Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4NV1vklgpV8MxmnSW-bTixlz_Ng.roa
File: 4NV1vklgpV8MxmnSW-bTixlz_Ng.roa (raw, json)
Hash identifier: JJTf9+MX5p7O/4IgbQbx+QcDT1+LQc9WNPtvA/e+R2s=
Subject key identifier: E0:D5:75:BE:49:60:A5:5F:0C:C6:69:D2:5B:E6:D3:8B:19:73:FC:D8
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427486D2A40F5C02314E8F4981B47288A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4NV1vklgpV8MxmnSW-bTixlz_Ng.roa
Signing time: Thu 02 Jan 2025 13:50:45 +0000
ROA not before: Thu 02 Jan 2025 13:50:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200881
IP address blocks: 193.235.86.0/23 maxlen: 23
193.235.88.0/23 maxlen: 23
193.235.90.0/24 maxlen: 24
193.235.91.0/24 maxlen: 24
193.235.92.0/23 maxlen: 23
193.235.94.0/23 maxlen: 23
194.68.138.0/23 maxlen: 23
194.68.140.0/22 maxlen: 22
194.68.144.0/22 maxlen: 22
194.68.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6d:2a:40:f5:c0:23:14:e8:f4:98:1b:47:28:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0d575be4960a55f0cc669d25be6d38b1973fcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:9a:e2:78:9c:27:4e:63:12:55:da:c5:40:98:
3f:b5:27:4e:83:53:78:22:7b:23:d6:05:86:b4:03:
b4:48:df:f5:4a:da:ee:13:2f:d4:68:29:2b:99:fc:
1f:61:a9:a5:d4:35:33:c2:f9:45:79:f7:13:6b:fb:
cf:03:9f:b2:42:94:33:cc:83:6a:59:68:51:6d:5c:
17:81:6b:47:e8:4f:3f:47:a7:a6:c2:4b:63:9b:57:
b5:a1:aa:af:a5:67:42:3b:0b:88:a8:5b:d0:57:31:
bf:02:df:d5:ee:ff:5e:83:7b:40:ca:58:8e:7c:bf:
af:3b:b9:ec:aa:63:49:c9:7d:9b:96:1b:03:65:67:
84:68:3b:e8:67:e0:6d:d1:38:fb:e0:0a:f8:f3:29:
fa:a8:26:d5:ac:3b:3b:ef:dc:ff:12:9e:ae:67:da:
6d:53:66:75:dd:d3:66:21:e5:5a:c6:c7:44:c2:72:
40:0e:fd:c9:b6:ae:f9:4a:33:98:5c:c6:34:4f:d2:
44:4c:10:2c:d6:b2:e6:74:83:e3:2d:69:d7:78:10:
74:97:67:2a:50:72:50:40:d8:60:7a:1c:93:8a:ce:
aa:3c:85:f6:db:3d:e3:14:c7:3c:e6:dc:e1:1e:67:
0a:ae:a0:27:ee:d4:2e:93:ec:19:63:02:51:1c:ab:
b3:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D5:75:BE:49:60:A5:5F:0C:C6:69:D2:5B:E6:D3:8B:19:73:FC:D8
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/4NV1vklgpV8MxmnSW-bTixlz_Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.86.0-193.235.95.255
194.68.138.0-194.68.149.255
Signature Algorithm: sha256WithRSAEncryption
6c:76:6a:25:9d:58:18:8c:39:0e:9c:db:5a:ed:5a:9d:9e:22:
fa:45:55:c4:d6:fa:62:1a:21:d6:d5:f1:d3:55:ff:a0:67:16:
1d:09:3f:1f:ed:d5:2b:1c:e1:e9:9b:6a:31:17:ac:3c:e7:4d:
c4:b8:1e:eb:79:15:fa:9d:ff:b7:03:b7:46:f4:1d:63:ba:27:
ff:5d:46:65:16:db:19:0c:dc:60:d5:bf:c3:a4:03:aa:cd:4d:
d8:2c:e6:f0:cc:ad:54:bc:6c:23:fe:ef:82:1d:c0:34:c2:cf:
fd:d1:4d:85:47:f3:f6:a3:93:c9:91:93:c4:f4:68:1e:4e:30:
77:ff:48:43:89:67:46:f6:75:d4:2c:5f:b3:4e:60:65:3f:05:
14:c9:d0:05:58:dc:1f:c6:1b:91:f0:04:c2:3e:5a:2c:4d:39:
0b:58:6c:2d:44:9c:df:76:b2:43:15:a2:ae:5d:92:fc:ab:ab:
99:87:40:97:3c:e1:71:18:82:4c:68:85:a9:4b:04:ea:a1:f8:
4e:25:74:1b:b7:4b:d1:ef:d7:d0:21:41:06:07:15:a8:f6:b0:
ac:73:c8:fd:1f:c4:9f:0a:3b:c7:1a:8c:75:2c:a6:78:c6:9b:
d9:05:22:01:d7:0d:49:b8:dd:2f:e9:ff:a1:ee:e9:b2:d5:7f:
79:ce:56:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:24 2025 by rpki-client