Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/ey-_9xxGKnsOGGPU15--RgSssm4.roa
File: ey-_9xxGKnsOGGPU15--RgSssm4.roa (raw, json)
Hash identifier: 0cRLbNHAlwoA+yxbwyO5Q2GpY1t4qSENfOLW5G8ijZg=
Subject key identifier: 7B:2F:BF:F7:1C:46:2A:7B:0E:18:63:D4:D7:9F:BE:46:04:AC:B2:6E
Certificate issuer: /CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Certificate serial: 0195C3DE2237D3056DD5CD0B371CDCD98808
Authority key identifier: 1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/ey-_9xxGKnsOGGPU15--RgSssm4.roa
Signing time: Sun 23 Mar 2025 16:37:49 +0000
ROA not before: Sun 23 Mar 2025 16:37:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13347
IP address blocks: 193.176.98.0/24 maxlen: 24
2a12:f3c0::/29 maxlen: 29
2a12:f3c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 07 Apr 2025 04:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c3:de:22:37:d3:05:6d:d5:cd:0b:37:1c:dc:d9:88:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a9154e1c5578b0fef8abb779f8117e64e884d18
Validity
Not Before: Mar 23 16:37:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b2fbff71c462a7b0e1863d4d79fbe4604acb26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:58:78:52:cb:17:5d:f1:66:b3:cd:23:22:a4:
68:1e:1f:17:63:6f:85:3f:e5:a5:42:1e:a7:33:0f:
77:0c:0d:4a:37:80:15:eb:66:94:ef:38:c6:9b:9b:
8f:8a:b2:5b:d6:12:8e:e7:0a:8a:90:91:eb:29:9f:
b4:3e:66:3a:17:52:20:54:b4:0d:c8:46:1f:b9:d2:
54:f9:f6:0f:77:40:10:ce:89:4d:42:16:90:bc:23:
28:41:5b:92:27:05:3c:e5:e0:db:37:71:f8:08:c2:
f0:ff:86:16:86:f5:65:5e:8d:e0:4a:e7:cc:0e:42:
81:52:81:3a:87:45:48:9f:ad:6f:af:db:1b:63:fe:
54:86:d3:13:9d:11:3f:58:c9:2e:47:c8:32:d7:2e:
60:f5:79:67:00:0b:8e:b0:30:4a:3c:50:5c:a1:b5:
8c:c5:4a:92:80:c9:29:e0:aa:07:41:42:a1:20:da:
37:b8:1b:19:86:22:9b:07:24:de:f8:e3:1d:fa:ce:
65:9c:74:e9:f9:39:9d:a4:44:ac:95:bb:19:bd:3e:
5a:4c:69:bd:f3:61:f0:66:55:6c:54:27:d1:08:2a:
95:48:41:72:34:58:c4:1a:ef:25:ad:bb:1d:68:52:
3a:f6:ab:54:d4:2d:1b:0d:6c:ad:a4:72:b0:29:99:
b2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2F:BF:F7:1C:46:2A:7B:0E:18:63:D4:D7:9F:BE:46:04:AC:B2:6E
X509v3 Authority Key Identifier:
keyid:1A:91:54:E1:C5:57:8B:0F:EF:8A:BB:77:9F:81:17:E6:4E:88:4D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpFU4cVXiw_virt3n4EX5k6ITRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/ey-_9xxGKnsOGGPU15--RgSssm4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/54bac8-bf50-44d2-ad42-388d8ad2a5bb/1/GpFU4cVXiw_virt3n4EX5k6ITRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.98.0/24
IPv6:
2a12:f3c0::/29
Signature Algorithm: sha256WithRSAEncryption
13:f1:d3:a3:db:e6:d5:b7:a3:b3:c2:7a:8a:a0:7a:b3:f5:2c:
91:9e:9a:65:65:93:6d:fe:94:90:f8:f3:9c:34:8b:82:f3:e3:
60:be:ce:8b:36:73:09:f2:84:cf:6f:3f:dd:c4:29:a2:14:20:
ee:54:85:9a:25:d5:f0:a2:af:ca:53:7d:89:28:de:27:29:a0:
c8:50:26:1b:35:8e:9f:5a:3c:64:0d:a7:e2:7b:a1:38:6e:8c:
4f:a8:28:44:86:e0:8a:ef:1f:8c:5c:f3:20:2e:74:44:83:3c:
3c:6f:b7:cd:82:12:c6:2b:55:df:27:39:e3:64:7f:6e:7d:9f:
e6:ed:42:c2:8d:8d:4f:52:8c:aa:d7:bd:79:e3:d7:08:2b:1e:
76:89:94:03:a3:3b:a0:b7:d1:1d:cf:45:e5:5a:d2:f6:4f:79:
ad:56:fd:80:ca:e9:12:4d:3a:b0:08:61:c8:7b:40:54:52:f7:
e8:0a:ac:5c:a4:84:0d:eb:8e:83:bd:69:84:4e:60:68:76:de:
14:df:fc:d3:13:e8:37:a1:cc:cb:e6:14:83:34:e4:8b:26:de:
d7:55:6c:d5:ae:4d:57:d6:7e:04:53:82:9e:ef:14:4a:b0:22:
e5:08:85:ce:c0:af:0a:79:d1:43:9a:1a:84:eb:bd:51:91:ac:
da:f2:7e:ef
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZXD3iI30wVt1c0LNxzc2YgIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhOTE1NGUxYzU1NzhiMGZlZjhhYmI3NzlmODExN2U2NGU4
ODRkMTgwHhcNMjUwMzIzMTYzNzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YjJmYmZmNzFjNDYyYTdiMGUxODYzZDRkNzlmYmU0NjA0YWNiMjZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lh4UssXXfFms80jIqRoHh8XY2+F
P+WlQh6nMw93DA1KN4AV62aU7zjGm5uPirJb1hKO5wqKkJHrKZ+0PmY6F1IgVLQN
yEYfudJU+fYPd0AQzolNQhaQvCMoQVuSJwU85eDbN3H4CMLw/4YWhvVlXo3gSufM
DkKBUoE6h0VIn61vr9sbY/5UhtMTnRE/WMkuR8gy1y5g9XlnAAuOsDBKPFBcobWM
xUqSgMkp4KoHQUKhINo3uBsZhiKbByTe+OMd+s5lnHTp+TmdpESslbsZvT5aTGm9
82HwZlVsVCfRCCqVSEFyNFjEGu8lrbsdaFI69qtU1C0bDWytpHKwKZmylwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHsvv/ccRip7Dhhj1NefvkYErLJuMB8GA1UdIwQY
MBaAFBqRVOHFV4sP74q7d5+BF+ZOiE0YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3BGVTRjVlhpd192aXJ0M240RVg1azZJVFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS81NGJhYzgtYmY1MC00NGQyLWFkNDIt
Mzg4ZDhhZDJhNWJiLzEvZXktXzl4eEdLbnNPR0dQVTE1LS1SZ1Nzc200LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS81NGJhYzgtYmY1MC00NGQyLWFkNDItMzg4ZDhhZDJhNWJi
LzEvR3BGVTRjVlhpd192aXJ0M240RVg1azZJVFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAwbBiMA0E
AgACMAcDBQMqEvPAMA0GCSqGSIb3DQEBCwUAA4IBAQAT8dOj2+bVt6OzwnqKoHqz
9SyRnpplZZNt/pSQ+POcNIuC8+Ngvs6LNnMJ8oTPbz/dxCmiFCDuVIWaJdXwoq/K
U32JKN4nKaDIUCYbNY6fWjxkDafie6E4boxPqChEhuCK7x+MXPMgLnREgzw8b7fN
ghLGK1XfJznjZH9ufZ/m7ULCjY1PUoyq171549cIKx52iZQDozugt9Edz0XlWtL2
T3mtVv2AyukSTTqwCGHIe0BUUvfoCqxcpIQN646DvWmETmBodt4U3/zTE+g3oczL
5hSDNOSLJt7XVWzVrk1X1n4EU4Ke7xRKsCLlCIXOwK8KedFDmhqE671Rkaza8n7v
-----END CERTIFICATE-----
Generated at Sun Apr 6 12:48:09 2025 by rpki-client