Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/eZbyMOXwsT8DM_J58p4lb08NYAk.roa
File: eZbyMOXwsT8DM_J58p4lb08NYAk.roa (raw, json)
Hash identifier: /WC96WsqKWPbAIxaI0PJMY/euc4BODG5VIUj9O8Scw8=
Subject key identifier: 79:96:F2:30:E5:F0:B1:3F:03:33:F2:79:F2:9E:25:6F:4F:0D:60:09
Certificate issuer: /CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Certificate serial: 019427B6166EE63CB072BDEAD016F45BDC09
Authority key identifier: 79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/eZbyMOXwsT8DM_J58p4lb08NYAk.roa
Signing time: Thu 02 Jan 2025 15:50:32 +0000
ROA not before: Thu 02 Jan 2025 15:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208964
IP address blocks: 193.28.243.0/24 maxlen: 24
193.28.244.0/24 maxlen: 24
193.28.249.0/24 maxlen: 24
194.124.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Apr 2025 14:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:16:6e:e6:3c:b0:72:bd:ea:d0:16:f4:5b:dc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=79d0d856764a3fee64be14f0a49f59a6865285d1
Validity
Not Before: Jan 2 15:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7996f230e5f0b13f0333f279f29e256f4f0d6009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:8f:a1:16:9a:61:4e:86:f8:5e:63:4b:fd:
14:51:87:67:cd:d8:2b:8f:ca:73:09:55:c7:44:39:
0e:54:cb:55:65:c6:43:ff:ea:2d:b8:b0:b9:f1:a6:
2a:c0:ba:92:0e:48:6b:15:11:5c:9e:86:aa:30:4d:
de:fd:47:1a:f4:22:52:a6:24:0b:31:3d:ea:ec:2f:
05:f4:07:df:3a:f0:8f:87:dc:57:95:77:ce:1d:c3:
5c:dd:f2:62:7d:56:4b:e0:1d:ba:6c:d9:0b:6c:56:
c1:73:d8:b8:53:11:e1:a6:70:aa:e6:ba:66:2c:59:
09:ba:b1:8b:8d:c5:73:55:d4:32:3a:03:8b:20:67:
8c:34:69:6a:a2:cd:a1:9d:dd:ce:da:6b:61:22:d2:
e2:31:6e:f3:7b:1d:de:05:bc:bf:24:cf:e0:ab:b8:
ce:21:39:66:25:28:c7:9f:b9:05:6a:6b:bf:06:da:
2d:04:91:56:4d:b0:73:de:50:87:ea:ea:b1:c7:bb:
cd:8f:ea:7e:21:36:15:a4:94:85:98:a5:70:62:37:
da:5c:4f:df:db:2a:86:fd:19:65:c2:dc:f7:30:1e:
c8:5b:a4:b2:b6:f3:36:03:23:e6:a5:c5:fb:b3:37:
39:74:3d:c9:52:5c:66:d2:c4:17:2f:f5:4e:85:79:
e7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:96:F2:30:E5:F0:B1:3F:03:33:F2:79:F2:9E:25:6F:4F:0D:60:09
X509v3 Authority Key Identifier:
keyid:79:D0:D8:56:76:4A:3F:EE:64:BE:14:F0:A4:9F:59:A6:86:52:85:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/edDYVnZKP-5kvhTwpJ9ZpoZShdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/eZbyMOXwsT8DM_J58p4lb08NYAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/43e309-75c5-4f40-9db3-f2bb69e75e74/1/edDYVnZKP-5kvhTwpJ9ZpoZShdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.28.243.0-193.28.244.255
193.28.249.0/24
194.124.62.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:fe:90:51:ee:f3:af:f3:55:ca:28:6e:7b:ba:d5:cc:50:fc:
bb:68:cf:b2:b9:6f:fd:9c:57:34:5a:11:51:b8:2f:d9:15:01:
6a:19:c8:16:16:b8:1d:c2:b1:fa:c6:9b:54:ba:b7:7b:82:bc:
80:1f:64:5d:50:d6:f1:a7:d7:6e:b1:5a:81:42:d7:8b:d1:60:
41:93:16:25:06:6a:e6:03:2d:0f:74:73:79:2e:f4:ad:27:8a:
02:1a:35:ce:25:61:ea:de:96:20:3c:97:50:1c:8b:8a:bd:db:
5d:bf:fc:e7:3a:f8:c2:96:b2:0f:f6:16:a4:ae:98:cd:6f:1f:
c7:ac:0b:b8:61:27:44:46:a8:32:12:40:f6:ba:c2:f2:75:e5:
63:01:ae:0e:e3:f8:f5:63:e4:99:60:bd:49:0f:d6:66:6a:ba:
a0:88:79:80:d9:a7:06:6a:26:d1:c1:8b:db:c3:e0:57:df:4b:
fb:54:96:02:9e:95:c2:7d:fe:9e:6c:9d:9c:31:9c:a3:f9:0f:
60:f6:ab:08:9c:94:c5:0e:3e:c1:f9:1b:15:ee:42:7b:b5:99:
ce:e4:ab:8c:7c:88:6e:59:4e:a7:b8:5b:b0:a7:1d:c3:6f:44:
50:9b:af:f4:39:3c:cf:0a:66:78:90:af:44:90:48:71:25:37:
94:ab:3a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 00:50:40 2025 by rpki-client