Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2XfxiICRa_FjBeMzs4Cxdd4m6Jo.roa
File: 2XfxiICRa_FjBeMzs4Cxdd4m6Jo.roa (raw, json)
Hash identifier: 8ZDLdPm+vHdCBJ4xq94/P6LumfIGVgpsZVNfUZB3/0s=
Subject key identifier: D9:77:F1:88:80:91:6B:F1:63:05:E3:33:B3:80:B1:75:DE:26:E8:9A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427485D9E3DB2B9E432B0AF3B66F21174
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2XfxiICRa_FjBeMzs4Cxdd4m6Jo.roa
Signing time: Thu 02 Jan 2025 13:50:41 +0000
ROA not before: Thu 02 Jan 2025 13:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49981
IP address blocks: 192.71.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5d:9e:3d:b2:b9:e4:32:b0:af:3b:66:f2:11:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d977f18880916bf16305e333b380b175de26e89a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:d2:30:68:4e:e0:ec:da:9c:72:41:b2:68:
c0:01:32:b1:3a:1d:2a:19:5b:49:7b:a9:20:f9:1e:
62:35:a8:0c:e4:de:77:48:b3:1c:33:bf:43:9e:49:
ee:d5:70:9e:ae:82:ac:a1:d7:61:d9:3e:4c:02:97:
56:4e:ab:f9:ce:78:5e:a1:ce:5c:3e:ee:8a:e8:94:
95:99:d5:25:b3:16:9b:18:18:fd:84:3c:2d:19:b8:
41:a7:53:54:fa:05:f7:70:8c:0d:d1:8c:c2:83:db:
e4:31:31:4e:b3:19:16:f2:37:8b:f4:1b:83:be:b4:
fe:bd:9f:14:84:bd:21:90:cb:90:72:df:3f:ca:85:
29:1c:8a:cc:39:a6:7e:7c:6e:29:c4:d8:24:cb:65:
d0:eb:ac:94:c9:6e:27:ad:d0:44:fc:e4:63:1a:65:
1e:9d:98:df:a0:df:a7:de:96:14:df:ed:16:fb:4d:
7a:bf:d9:04:fa:ea:9a:72:5b:60:ac:1e:a9:0b:ed:
73:c5:7b:d2:21:83:ea:82:e8:bb:be:e9:51:04:8f:
2f:f4:3a:dc:77:86:e1:e1:e0:a5:d9:77:a0:fc:c3:
33:f7:3b:aa:33:2a:ff:e3:f1:46:ec:69:7b:7a:65:
fa:ff:6c:64:3b:d4:1c:6c:6f:0a:7f:4e:fd:6c:0c:
e2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:77:F1:88:80:91:6B:F1:63:05:E3:33:B3:80:B1:75:DE:26:E8:9A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/2XfxiICRa_FjBeMzs4Cxdd4m6Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.151.0/24
Signature Algorithm: sha256WithRSAEncryption
03:71:ca:30:6e:1c:b4:da:23:c9:f1:75:fd:8d:94:7d:36:91:
bd:63:e1:ff:9f:a7:72:3d:6f:b1:05:2d:f7:da:5c:68:92:f7:
c8:ca:5c:c3:86:f1:64:6e:04:3e:01:39:e4:00:3b:d1:9b:4a:
6e:90:fb:55:22:1b:f1:6c:8b:3d:16:0e:7e:55:6c:7a:b3:5e:
78:cf:5b:4e:5a:f8:57:3f:a7:2c:09:00:7c:be:56:6d:25:64:
ba:08:39:c2:3c:c9:d8:d8:e2:3c:0f:38:46:d9:dd:fa:a7:f6:
f3:63:47:d2:fb:70:a7:71:4b:ed:50:91:55:64:84:26:e1:94:
44:d0:f7:56:e5:83:9f:55:dd:3f:1c:1f:05:89:0a:a5:db:fc:
29:1c:64:ea:94:f9:15:a4:92:7c:d8:35:01:16:bf:59:f2:6b:
f1:19:84:c4:9a:c4:f5:2f:d6:58:0f:71:e3:f2:08:0b:83:e3:
be:20:3c:e6:28:fd:b5:a8:dc:13:99:23:e6:c5:60:67:90:c1:
17:22:46:e7:da:a3:b6:bc:c1:92:fc:21:c4:e2:3b:ca:50:84:
40:e3:e9:09:2a:8f:af:4a:b3:15:2f:56:99:72:4c:f6:b8:92:
98:23:77:15:47:08:4f:fd:dd:fe:39:0c:91:60:46:78:17:b2:
67:e6:a1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:08:15 2025 by rpki-client