Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa
File: 9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa (raw, json)
Hash identifier: mLUd+UrxmldwwslKwjDeIf5bagEinj/YnRBNdn1A2Vk=
Subject key identifier: F7:E6:5E:F7:8D:72:32:F6:FD:3C:1B:48:B0:9E:D8:72:7A:5E:9E:1D
Certificate issuer: /CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Certificate serial: 019423D71FE1E5BAA154B132C0A4DF03E980
Authority key identifier: F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa
Signing time: Wed 01 Jan 2025 21:48:08 +0000
ROA not before: Wed 01 Jan 2025 21:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15943
IP address blocks: 193.39.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 16 Apr 2025 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1f:e1:e5:ba:a1:54:b1:32:c0:a4:df:03:e9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e155548ec9abe11ef3be70606a4b987eae3825
Validity
Not Before: Jan 1 21:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f7e65ef78d7232f6fd3c1b48b09ed8727a5e9e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:67:b8:01:74:b0:5d:8d:37:dd:5c:14:37:22:
5e:49:d4:86:ce:69:6b:b4:69:47:be:73:b2:3d:61:
3f:85:66:fb:2b:ad:4e:d4:de:1d:82:81:a8:3e:d5:
1d:d5:05:f0:39:a4:59:50:5e:19:93:a2:63:5b:b7:
4a:6e:b2:a6:f6:34:af:26:86:9a:d4:91:7a:89:ea:
0b:19:22:e4:b4:2d:2f:97:e6:1b:1f:e7:d0:5e:bd:
a8:b8:71:96:5f:df:99:dd:57:f8:25:71:f8:0c:fa:
65:92:2a:ef:6e:6a:d7:c6:d1:38:89:cc:dd:b4:b8:
46:4d:7f:13:9e:75:a3:ac:01:e5:df:18:60:27:49:
15:d7:5c:08:a4:46:65:68:53:91:a9:3d:a1:ef:94:
65:86:c0:69:50:36:dc:a5:b5:84:0c:f4:3a:80:b5:
a2:33:63:d2:d7:1f:c5:fd:64:f6:8a:44:1b:f3:95:
c6:d6:c1:84:77:f5:c0:0c:17:54:28:84:84:f9:1b:
e1:3c:d6:d5:51:47:59:b8:1e:1f:bb:c1:07:12:ef:
08:d5:55:41:e4:07:38:88:8d:67:bc:bd:df:06:ed:
35:9a:16:71:7c:38:d3:32:1e:e0:ec:8f:db:ee:f1:
b1:7d:3f:68:b2:b8:06:ac:04:4e:a5:95:a0:12:cf:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E6:5E:F7:8D:72:32:F6:FD:3C:1B:48:B0:9E:D8:72:7A:5E:9E:1D
X509v3 Authority Key Identifier:
keyid:F4:E1:55:54:8E:C9:AB:E1:1E:F3:BE:70:60:6A:4B:98:7E:AE:38:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OFVVI7Jq-Ee875wYGpLmH6uOCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9-Ze941yMvb9PBtIsJ7Ycnpenh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/4ede9d-cdf8-4c28-88b3-c9f16e80b3c4/1/9OFVVI7Jq-Ee875wYGpLmH6uOCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.39.204.0/23
Signature Algorithm: sha256WithRSAEncryption
92:a7:3c:b7:08:bd:fd:54:72:ac:9c:8a:56:73:b5:9f:95:ff:
d6:a6:35:89:5a:3c:08:4e:36:1b:3a:a4:36:ba:52:4e:83:5d:
cd:9e:3e:2d:30:68:90:7c:53:5f:64:c1:47:8d:3b:80:b4:91:
fd:cf:ee:b9:5e:dc:f1:5d:16:f7:90:e8:59:54:55:37:8c:b7:
e3:05:12:f8:0c:f2:fd:37:13:5d:2d:56:ae:94:c0:d1:de:53:
a1:37:51:a5:4a:67:a0:27:6a:2e:cf:b5:90:4f:08:c6:ee:91:
7c:30:5a:de:47:ac:7c:ae:f2:af:29:ae:7e:bf:22:21:68:7d:
fc:09:19:d3:e3:b4:b6:e0:50:7e:52:8e:bc:ef:14:df:4e:b2:
24:ad:66:49:96:a5:57:fe:e8:b4:8d:c6:0d:7e:7f:a1:90:1b:
80:4c:06:b0:41:67:cf:15:18:fb:19:17:c9:61:f4:90:3f:38:
d6:2b:f4:07:2c:68:71:a8:4e:34:a9:3d:8e:cc:93:13:c4:62:
7a:3a:2c:fe:38:06:9b:f5:d6:29:3b:fe:0e:9e:04:84:63:ef:
80:06:92:42:bb:1f:5e:99:d6:77:15:d2:03:2b:86:89:93:4c:
5f:a2:63:34:ff:1d:60:84:a8:19:87:83:ba:99:ca:ef:3b:ef:
c9:05:75:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 01:55:10 2025 by rpki-client