Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/RBsyWLfZJ_zLx9s-cNB-ptFfujg.roa
File: RBsyWLfZJ_zLx9s-cNB-ptFfujg.roa (raw, json)
Hash identifier: IyFw4v8rAxvkA10wGK9XNcDIKqaq/q2xa7mB4hR4CMY=
Subject key identifier: 44:1B:32:58:B7:D9:27:FC:CB:C7:DB:3E:70:D0:7E:A6:D1:5F:BA:38
Certificate issuer: /CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Certificate serial: 019426D9E196001DA0883F21F79D00C605AB
Authority key identifier: 9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/RBsyWLfZJ_zLx9s-cNB-ptFfujg.roa
Signing time: Thu 02 Jan 2025 11:50:00 +0000
ROA not before: Thu 02 Jan 2025 11:50:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20473
IP address blocks: 193.34.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.mft
rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e1:96:00:1d:a0:88:3f:21:f7:9d:00:c6:05:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3533d662c3f0d6bb1e692f3fab6d7ba3824c28
Validity
Not Before: Jan 2 11:50:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=441b3258b7d927fccbc7db3e70d07ea6d15fba38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d1:0f:9c:fa:31:10:d9:84:c8:b2:46:5a:8c:
7a:27:63:b9:0c:63:da:36:08:dd:cf:3a:e6:19:2a:
e3:7c:18:f1:c7:f2:23:35:f1:bd:45:2c:ec:0b:ed:
99:7f:31:26:99:a9:c0:1d:b5:48:fd:29:22:3a:6a:
fa:9f:b9:73:86:c3:7a:ac:fc:5c:11:b7:68:a8:b7:
33:5a:22:de:06:1b:c0:15:e2:70:9b:5f:6a:81:15:
67:d8:4a:4c:68:0f:ba:8a:f5:61:0b:4b:6a:64:17:
a5:b0:92:d9:d6:19:2b:39:97:f5:96:32:96:bb:ce:
39:ff:47:a1:1b:eb:c2:e6:f7:cf:fd:5b:fb:e0:d0:
6f:93:91:ae:b9:3e:dc:3f:c7:67:57:1a:dc:4f:f7:
7d:76:49:8d:6f:4a:aa:5a:ac:89:f1:ba:bd:9c:d0:
9e:c7:de:62:20:8e:12:d9:11:7f:c6:13:75:ca:8b:
ae:03:b7:48:8c:ec:e3:42:18:5e:df:52:87:73:5d:
16:50:29:d7:af:45:dc:a8:aa:3e:41:7f:67:2f:e6:
f4:ce:b4:b2:39:62:12:21:77:9e:20:1b:cc:e5:99:
a9:e3:64:bb:6d:73:60:da:95:16:51:47:b5:a4:fe:
e0:18:58:83:df:32:2b:63:9f:a8:31:97:37:cb:d5:
1a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:1B:32:58:B7:D9:27:FC:CB:C7:DB:3E:70:D0:7E:A6:D1:5F:BA:38
X509v3 Authority Key Identifier:
keyid:9E:35:33:D6:62:C3:F0:D6:BB:1E:69:2F:3F:AB:6D:7B:A3:82:4C:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/njUz1mLD8Na7HmkvP6tte6OCTCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/RBsyWLfZJ_zLx9s-cNB-ptFfujg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/bebe6d-16b3-4b02-b205-a783413099d3/1/njUz1mLD8Na7HmkvP6tte6OCTCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.34.50.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ef:ce:ec:91:08:14:6a:f7:5b:9b:43:26:3e:6c:a3:70:f8:
60:a5:87:e5:39:14:ed:e7:e7:b2:8d:94:0c:be:02:71:ca:db:
e7:46:04:4f:2f:e7:d0:eb:39:09:2c:e8:b0:f0:85:d5:2c:ff:
ff:c8:a3:66:fb:e3:c9:79:1f:0f:18:bc:38:55:d9:11:4a:63:
3e:d7:a6:99:ab:d9:79:a5:31:df:21:de:77:62:9d:83:a3:6d:
9c:01:22:a7:d8:a1:dd:f9:ba:26:a1:8f:4d:d5:73:a4:ce:3b:
78:d4:d7:63:08:63:7f:52:ed:0b:f4:85:91:b6:d6:0a:9e:bf:
1b:5d:95:a4:7c:f3:cf:45:5a:e5:3a:7c:3e:2c:9b:46:1b:66:
53:1e:55:7f:7b:14:ad:4c:84:d7:43:3d:ae:11:f9:3f:33:6a:
47:a7:28:1d:b7:1b:db:10:28:8f:01:92:89:a3:6d:b3:63:58:
ba:3c:47:61:c0:d5:ca:d4:0c:c1:4b:37:5b:bf:dd:bc:a7:a2:
16:4a:16:0f:9d:5c:85:2f:8d:cd:36:12:b2:5a:d7:9e:a2:29:
4d:2d:5b:7e:2b:c3:5f:ad:6d:a3:36:7f:c1:ba:60:63:6d:eb:
88:21:8b:18:1a:fc:ff:33:68:93:ad:90:68:5d:a6:b0:12:6a:
27:17:a8:1f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2eGWAB2giD8h950AxgWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMzUzM2Q2NjJjM2YwZDZiYjFlNjkyZjNmYWI2ZDdiYTM4
MjRjMjgwHhcNMjUwMTAyMTE1MDAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDFiMzI1OGI3ZDkyN2ZjY2JjN2RiM2U3MGQwN2VhNmQxNWZiYTM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutEPnPoxENmEyLJGWox6J2O5DGPa
NgjdzzrmGSrjfBjxx/IjNfG9RSzsC+2ZfzEmmanAHbVI/SkiOmr6n7lzhsN6rPxc
EbdoqLczWiLeBhvAFeJwm19qgRVn2EpMaA+6ivVhC0tqZBelsJLZ1hkrOZf1ljKW
u845/0ehG+vC5vfP/Vv74NBvk5GuuT7cP8dnVxrcT/d9dkmNb0qqWqyJ8bq9nNCe
x95iII4S2RF/xhN1youuA7dIjOzjQhhe31KHc10WUCnXr0XcqKo+QX9nL+b0zrSy
OWISIXeeIBvM5Zmp42S7bXNg2pUWUUe1pP7gGFiD3zIrY5+oMZc3y9UajwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEQbMli32Sf8y8fbPnDQfqbRX7o4MB8GA1UdIwQY
MBaAFJ41M9Ziw/DWux5pLz+rbXujgkwoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUt
YTc4MzQxMzA5OWQzLzEvUkJzeVdMZlpKX3pMeDlzLWNOQi1wdEZmdWpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS9iZWJlNmQtMTZiMy00YjAyLWIyMDUtYTc4MzQxMzA5OWQz
LzEvbmpVejFtTEQ4TmE3SG1rdlA2dHRlNk9DVENnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSIyMA0G
CSqGSIb3DQEBCwUAA4IBAQCT787skQgUavdbm0MmPmyjcPhgpYflORTt5+eyjZQM
vgJxytvnRgRPL+fQ6zkJLOiw8IXVLP//yKNm++PJeR8PGLw4VdkRSmM+16aZq9l5
pTHfId53Yp2Do22cASKn2KHd+bomoY9N1XOkzjt41NdjCGN/Uu0L9IWRttYKnr8b
XZWkfPPPRVrlOnw+LJtGG2ZTHlV/exStTITXQz2uEfk/M2pHpygdtxvbECiPAZKJ
o22zY1i6PEdhwNXK1AzBSzdbv928p6IWShYPnVyFL43NNhKyWteeoilNLVt+K8Nf
rW2jNn/BumBjbeuIIYsYGvz/M2iTrZBoXaawEmonF6gf
-----END CERTIFICATE-----
Generated at Sat Apr 5 13:15:14 2025 by rpki-client