Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/49q3DDmrg6cVtppsLABS81MGkqg.roa
File: 49q3DDmrg6cVtppsLABS81MGkqg.roa (raw, json)
Hash identifier: Y49UGOvEecC7Z5Ts0nifT62msA+Ws1fglGSRVZSw/Hs=
Subject key identifier: E3:DA:B7:0C:39:AB:83:A7:15:B6:9A:6C:2C:00:52:F3:53:06:92:A8
Certificate issuer: /CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Certificate serial: 019424B3F8EEBFFF5DC1027D58A4BB4315BE
Authority key identifier: E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/49q3DDmrg6cVtppsLABS81MGkqg.roa
Signing time: Thu 02 Jan 2025 01:49:21 +0000
ROA not before: Thu 02 Jan 2025 01:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42948
IP address blocks: 193.142.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Apr 2025 18:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f8:ee:bf:ff:5d:c1:02:7d:58:a4:bb:43:15:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9ee65ec66d90ff8fff8d1707320577402e85cc7
Validity
Not Before: Jan 2 01:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3dab70c39ab83a715b69a6c2c0052f3530692a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:a5:82:c9:ca:ef:75:f9:63:a2:64:71:79:
65:25:03:e2:e4:6e:76:e8:6f:f8:ca:36:ba:6a:35:
f1:c2:14:c7:26:fa:ce:6c:02:4e:41:8c:ea:e9:eb:
e1:27:56:07:62:19:8a:8e:75:8f:8c:fb:6d:3d:05:
e7:0b:99:4a:58:af:82:b5:c9:1a:47:9d:12:75:d0:
02:d1:12:29:8a:e0:ed:ad:57:65:5e:6b:2c:02:d3:
28:11:0b:12:b4:f9:46:fc:a8:8d:08:24:1a:8f:6c:
74:71:e4:cd:36:e9:3c:e8:e4:56:76:f8:c9:7f:7e:
e8:d4:3c:20:0e:39:49:83:3b:7f:8b:0a:3d:e6:93:
f1:b5:af:37:19:3d:cb:1a:7a:94:c5:cd:f0:a2:f7:
e3:8c:af:5f:eb:60:c6:4f:97:03:83:f7:bc:cf:4b:
ce:3f:50:f7:66:63:5d:18:50:8e:b1:97:20:4b:69:
da:06:ab:90:2a:e1:90:f4:b9:e3:dd:64:6d:58:38:
d6:4f:b9:96:cc:e6:2f:41:23:d0:73:51:c8:c1:dc:
98:b9:95:a9:91:0e:63:23:76:55:62:73:57:1f:f4:
7a:ef:2d:3a:d9:b3:a4:a3:15:67:a2:77:27:1a:35:
75:10:94:3c:7f:d7:17:db:e8:e6:f7:3f:fd:41:63:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:DA:B7:0C:39:AB:83:A7:15:B6:9A:6C:2C:00:52:F3:53:06:92:A8
X509v3 Authority Key Identifier:
keyid:E9:EE:65:EC:66:D9:0F:F8:FF:F8:D1:70:73:20:57:74:02:E8:5C:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e5l7GbZD_j_-NFwcyBXdALoXMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/49q3DDmrg6cVtppsLABS81MGkqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/fde2f5-af35-4a49-9b44-946d92c3f093/1/6e5l7GbZD_j_-NFwcyBXdALoXMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.142.149.0/24
Signature Algorithm: sha256WithRSAEncryption
50:bf:2e:a5:c0:bf:82:e8:b3:2e:93:df:cd:d8:b9:ff:6a:f7:
28:7a:27:fc:38:94:12:8a:49:e0:18:54:16:b0:ed:bf:85:c6:
27:cf:a8:ac:7e:78:58:0c:eb:5a:48:1a:76:cd:f8:77:da:30:
67:dc:f6:52:56:f9:6f:ae:da:f2:e4:01:f2:5a:c1:28:ba:90:
be:40:e8:58:22:9b:a5:57:61:42:da:42:bb:e4:d5:b5:70:ed:
7c:b2:90:48:96:83:f1:02:93:1f:14:bf:a0:71:80:64:78:06:
e4:04:85:ae:ab:ba:5f:be:fb:68:70:fe:d9:ba:a9:93:74:7b:
6f:ec:6d:b8:52:43:05:93:bd:00:1d:76:17:f0:db:44:02:b6:
3b:1d:0c:16:00:8a:eb:26:b6:39:55:43:bd:30:79:b4:55:0f:
18:f4:26:cd:b1:a6:be:14:90:c4:ad:31:32:18:59:6d:29:9f:
f1:13:71:13:ff:cb:ca:b4:ef:81:6d:13:9d:47:4b:94:e5:5a:
86:0d:f9:77:1a:86:91:cf:ab:21:4b:a7:82:67:e0:b2:9d:60:
48:cb:58:65:b0:66:1a:f3:74:42:82:ff:df:b0:c1:30:01:a5:
74:b2:0c:e7:9e:46:c6:23:8c:b9:16:86:f8:1b:8a:8a:5b:42:
a0:f1:55:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks/juv/9dwQJ9WKS7QxW+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5ZWU2NWVjNjZkOTBmZjhmZmY4ZDE3MDczMjA1Nzc0MDJl
ODVjYzcwHhcNMjUwMTAyMDE0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2RhYjcwYzM5YWI4M2E3MTViNjlhNmMyYzAwNTJmMzUzMDY5MmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWSlgsnK73X5Y6JkcXllJQPi5G52
6G/4yja6ajXxwhTHJvrObAJOQYzq6evhJ1YHYhmKjnWPjPttPQXnC5lKWK+Ctcka
R50SddAC0RIpiuDtrVdlXmssAtMoEQsStPlG/KiNCCQaj2x0ceTNNuk86ORWdvjJ
f37o1DwgDjlJgzt/iwo95pPxta83GT3LGnqUxc3wovfjjK9f62DGT5cDg/e8z0vO
P1D3ZmNdGFCOsZcgS2naBquQKuGQ9Lnj3WRtWDjWT7mWzOYvQSPQc1HIwdyYuZWp
kQ5jI3ZVYnNXH/R67y062bOkoxVnoncnGjV1EJQ8f9cX2+jm9z/9QWPeZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOPatww5q4OnFbaabCwAUvNTBpKoMB8GA1UdIwQY
MBaAFOnuZexm2Q/4//jRcHMgV3QC6FzHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmU1bDdHYlpEX2pfLU5Gd2N5QlhkQUxvWE1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS9mZGUyZjUtYWYzNS00YTQ5LTliNDQt
OTQ2ZDkyYzNmMDkzLzEvNDlxM0REbXJnNmNWdHBwc0xBQlM4MU1Ha3FnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS9mZGUyZjUtYWYzNS00YTQ5LTliNDQtOTQ2ZDkyYzNmMDkz
LzEvNmU1bDdHYlpEX2pfLU5Gd2N5QlhkQUxvWE1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwY6VMA0G
CSqGSIb3DQEBCwUAA4IBAQBQvy6lwL+C6LMuk9/N2Ln/avcoeif8OJQSikngGFQW
sO2/hcYnz6isfnhYDOtaSBp2zfh32jBn3PZSVvlvrtry5AHyWsEoupC+QOhYIpul
V2FC2kK75NW1cO18spBIloPxApMfFL+gcYBkeAbkBIWuq7pfvvtocP7ZuqmTdHtv
7G24UkMFk70AHXYX8NtEArY7HQwWAIrrJrY5VUO9MHm0VQ8Y9CbNsaa+FJDErTEy
GFltKZ/xE3ET/8vKtO+BbROdR0uU5VqGDfl3GoaRz6shS6eCZ+CynWBIy1hlsGYa
83RCgv/fsMEwAaV0sgznnkbGI4y5Fob4G4qKW0Kg8VVU
-----END CERTIFICATE-----
Generated at Sun Apr 13 03:39:59 2025 by rpki-client