Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa
File: Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa (raw, json)
Hash identifier: 4ysW7rFsdP6sSTiTROvgg5H3SFvIB36uqjjGielYpHo=
Subject key identifier: 4E:D9:7E:D6:1D:7E:57:E9:CB:7C:71:A5:E7:45:C8:3E:A0:5A:3A:EC
Certificate issuer: /CN=ab069058b4d367612be4807372b5e593e0347766
Certificate serial: 019424B39CA99610CD84883A07C03928F2A3
Authority key identifier: AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa
Signing time: Thu 02 Jan 2025 01:48:58 +0000
ROA not before: Thu 02 Jan 2025 01:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1930
IP address blocks: 192.135.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:9c:a9:96:10:cd:84:88:3a:07:c0:39:28:f2:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab069058b4d367612be4807372b5e593e0347766
Validity
Not Before: Jan 2 01:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4ed97ed61d7e57e9cb7c71a5e745c83ea05a3aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e5:52:f9:58:a8:2e:11:03:5e:f1:98:98:53:
04:56:85:08:33:dc:14:f2:fe:1e:e5:dd:1f:7b:4a:
ad:dc:96:5d:b6:c0:a7:e8:83:bc:2b:03:13:f1:da:
14:dc:25:92:e6:49:9a:86:a3:a0:71:c7:be:54:e8:
a4:57:23:d3:cb:25:0e:6e:bf:ae:93:75:cf:61:66:
66:13:7b:95:bd:9d:c5:8d:05:e5:b9:6d:e2:02:f4:
21:9d:f2:0d:70:25:8a:37:ea:9f:cb:70:45:02:a2:
28:a1:67:61:d9:0d:7d:e8:34:00:49:2f:87:32:67:
2f:5b:aa:dc:42:af:f1:af:1d:55:c4:61:bc:bf:c9:
56:0d:1f:99:8e:4e:a3:2f:5f:99:50:b9:db:ed:23:
49:e7:48:ed:80:ab:ec:21:74:f6:ed:08:70:48:68:
4e:2f:55:4a:7a:9a:be:76:69:f6:5e:14:ca:9a:b0:
01:a3:27:22:2c:21:ab:a4:d8:c1:a4:d6:4e:b9:57:
d2:87:51:23:84:ea:cd:ea:21:e0:dd:25:bb:f2:39:
00:dc:a3:46:0e:dd:28:2d:d7:9f:f0:3f:7f:44:b5:
5d:db:ac:eb:26:6e:02:11:ab:19:20:0b:46:46:22:
90:0d:c1:72:b8:23:9b:a3:a0:4b:8f:28:50:84:b7:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:D9:7E:D6:1D:7E:57:E9:CB:7C:71:A5:E7:45:C8:3E:A0:5A:3A:EC
X509v3 Authority Key Identifier:
keyid:AB:06:90:58:B4:D3:67:61:2B:E4:80:73:72:B5:E5:93:E0:34:77:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/Ttl-1h1-V-nLfHGl50XIPqBaOuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/87b09a-ccfa-48ea-aeb5-5667419f44e8/1/qwaQWLTTZ2Er5IBzcrXlk-A0d2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.135.219.0/24
Signature Algorithm: sha256WithRSAEncryption
80:09:87:42:e9:8a:8f:dc:26:40:20:5d:f4:53:27:da:3e:3e:
ec:6a:91:c0:b8:01:57:af:4b:2f:64:ee:96:13:9e:af:11:68:
57:38:d8:39:7d:68:2b:45:02:23:f1:f1:2a:69:b3:9f:6a:b8:
a7:74:79:34:aa:a7:49:1f:48:2f:53:17:49:97:26:ec:04:59:
73:de:e5:61:6f:cd:cd:f7:0c:3e:02:6b:4e:a4:4b:53:20:13:
5b:72:11:ed:31:81:d4:c9:0e:87:bd:3c:0e:a2:59:d1:1b:ee:
63:53:22:b1:22:d1:72:80:8b:ad:25:06:07:72:29:f2:5d:04:
d7:90:49:38:e4:da:1b:93:54:bb:0b:9a:a7:ef:51:8c:37:de:
84:39:f2:73:e8:a2:5d:84:3b:62:71:ca:a6:82:b1:52:bc:1e:
19:12:4b:d7:15:da:1c:b6:f2:c4:27:30:c8:0d:e3:79:6f:ad:
ae:8b:e0:71:d6:1a:38:60:2f:2b:f4:8c:bc:9f:20:70:6e:71:
e5:05:1f:09:b7:b9:e6:e3:9a:45:a6:d9:a0:6d:01:90:e3:62:
2b:1e:d6:06:24:ec:68:2c:2f:a2:42:07:57:ce:07:f0:87:52:
c3:80:c3:4b:90:2d:b1:7d:a2:22:f1:a0:67:2e:51:76:e6:44:
0b:3b:53:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks5yplhDNhIg6B8A5KPKjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMDY5MDU4YjRkMzY3NjEyYmU0ODA3MzcyYjVlNTkzZTAz
NDc3NjYwHhcNMjUwMTAyMDE0ODU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZWQ5N2VkNjFkN2U1N2U5Y2I3YzcxYTVlNzQ1YzgzZWEwNWEzYWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+VS+VioLhEDXvGYmFMEVoUIM9wU
8v4e5d0fe0qt3JZdtsCn6IO8KwMT8doU3CWS5kmahqOgcce+VOikVyPTyyUObr+u
k3XPYWZmE3uVvZ3FjQXluW3iAvQhnfINcCWKN+qfy3BFAqIooWdh2Q196DQASS+H
MmcvW6rcQq/xrx1VxGG8v8lWDR+Zjk6jL1+ZULnb7SNJ50jtgKvsIXT27QhwSGhO
L1VKepq+dmn2XhTKmrABoyciLCGrpNjBpNZOuVfSh1EjhOrN6iHg3SW78jkA3KNG
Dt0oLdef8D9/RLVd26zrJm4CEasZIAtGRiKQDcFyuCObo6BLjyhQhLerXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE7ZftYdflfpy3xxpedFyD6gWjrsMB8GA1UdIwQY
MBaAFKsGkFi002dhK+SAc3K15ZPgNHdmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUt
NTY2NzQxOWY0NGU4LzEvVHRsLTFoMS1WLW5MZkhHbDUwWElQcUJhT3V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84N2IwOWEtY2NmYS00OGVhLWFlYjUtNTY2NzQxOWY0NGU4
LzEvcXdhUVdMVFRaMkVyNUlCemNyWGxrLUEwZDJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIfbMA0G
CSqGSIb3DQEBCwUAA4IBAQCACYdC6YqP3CZAIF30UyfaPj7sapHAuAFXr0svZO6W
E56vEWhXONg5fWgrRQIj8fEqabOfarindHk0qqdJH0gvUxdJlybsBFlz3uVhb83N
9ww+AmtOpEtTIBNbchHtMYHUyQ6HvTwOolnRG+5jUyKxItFygIutJQYHcinyXQTX
kEk45Nobk1S7C5qn71GMN96EOfJz6KJdhDticcqmgrFSvB4ZEkvXFdoctvLEJzDI
DeN5b62ui+Bx1ho4YC8r9Iy8nyBwbnHlBR8Jt7nm45pFptmgbQGQ42IrHtYGJOxo
LC+iQgdXzgfwh1LDgMNLkC2xfaIi8aBnLlF25kQLO1OB
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:46 2025 by rpki-client