Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3s2HXP5AY9Gv9bKpvUV2N4WynZw.roa
File: 3s2HXP5AY9Gv9bKpvUV2N4WynZw.roa (raw, json)
Hash identifier: P92F5fHFhVQ+VJjDqA0tGVwaBU2V37AmgUcwU2cZEK8=
Subject key identifier: DE:CD:87:5C:FE:40:63:D1:AF:F5:B2:A9:BD:45:76:37:85:B2:9D:9C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427487B87264D8646660D2449A5A46F3E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3s2HXP5AY9Gv9bKpvUV2N4WynZw.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208639
IP address blocks: 193.180.56.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7b:87:26:4d:86:46:66:0d:24:49:a5:a4:6f:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=decd875cfe4063d1aff5b2a9bd45763785b29d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:32:86:60:b2:bf:a2:2f:da:60:ea:6e:5a:11:
82:9d:5f:da:e8:8e:ff:be:81:91:5a:66:a0:ee:ab:
a5:3f:5e:ff:76:61:83:3e:a8:47:1b:d7:20:77:e5:
cb:af:b6:1a:0f:5a:00:d2:31:e5:8b:2f:bb:66:51:
d5:b4:1c:cc:b4:ea:97:36:25:e9:50:5b:cc:4c:ba:
10:7a:43:1c:a5:0d:76:b6:eb:9d:59:09:64:18:e5:
0c:7b:6f:ba:41:c1:5f:82:08:1a:3e:da:a9:d5:f1:
be:1e:3c:ce:f9:dd:0a:f9:9f:98:0d:e8:fc:5e:5d:
f5:71:ae:ac:5c:47:8c:74:de:1a:fd:3c:e8:0a:be:
ea:5f:77:25:1d:c2:cd:56:f7:ad:d6:a9:9b:f8:5e:
25:26:63:25:06:32:bc:c2:7d:b5:3c:97:3a:d2:e4:
1a:7f:38:7f:39:16:1b:44:8b:76:e5:18:52:59:26:
c1:80:c9:00:40:e1:9d:65:e5:23:77:e5:72:b2:01:
f6:9f:24:bd:32:f4:df:1d:8e:bb:d2:8b:c9:9f:54:
49:57:3d:f8:3d:ee:d7:c2:e4:0e:32:2f:40:62:e0:
5d:e4:06:15:03:98:56:b1:bd:10:76:9c:1b:51:90:
3b:09:4b:95:23:98:e6:cf:00:25:60:f1:3b:d2:d7:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:CD:87:5C:FE:40:63:D1:AF:F5:B2:A9:BD:45:76:37:85:B2:9D:9C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/3s2HXP5AY9Gv9bKpvUV2N4WynZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.56.0/23
Signature Algorithm: sha256WithRSAEncryption
00:57:03:3e:a5:34:ac:7c:dc:42:ea:c8:5f:44:38:c7:28:a9:
65:24:b6:ef:a1:84:30:2a:e6:81:38:c6:47:21:04:c4:cc:af:
6c:54:79:08:04:3c:c6:17:13:52:af:b9:53:83:56:0e:18:d1:
39:31:78:3f:90:1f:5d:cf:14:6a:61:4a:a4:fb:92:00:23:ed:
a1:b0:2b:54:9f:a1:cc:33:a1:16:ce:c1:a8:76:90:69:87:94:
20:e6:a8:ab:63:5a:4d:e2:d5:4f:85:01:fe:e2:2f:89:26:3d:
b9:f1:04:24:8a:fe:b7:b7:84:8d:b9:67:0a:b9:d3:29:09:7a:
1c:af:09:ce:0f:ea:54:ea:ef:ae:ff:f6:f1:c6:c1:79:d5:e9:
31:25:a3:89:93:2a:72:2e:12:63:50:f2:a5:4f:5b:c3:5e:b4:
6d:79:c1:4f:7b:03:13:9d:5b:70:90:f1:49:77:4b:ae:84:47:
3b:92:d8:4c:1c:25:45:fc:81:5c:7d:f6:0e:c6:02:92:ce:3a:
9f:99:e3:61:9d:63:d4:87:b4:38:17:ab:35:fb:9d:a1:fb:9f:
95:b7:03:b4:1e:ab:5a:08:2e:34:b4:21:32:1f:ba:3f:d4:36:
d5:70:e6:64:12:fc:92:ef:28:9c:4a:31:4a:5b:65:66:24:b4:
e6:08:ce:7f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSHuHJk2GRmYNJEmlpG8+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZWNkODc1Y2ZlNDA2M2QxYWZmNWIyYTliZDQ1NzYzNzg1YjI5ZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjKGYLK/oi/aYOpuWhGCnV/a6I7/
voGRWmag7qulP17/dmGDPqhHG9cgd+XLr7YaD1oA0jHliy+7ZlHVtBzMtOqXNiXp
UFvMTLoQekMcpQ12tuudWQlkGOUMe2+6QcFfgggaPtqp1fG+HjzO+d0K+Z+YDej8
Xl31ca6sXEeMdN4a/TzoCr7qX3clHcLNVvet1qmb+F4lJmMlBjK8wn21PJc60uQa
fzh/ORYbRIt25RhSWSbBgMkAQOGdZeUjd+VysgH2nyS9MvTfHY670ovJn1RJVz34
Pe7XwuQOMi9AYuBd5AYVA5hWsb0QdpwbUZA7CUuVI5jmzwAlYPE70td/DQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFN7Nh1z+QGPRr/Wyqb1FdjeFsp2cMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvM3MySFhQNUFZOUd2OWJLcHZVVjJONFd5blp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwbQ4MA0G
CSqGSIb3DQEBCwUAA4IBAQAAVwM+pTSsfNxC6shfRDjHKKllJLbvoYQwKuaBOMZH
IQTEzK9sVHkIBDzGFxNSr7lTg1YOGNE5MXg/kB9dzxRqYUqk+5IAI+2hsCtUn6HM
M6EWzsGodpBph5Qg5qirY1pN4tVPhQH+4i+JJj258QQkiv63t4SNuWcKudMpCXoc
rwnOD+pU6u+u//bxxsF51ekxJaOJkypyLhJjUPKlT1vDXrRtecFPewMTnVtwkPFJ
d0uuhEc7kthMHCVF/IFcffYOxgKSzjqfmeNhnWPUh7Q4F6s1+52h+5+VtwO0Hqta
CC40tCEyH7o/1DbVcOZkEvyS7yicSjFKW2VmJLTmCM5/
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:23 2025 by rpki-client