Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa
File: EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa (raw, json)
Hash identifier: aPdNP9kPyO6s7X261JfkO9iTF/P50zRcpOMkSUNk4gw=
Subject key identifier: 13:0C:87:F4:10:23:B6:80:F6:67:FF:95:79:90:D4:9C:EB:08:BF:66
Certificate issuer: /CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Certificate serial: 0194221F96E62462C2DCE459FCBD882DAD89
Authority key identifier: D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa
Signing time: Wed 01 Jan 2025 13:48:03 +0000
ROA not before: Wed 01 Jan 2025 13:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 263702
IP address blocks: 185.9.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:96:e6:24:62:c2:dc:e4:59:fc:bd:88:2d:ad:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c35bc9b7f8550be3e467c54a9d3a66e2443bd4
Validity
Not Before: Jan 1 13:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=130c87f41023b680f667ff957990d49ceb08bf66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2a:ef:35:43:6d:9c:22:46:82:6e:7c:25:c4:
16:2f:3a:c5:29:b2:08:19:16:b1:2a:f2:2c:54:8f:
17:54:a4:91:4e:18:b6:db:fb:e9:c9:c5:00:79:3f:
62:e5:59:07:71:21:f5:9a:94:a7:5e:89:fc:9d:93:
0d:58:bb:bf:6b:50:14:c2:d4:07:a3:4d:a8:24:a6:
9e:54:ef:b9:a7:90:e6:53:9d:bd:f2:8a:cf:98:97:
2a:b9:b8:eb:72:00:42:5c:f8:83:5b:1d:33:39:80:
96:a9:5a:f8:cf:69:88:c6:ff:d3:db:2c:aa:f2:4f:
dc:c4:f8:51:f4:c4:89:34:d5:e9:f2:4a:9c:76:98:
55:e5:35:9e:79:20:89:98:94:42:0d:a1:1c:1a:cf:
21:9f:f7:47:18:3c:43:1c:ec:fc:7a:74:7e:c2:7e:
f2:a5:7f:b6:93:7a:6a:f5:6f:23:6e:e9:69:74:14:
16:7d:66:eb:46:92:44:50:69:00:9e:96:12:cf:c8:
ad:58:16:e0:49:70:45:5b:02:3b:80:8d:37:c7:67:
9e:08:a2:5a:f9:4e:49:ab:0a:dc:ee:6f:3b:43:be:
2a:0a:24:fe:5e:f6:5c:52:42:63:70:27:2b:08:4e:
92:a0:50:e8:25:78:f8:9e:1e:63:46:25:7e:bb:c3:
2a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:0C:87:F4:10:23:B6:80:F6:67:FF:95:79:90:D4:9C:EB:08:BF:66
X509v3 Authority Key Identifier:
keyid:D3:C3:5B:C9:B7:F8:55:0B:E3:E4:67:C5:4A:9D:3A:66:E2:44:3B:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08Nbybf4VQvj5GfFSp06ZuJEO9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/EwyH9BAjtoD2Z_-VeZDUnOsIv2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/8ba8bb-c1c0-4d35-90a7-cda5c3766f03/1/08Nbybf4VQvj5GfFSp06ZuJEO9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.9.3.0/24
Signature Algorithm: sha256WithRSAEncryption
93:e0:ea:6e:66:d7:d9:f8:e7:f6:38:e0:c0:c8:78:f3:e4:7b:
b8:a8:1a:16:6f:bb:4a:f3:08:f1:8d:2c:0d:b7:f6:6f:4c:d5:
93:b7:a0:56:cf:8b:18:14:76:0f:e8:05:9c:45:02:53:89:a1:
cb:33:92:75:01:63:d1:c3:6a:f9:d1:25:db:ed:b2:3f:0e:72:
ce:6b:af:f1:08:49:01:69:9f:6f:52:fe:37:ca:ee:50:f3:9b:
2c:2f:97:de:4d:75:21:b3:18:bd:af:8a:85:0f:2c:4e:5b:ba:
3a:0d:a2:ff:fa:36:d0:6e:d0:72:0d:73:67:f4:fa:ed:cb:dc:
6e:13:82:d9:68:54:42:ae:ba:72:04:06:23:59:3d:be:9c:5b:
fc:c0:80:60:5f:a2:9b:01:ca:fc:5d:4a:b5:5b:a5:14:ee:47:
69:6b:01:4a:cc:54:81:33:4f:3c:f9:0c:2f:f6:5b:47:6c:97:
7c:3d:2a:7e:56:b8:47:7c:1a:11:ee:eb:17:bb:7a:fc:97:a1:
f0:f4:1b:2d:62:08:bd:c1:54:64:9a:95:78:82:30:9e:a8:af:
9c:5f:8a:86:36:0d:05:f2:3a:65:cc:58:11:8d:7a:bb:87:63:
7b:77:c3:ee:3f:de:90:96:52:3a:c3:b4:aa:b4:f4:d4:c2:6e:
b8:c3:02:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:34 2025 by rpki-client