Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7l3wLZYdpceeH98n5CGfHHn3_8I.roa
File: 7l3wLZYdpceeH98n5CGfHHn3_8I.roa (raw, json)
Hash identifier: OXFMN8FNM1/V/t8Tp9yhpBMTmfZLhTX9uZFGpFHscN4=
Subject key identifier: EE:5D:F0:2D:96:1D:A5:C7:9E:1F:DF:27:E4:21:9F:1C:79:F7:FF:C2
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274872F13765019D85871FA9509F9C3A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7l3wLZYdpceeH98n5CGfHHn3_8I.roa
Signing time: Thu 02 Jan 2025 13:50:46 +0000
ROA not before: Thu 02 Jan 2025 13:50:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204896
IP address blocks: 192.121.244.0/24 maxlen: 24
193.234.25.0/24 maxlen: 24
193.234.61.0/24 maxlen: 24
194.14.30.0/24 maxlen: 24
194.103.40.0/24 maxlen: 24
194.103.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:72:f1:37:65:01:9d:85:87:1f:a9:50:9f:9c:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee5df02d961da5c79e1fdf27e4219f1c79f7ffc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:d3:43:3b:b9:c4:c5:4a:90:db:38:d5:0f:74:
89:cd:56:ca:95:78:47:6d:e2:b7:1a:b8:0c:e6:4a:
0d:a8:ca:a6:e5:98:8d:a9:ea:e1:3d:d6:a7:f3:74:
22:74:83:e7:1f:0e:f2:6a:06:14:f7:51:63:30:79:
10:f7:d4:43:38:d6:42:66:83:cb:2f:36:38:fb:c8:
19:a5:3b:3d:17:ce:9a:44:64:19:ba:6c:99:1a:bb:
08:64:bf:01:55:0d:12:99:8d:d3:26:8b:65:68:aa:
ab:d8:c0:ee:7f:a5:23:21:43:d6:7a:42:9f:40:05:
83:3a:6f:ec:ae:64:65:e8:22:61:6b:e1:63:8f:07:
a6:90:39:23:7b:bf:f5:aa:96:f5:00:d3:05:67:39:
7f:a1:3e:0c:0c:0a:82:b2:27:7f:e9:79:15:67:e7:
76:75:47:ca:55:a4:a0:ce:7d:44:d8:23:47:86:e9:
97:1c:09:0c:b1:33:7c:ad:97:9a:87:55:0c:4f:1c:
f2:f2:94:e9:6b:30:6e:34:3b:54:b0:e4:32:f4:99:
51:cf:7b:36:ea:42:e8:2b:9f:96:54:b4:cf:00:da:
fe:93:4f:8c:67:ff:d2:95:be:91:97:b2:6f:a2:6e:
20:5c:9a:86:83:c5:aa:bb:fc:38:5e:14:f8:8c:96:
80:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5D:F0:2D:96:1D:A5:C7:9E:1F:DF:27:E4:21:9F:1C:79:F7:FF:C2
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/7l3wLZYdpceeH98n5CGfHHn3_8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.244.0/24
193.234.25.0/24
193.234.61.0/24
194.14.30.0/24
194.103.40.0/24
194.103.158.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:da:0b:f7:0d:94:0e:1b:5f:70:5a:7d:1f:b3:67:75:1c:66:
a3:b6:ef:3f:ac:74:d1:93:c5:0e:c4:47:d0:83:4c:30:ba:b8:
40:b2:e9:45:a1:b9:b8:a6:70:ab:ba:e7:ce:8b:27:db:83:7b:
f0:4f:54:a3:3a:46:fc:b0:42:5c:e5:ad:e6:c3:bf:b2:08:63:
76:18:a7:1a:5a:4c:9a:1a:82:56:92:06:47:0c:08:42:df:b9:
e0:c1:7b:b1:01:22:25:a1:dc:87:e3:20:72:6f:3b:f9:9d:fb:
17:7a:30:00:a4:a0:9e:59:f3:54:09:f4:31:fd:7a:cb:d3:d7:
6e:6b:b9:3c:b6:6f:7b:de:15:9c:ab:2b:c8:c9:58:70:d9:b9:
de:84:2a:04:4a:96:f1:36:9f:01:ed:d2:2b:e2:3a:d9:14:b7:
bb:36:41:e5:72:5a:7f:ef:8c:0a:d6:8e:48:45:43:8a:50:07:
24:a2:cf:28:0a:cd:74:47:fd:d0:b9:42:6f:d8:d5:dd:f3:b6:
85:e8:3c:2c:ef:9f:4e:bc:05:29:e7:85:65:1b:0f:05:ce:81:
d8:75:5e:47:8c:56:ab:37:68:8d:ac:14:11:58:c5:7b:c1:f7:
a0:10:41:f0:a2:05:a6:f0:4b:9e:9d:d9:91:d7:79:82:8e:8a:
53:12:ab:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:24 2025 by rpki-client