNzRlR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8wM2EwYWEtMmI2OS00YTk4LWE2MWIt
NjBiOTg4Yzk1MjMwLzEva2VGYnlXUng5Q1hGR2t0ZVBvZW9iLS1RRVlBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8wM2EwYWEtMmI2OS00YTk4LWE2MWItNjBiOTg4Yzk1MjMw
LzEvOUZUNFQzZ0lYNDZnT2tsb25MNDNMblNzRlR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwh6vMA0G
CSqGSIb3DQEBCwUAA4IBAQAXpvAqbk/Tj6VKWX8k0QSUjTS0/8KPtTo6dRLdYgt7
5eXs2+tYiufGN6ggnOrNs/jCdtmhEfH7z83uXSATIWVNmwHoJOXuR9mhefMlJfKr
Bq/LaqXItPwFef8X3OkbMlfjwcDMSI72WabwiUu3AvOhHn+rwMXLH8FJInLRxFKZ
R0bUdcK7AL1nmM08h2nhEK7zbU02HyIcmPq8HuS0ZletN7MDz8j58H2lrTD/ophO
cgoGPa5ElxYL7RUGndLORw0fL0Se14abDNUPJ+d/4UthKx4WNJ0CB1rwKWZj+83/
8Xd5Y7e7pnpZstegJSeQZh2hR+cwPH8TgLpYoyd3Y4W/
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:53:16 2025 by rpki-client