Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-rL5RZemU8Pjd1AkVeJyu0NCGmY.roa
File: 1-rL5RZemU8Pjd1AkVeJyu0NCGmY.roa (raw, json)
Hash identifier: mxnV6SpPrNyopyF0FREu0ey2D76wIUIAgOdG11wBQAc=
Subject key identifier: FA:B2:F9:45:97:A6:53:C3:E3:77:50:24:55:E2:72:BB:43:42:1A:66
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748717C75428B4A29413518B92CF7ED
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-rL5RZemU8Pjd1AkVeJyu0NCGmY.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203052
IP address blocks: 192.121.204.0/22 maxlen: 22
192.176.224.0/22 maxlen: 22
193.180.76.0/22 maxlen: 22
193.234.128.0/21 maxlen: 21
194.132.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:71:7c:75:42:8b:4a:29:41:35:18:b9:2c:f7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fab2f94597a653c3e377502455e272bb43421a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ca:da:fc:4e:d8:97:c7:15:45:a2:fb:7c:26:
1a:ef:16:0c:83:d9:a6:1b:d2:ea:c0:1d:ec:e8:7e:
bf:4c:b2:9f:3a:ad:dc:f8:7c:80:06:d5:9a:e2:4e:
b4:5f:31:ae:f9:09:56:a4:f2:ce:8a:26:88:e7:38:
d4:34:52:99:a1:cb:ff:22:3a:67:5b:45:17:73:94:
71:65:2d:90:a0:66:4a:df:59:84:bf:5e:5c:02:d6:
4f:89:ef:2c:94:a4:9a:e3:05:28:d3:9d:f4:8f:e7:
8b:ca:20:06:e7:9d:89:69:05:98:71:d0:7b:ee:b4:
a1:6e:f7:71:c3:ed:bc:da:2c:10:1b:79:e1:69:4b:
c9:49:e6:38:80:91:42:6f:90:68:d3:b4:b9:3e:b8:
e6:5c:ff:82:40:8a:38:bb:e8:24:98:a2:72:a7:20:
ed:05:03:b1:36:85:ae:ad:54:9d:f5:04:e6:9f:75:
02:75:39:b3:16:97:55:fd:7a:71:08:f1:15:eb:69:
04:7d:7f:f8:77:c8:4c:c5:c8:72:53:1f:8b:1e:ca:
f8:c8:36:95:f3:df:a0:4a:fd:3e:3f:f3:ff:9e:72:
10:41:67:c0:1d:86:44:03:71:79:e8:a6:15:6d:e7:
6c:69:41:66:4e:c3:c5:6f:bc:1c:3f:d6:1d:87:65:
7e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B2:F9:45:97:A6:53:C3:E3:77:50:24:55:E2:72:BB:43:42:1A:66
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-rL5RZemU8Pjd1AkVeJyu0NCGmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.204.0/22
192.176.224.0/22
193.180.76.0/22
193.234.128.0/21
194.132.72.0/22
Signature Algorithm: sha256WithRSAEncryption
b1:ec:67:9f:b6:44:30:0d:8f:7e:63:6e:6f:a6:d7:3b:0b:34:
0d:64:c5:67:7e:7f:fd:df:30:13:fc:eb:b7:4f:fd:50:c4:b8:
8f:13:36:a3:74:5b:9e:06:a4:ef:8b:3b:c6:53:eb:0c:f3:32:
e1:50:4b:d5:69:eb:7e:2d:12:51:7a:b1:7c:41:57:56:db:35:
00:82:47:2c:8a:68:e1:7b:f7:3a:a5:7f:ef:8a:28:ba:9b:55:
0d:f3:c7:88:26:35:f1:d1:91:82:3a:c7:1b:71:a3:55:4d:65:
fb:03:9a:09:bb:28:01:b6:ab:ca:03:0c:88:dd:bf:02:ed:ec:
71:e0:d8:00:90:f3:cb:b9:f8:ee:9e:29:1a:28:d2:60:ec:57:
15:bd:21:49:16:49:c1:6c:96:96:91:08:74:cf:02:b6:99:2d:
4c:8a:5e:2a:3e:fa:81:4a:7a:a2:78:5f:f2:60:1a:c9:6b:3b:
a0:14:26:d9:2e:e4:a8:ac:cb:cf:97:b1:49:d3:84:79:2e:b0:
f6:ea:c7:8b:29:58:11:62:10:c5:60:96:4e:bb:37:56:90:02:
99:75:d1:75:cd:08:0e:d3:9d:c6:02:15:69:0b:cd:80:ff:6e:
cd:bd:46:b7:15:4c:5b:c5:5e:f0:91:2b:8a:6c:83:9b:f3:ad:
e2:b4:79:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:51 2025 by rpki-client