Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9B9RrfR-lNQ0ID9AxREWCu0NZOo.roa
File: 9B9RrfR-lNQ0ID9AxREWCu0NZOo.roa (raw, json)
Hash identifier: danlGgEQEJTOue81vqGqvNWjZjMhoR62I6vsoLNR8MU=
Subject key identifier: F4:1F:51:AD:F4:7E:94:D4:34:20:3F:40:C5:11:16:0A:ED:0D:64:EA
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427486B687A4B9A263204F9EBF6A2FB12
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9B9RrfR-lNQ0ID9AxREWCu0NZOo.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199902
IP address blocks: 192.36.83.0/24 maxlen: 24
192.36.97.0/24 maxlen: 24
192.71.188.0/24 maxlen: 24
192.71.190.0/24 maxlen: 24
192.71.191.0/24 maxlen: 24
192.121.3.0/24 maxlen: 24
192.121.120.0/24 maxlen: 24
2a01:280:301::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:6b:68:7a:4b:9a:26:32:04:f9:eb:f6:a2:fb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f41f51adf47e94d434203f40c511160aed0d64ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:31:b4:a0:35:49:a8:26:02:40:48:ea:d1:
ce:f4:29:02:21:4a:7b:9f:5f:d6:d7:88:30:b5:3a:
ef:ae:3d:f7:29:39:33:0c:36:0f:7e:08:7e:98:75:
2c:3c:d2:6a:00:e7:2c:60:2e:78:18:00:4e:10:49:
c7:c6:b4:59:a3:9c:70:b0:ce:0a:a7:60:fb:b5:c9:
72:c9:87:0c:19:a6:29:5c:56:54:22:cd:76:4e:c9:
7b:13:fb:24:e3:37:c6:ee:49:1c:fa:ee:9c:44:c4:
0c:f1:db:25:c3:ca:f8:33:15:11:36:29:76:a2:e9:
b5:fc:88:82:e7:5e:df:15:28:9a:0a:5a:ae:b6:0a:
1f:fb:d0:a4:00:e9:80:23:56:40:93:70:53:2c:2e:
4e:19:6a:d8:db:62:3b:e7:b4:c4:37:bd:01:5b:03:
39:3d:31:3e:a2:45:1a:66:1b:5e:3a:48:05:f9:35:
b7:0f:09:0d:aa:c0:e8:80:b2:5e:61:7e:a5:b1:b7:
77:a6:63:25:0a:14:ea:ff:b9:a5:da:ee:c0:f5:f9:
4c:66:89:52:d1:20:5b:35:02:d6:a6:93:82:f5:c5:
b7:ad:41:ef:db:15:f8:d0:21:14:d8:86:4e:b9:9b:
7b:2a:53:93:60:09:be:96:29:bd:fc:8e:9b:70:7e:
b9:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:1F:51:AD:F4:7E:94:D4:34:20:3F:40:C5:11:16:0A:ED:0D:64:EA
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9B9RrfR-lNQ0ID9AxREWCu0NZOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.83.0/24
192.36.97.0/24
192.71.188.0/24
192.71.190.0/23
192.121.3.0/24
192.121.120.0/24
IPv6:
2a01:280:301::/48
Signature Algorithm: sha256WithRSAEncryption
8b:e5:60:a4:f7:4d:f7:b7:49:da:53:15:8f:f1:a4:bf:ec:b5:
a6:46:61:3b:4c:0a:35:ce:34:bd:38:27:1a:34:18:75:7a:5c:
ac:39:43:69:76:b3:c8:44:64:d7:82:34:8f:3c:22:98:57:45:
f0:73:a7:d6:17:0a:a9:3d:4d:03:a3:85:37:b4:9e:76:e5:a8:
e7:5d:29:ec:29:e3:96:33:ff:cb:54:be:57:81:2c:02:c9:82:
dd:80:34:fc:32:f4:68:17:a7:77:91:da:00:7e:09:71:e0:c7:
0f:6d:e1:e3:46:ee:6e:44:56:3a:72:f6:45:0e:08:6a:36:b5:
b1:27:66:7c:ac:9e:1c:ef:29:44:10:ef:8b:36:a6:5b:4e:f0:
bb:43:6b:c4:93:c7:f5:f4:9d:48:62:45:b3:8d:93:88:12:5f:
0d:52:c5:49:67:2a:b6:82:d8:ac:f8:3f:8f:4b:01:d5:0a:b1:
ef:3a:6e:e5:ed:b0:91:fd:32:94:c6:bb:1a:ea:f8:a0:d3:6d:
47:80:08:3c:31:14:cc:29:b7:41:e2:81:b9:81:bf:9c:cb:68:
5b:22:84:38:ea:01:64:7b:5c:cb:33:56:d1:0f:9d:90:43:f5:
c5:3c:5d:ed:e9:8d:1b:c0:a1:ec:5c:53:cd:34:90:98:b1:93:
0c:48:5c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 15:53:51 2025 by rpki-client