Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/9ByEybCE9CIwuPyP4jebxsupnkU.roa
File: 9ByEybCE9CIwuPyP4jebxsupnkU.roa (raw, json)
Hash identifier: 73w7qQJmQNDu4a4ozvHyeU3dD07eczn+JHcfhr0D3rk=
Subject key identifier: F4:1C:84:C9:B0:84:F4:22:30:B8:FC:8F:E2:37:9B:C6:CB:A9:9E:45
Certificate issuer: /CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Certificate serial: 01949238D88E360D1471C15E61E804D55277
Authority key identifier: 2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/9ByEybCE9CIwuPyP4jebxsupnkU.roa
Signing time: Thu 23 Jan 2025 08:13:06 +0000
ROA not before: Thu 23 Jan 2025 08:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216078
IP address blocks: 193.178.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 08 Apr 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:38:d8:8e:36:0d:14:71:c1:5e:61:e8:04:d5:52:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e3487da65e85e87bdac4f5f6758dc6c20ef9763
Validity
Not Before: Jan 23 08:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f41c84c9b084f42230b8fc8fe2379bc6cba99e45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1e:58:bd:19:37:ca:b1:b9:6c:ad:57:80:9d:
27:f3:23:ee:45:7d:8f:00:61:d8:6f:64:3d:36:d6:
0f:ca:25:3e:3f:98:0a:28:a5:4e:ac:5b:e3:c1:37:
ad:81:b4:64:b4:f7:cb:4f:cd:26:91:b4:c9:4e:03:
68:ca:35:0c:67:b2:d0:a9:61:65:eb:4f:ed:a7:8e:
25:3a:f7:ec:69:6a:02:30:79:d9:f8:2e:0c:62:1f:
99:07:82:b6:78:67:cb:ce:ee:58:4d:e0:30:e2:44:
8f:b9:3e:28:0d:10:89:1d:62:27:d7:3e:fe:d6:a9:
c7:0f:48:7e:c8:96:9d:ae:f2:3b:dc:90:c7:69:7b:
d3:da:29:70:e6:16:d0:26:3c:27:3b:f1:c6:5d:5a:
94:fb:94:ab:d9:b3:58:f6:4b:9b:7a:eb:c5:78:ea:
89:a1:b0:38:57:15:21:24:c0:a7:6a:f5:1a:54:35:
a8:b8:28:86:b8:40:aa:63:5d:fd:24:ec:4d:5b:ee:
c0:b0:a8:b3:d2:8c:4e:81:07:d6:d2:44:d4:c0:04:
24:57:9b:bb:39:03:7f:5b:cf:a0:e1:88:df:c1:3e:
e4:ad:4d:44:21:4b:9d:17:a5:e7:64:98:ad:18:35:
c8:8d:43:57:78:a6:95:03:8b:d0:05:e1:fe:db:ff:
91:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1C:84:C9:B0:84:F4:22:30:B8:FC:8F:E2:37:9B:C6:CB:A9:9E:45
X509v3 Authority Key Identifier:
keyid:2E:34:87:DA:65:E8:5E:87:BD:AC:4F:5F:67:58:DC:6C:20:EF:97:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/9ByEybCE9CIwuPyP4jebxsupnkU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/2fe094-373c-44f6-93e0-d0aecd5d7042/1/LjSH2mXoXoe9rE9fZ1jcbCDvl2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.178.226.0/24
Signature Algorithm: sha256WithRSAEncryption
13:7a:be:12:21:03:42:c4:02:d8:1c:11:fb:d6:5c:56:b7:5f:
d5:60:a1:16:d2:0c:42:aa:62:36:86:0c:c6:fa:fa:34:3a:db:
05:ba:1a:0c:d5:fe:79:41:7b:b2:01:ad:d1:95:31:c7:7b:3e:
1f:ea:d0:cc:4a:28:03:ff:37:b9:3c:1c:ff:5f:75:0c:52:44:
85:14:27:f8:a7:ce:47:0b:75:09:cf:35:99:a5:5a:62:c3:77:
0b:01:85:6e:f1:14:0d:5c:20:f4:97:0d:bc:dc:08:2c:cd:67:
d5:42:3d:b4:44:8d:7d:3d:ed:03:47:79:b2:90:cb:91:8a:a6:
c2:02:aa:a4:f7:b5:2b:8e:3b:a4:6c:b0:70:3f:95:61:19:4e:
87:51:3a:67:33:68:35:6e:1a:32:ad:f5:2f:44:42:d0:14:1b:
28:30:b2:40:77:88:cc:2b:b0:b2:8b:09:63:9d:a5:af:5a:89:
31:ca:8a:e1:93:f8:a6:78:d6:e1:71:25:d8:0f:7c:5b:54:90:
70:d8:6a:b0:b0:66:64:8e:2b:6d:48:01:8b:f3:f3:ef:9c:8a:
b2:8d:a0:67:09:da:5c:d9:fd:d9:0d:b2:fa:8d:9a:7b:84:ee:
dc:70:a6:18:30:eb:8a:ad:c4:89:0f:94:76:e3:54:75:43:dc:
1f:fa:0c:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:43:55 2025 by rpki-client