Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-AGZDajzEsWKcXzTAUhzfHZuAWs.roa
File: 1-AGZDajzEsWKcXzTAUhzfHZuAWs.roa (raw, json)
Hash identifier: Dt8SPKqKD30yxFmuTb+S9nE5efz1IbVOj84/zNz1dmw=
Subject key identifier: F8:01:99:0D:A8:F3:12:C5:8A:71:7C:D3:01:48:73:7C:76:6E:01:6B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274880669E9A35C23F07E13F9F784205
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-AGZDajzEsWKcXzTAUhzfHZuAWs.roa
Signing time: Thu 02 Jan 2025 13:50:50 +0000
ROA not before: Thu 02 Jan 2025 13:50:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210422
IP address blocks: 192.121.210.0/24 maxlen: 24
194.68.41.0/24 maxlen: 24
194.68.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:80:66:9e:9a:35:c2:3f:07:e1:3f:9f:78:42:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f801990da8f312c58a717cd30148737c766e016b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:b9:54:c7:d2:ad:d5:59:3a:e1:cf:e1:7d:
62:71:d2:72:3f:03:9f:a7:42:7c:dc:ad:d9:65:54:
c2:b4:33:bc:0d:86:04:40:28:7c:79:0d:40:24:b6:
0f:e2:82:90:b8:48:e3:ba:2a:1e:c6:31:2b:da:fa:
8b:79:c5:50:ab:40:c1:ea:14:b7:24:ab:15:55:8c:
05:8f:3c:c5:20:10:4b:f7:61:4d:b0:69:5e:c6:c7:
94:5b:e6:46:9d:61:d2:bf:08:60:bc:75:55:ee:be:
a3:18:37:df:66:d2:b5:a6:02:86:48:e2:5c:5a:b9:
ca:51:d5:2c:22:76:34:d8:21:ee:6b:13:fc:f0:a9:
c0:ab:af:f5:ca:34:c0:33:c7:02:4c:42:b2:3d:f2:
4c:5e:21:ac:4d:e6:e6:95:64:8a:5e:47:7d:86:26:
3c:d1:9e:62:b1:ed:4b:e8:f7:c6:f2:dd:e5:52:da:
9f:4f:c5:b1:66:87:37:15:b1:77:e0:ff:9d:d3:96:
27:dd:3d:1f:1f:16:85:3f:8f:95:40:dd:7c:5b:4a:
e6:d4:1e:a5:66:3c:13:c7:d3:1a:2b:b6:47:2b:06:
2b:72:80:eb:80:f9:73:2c:f7:90:93:86:fe:35:47:
e6:17:30:5d:d0:ef:be:ab:69:90:c5:e0:88:30:ee:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:01:99:0D:A8:F3:12:C5:8A:71:7C:D3:01:48:73:7C:76:6E:01:6B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-AGZDajzEsWKcXzTAUhzfHZuAWs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.210.0/24
194.68.41.0/24
194.68.63.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:87:62:f7:b9:21:c8:ab:4e:4e:83:3e:da:69:c3:be:93:5a:
de:dc:50:4e:d6:e7:57:6c:a5:15:88:df:59:af:42:81:a5:28:
e9:98:40:f3:7d:84:a2:71:89:e3:a5:4b:f7:c5:e2:99:5a:c9:
2d:75:ff:96:f2:b3:3a:8a:06:f5:51:fe:ac:14:df:19:60:d1:
79:b2:50:f2:2a:1f:bc:0f:fb:9e:85:fb:fb:67:d0:f8:1b:4f:
9f:ed:63:8d:7f:2b:69:0a:f4:12:15:3a:66:08:17:79:05:1c:
b7:10:ca:a9:03:e3:5c:26:09:06:4d:cc:1e:c3:04:d9:09:4e:
36:87:7d:f5:ed:23:40:be:78:bc:b5:77:36:e5:5e:c5:77:44:
8c:42:7b:16:01:68:ee:a1:62:d7:4e:17:82:47:f9:76:71:ea:
af:c5:03:97:7c:9e:e8:da:f6:0a:da:ae:09:3b:f9:f9:de:be:
da:e9:4b:3e:93:88:21:94:0d:45:ec:9d:ae:97:b0:2e:89:6e:
23:34:d6:09:4f:70:46:ff:c1:88:a1:4d:e9:14:a5:9c:37:f2:
03:f6:e0:9a:28:df:61:b1:28:c6:fd:06:9e:e0:07:5a:8a:84:
d2:ab:0b:06:5a:0b:4b:19:fc:5a:30:4b:07:44:ae:c5:bd:d5:
e1:f2:92:8c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:02:01 2025 by rpki-client