Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ITVTbhXITtbbCNEqCEfxFbgqvU8.roa
File: ITVTbhXITtbbCNEqCEfxFbgqvU8.roa (raw, json)
Hash identifier: kInBZjCzyjFvEkmWMFFIjkVHO0pi6G0oNQxZMoLPtU4=
Subject key identifier: 21:35:53:6E:15:C8:4E:D6:DB:08:D1:2A:08:47:F1:15:B8:2A:BD:4F
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 0194282415685CC5C6EA092B488D441ED12C
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ITVTbhXITtbbCNEqCEfxFbgqvU8.roa
Signing time: Thu 02 Jan 2025 17:50:40 +0000
ROA not before: Thu 02 Jan 2025 17:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138997
IP address blocks: 149.126.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Apr 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:15:68:5c:c5:c6:ea:09:2b:48:8d:44:1e:d1:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2135536e15c84ed6db08d12a0847f115b82abd4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:0c:72:e6:50:20:b5:56:7a:da:71:1a:da:9c:
83:05:91:43:df:e2:c8:8c:bc:26:2b:95:83:87:7b:
78:7a:c7:0e:af:f3:b3:b2:07:00:9c:48:4b:ea:6a:
7a:fe:3c:64:f4:21:52:79:94:2e:27:94:a0:08:cf:
a6:e3:92:2f:cf:7b:3c:a3:35:4d:72:9d:7f:69:6b:
2d:2b:8d:55:6b:69:c1:f6:0d:af:67:2b:44:8c:4a:
a8:4d:22:d4:47:4e:73:2b:e4:40:9d:92:03:ad:71:
47:73:96:54:9b:a8:e5:5e:40:ae:1a:be:0c:d8:5a:
4c:56:27:56:b8:0f:25:ab:15:43:cb:63:65:ea:dd:
86:5e:d9:28:9f:00:1f:cb:f0:16:d5:9a:c6:3d:37:
e3:5b:75:e1:b3:5d:69:59:62:8e:98:29:ed:00:17:
1c:de:6e:08:6a:54:4b:4c:e2:87:c5:fe:07:dc:d7:
45:e6:08:ff:e5:00:46:c5:32:eb:89:3b:fc:22:18:
c4:f7:e1:2a:d3:d4:aa:cf:c1:66:97:d2:5f:80:bd:
7f:f1:9f:7a:24:ac:e7:4e:8b:76:d2:02:28:c4:7c:
b0:f3:c5:81:33:a3:1f:7b:2f:2e:01:bc:30:92:b1:
d9:7b:97:a6:fe:f0:a0:03:d4:f8:48:c7:19:59:71:
1f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:35:53:6E:15:C8:4E:D6:DB:08:D1:2A:08:47:F1:15:B8:2A:BD:4F
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/ITVTbhXITtbbCNEqCEfxFbgqvU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.92.0/22
Signature Algorithm: sha256WithRSAEncryption
92:9b:05:83:a4:c2:c2:d8:e7:55:e5:4b:6f:3c:63:59:1b:3a:
ff:b0:c8:a2:0d:0e:85:f2:86:ea:c2:3e:ed:08:a4:8b:59:d3:
a3:c2:04:a9:19:55:6c:5c:b1:99:f7:17:2a:64:1b:10:8a:fa:
6b:2e:e3:fd:39:89:80:e0:40:03:78:c8:0b:67:3a:59:ba:93:
31:e7:1c:63:77:33:2b:0f:f8:37:0a:70:8a:76:5a:e2:03:41:
43:1b:18:22:bb:73:9c:19:7d:29:74:8b:d2:1c:c2:39:f3:61:
10:2e:4e:bd:7f:16:32:51:39:bb:62:d7:f2:92:22:9c:12:cb:
c1:2e:37:08:aa:0c:9b:8f:96:10:d6:68:af:f8:f0:fa:44:8f:
5c:20:56:96:31:6e:7a:07:6d:54:f6:5d:07:a4:ca:34:90:13:
35:7b:49:37:6e:4d:88:fc:00:08:d6:90:a5:e2:10:81:df:15:
25:4b:ac:68:96:ef:da:e2:b7:f0:75:db:80:2a:06:35:f5:2f:
e0:a9:7e:89:db:1f:be:00:6d:ec:e7:4f:f2:4d:ef:de:27:14:
d4:52:f8:89:d2:a4:fd:c0:40:df:96:cb:5d:99:32:fb:79:13:
35:65:be:58:4b:2b:fa:15:e7:cb:0a:73:f3:8b:11:bf:0f:b3:
dc:23:ec:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:34:31 2025 by rpki-client