Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/E1EFs1bnPW8DB5eYe_DuDcsopFU.roa
File: E1EFs1bnPW8DB5eYe_DuDcsopFU.roa (raw, json)
Hash identifier: 3zYUt+tvxwMeB1Lk36WZIky8CXDWDItw710rejT4bPE=
Subject key identifier: 13:51:05:B3:56:E7:3D:6F:03:07:97:98:7B:F0:EE:0D:CB:28:A4:55
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274833F82D28F7A89AD3BBBDB81A98E5
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/E1EFs1bnPW8DB5eYe_DuDcsopFU.roa
Signing time: Thu 02 Jan 2025 13:50:30 +0000
ROA not before: Thu 02 Jan 2025 13:50:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 193.235.207.0/24 maxlen: 24
194.103.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:33:f8:2d:28:f7:a8:9a:d3:bb:bd:b8:1a:98:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=135105b356e73d6f030797987bf0ee0dcb28a455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:3b:a4:88:16:ae:e7:df:80:0d:b3:4e:4f:dd:
89:74:3c:dc:8a:fa:4b:84:31:96:ab:20:77:58:1f:
2e:a2:17:02:13:71:d0:df:16:2c:53:a4:da:4a:ee:
c6:bc:0c:23:51:51:18:8f:38:56:43:98:e5:08:74:
a3:be:f5:19:57:70:81:56:f5:8d:16:ef:f7:96:8f:
43:63:9e:a2:11:35:a3:a5:34:5d:90:68:db:82:7b:
ae:fb:81:3f:8b:48:0c:16:35:27:b4:83:bb:27:85:
ab:b2:ce:6f:98:af:dd:e8:15:28:a3:10:a9:5b:0e:
ca:07:02:78:18:64:b0:2b:f5:51:27:63:f7:2b:e2:
75:0a:e8:02:f5:24:4f:23:ec:7a:cd:1b:ed:ec:4e:
30:2f:f1:b2:3b:82:09:2a:62:ce:93:48:dc:82:93:
7d:a8:ba:e5:77:a8:b5:54:af:dc:dd:33:e8:d0:1b:
e8:14:2b:ef:c7:6a:1f:1a:18:b2:1b:5a:da:1b:bd:
78:30:24:f6:7a:fb:51:e5:81:b0:b4:0b:33:20:4f:
c1:a8:c6:7d:f6:d5:f0:53:56:1f:05:96:52:11:2e:
96:df:82:a7:65:76:2b:77:fc:1d:38:65:ad:23:85:
7a:4d:98:ca:7d:85:15:54:1b:21:f4:10:94:9b:4f:
c6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:51:05:B3:56:E7:3D:6F:03:07:97:98:7B:F0:EE:0D:CB:28:A4:55
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/E1EFs1bnPW8DB5eYe_DuDcsopFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.207.0/24
194.103.42.0/24
Signature Algorithm: sha256WithRSAEncryption
48:f7:48:4b:c2:5d:d5:b4:67:26:72:5e:7d:83:db:fe:6f:c9:
62:b6:68:50:a2:87:60:46:46:fc:2d:78:34:fd:e4:fa:7b:7b:
e9:c5:e7:57:7d:c6:00:07:83:52:db:33:12:6f:d5:aa:95:0d:
2a:19:c4:60:f2:6c:a6:b4:f0:5c:40:09:4c:53:a8:e2:3a:b4:
e8:0d:bb:6c:98:8c:e5:b4:74:7c:e3:30:b8:92:75:46:05:a0:
b9:2c:08:da:4c:b5:c0:c0:47:36:ca:79:08:67:81:ad:98:c4:
59:73:8a:bb:f2:4d:04:b6:06:fd:9a:17:c2:cc:2f:a8:02:60:
42:a2:75:de:d8:de:f6:9b:f1:b9:b4:a9:ce:1f:64:25:07:5b:
61:a3:a0:7a:d6:64:97:91:38:ea:42:0f:80:35:f0:91:c0:fb:
a4:4d:a8:b0:23:63:9b:6d:11:94:c4:90:96:ad:76:85:fa:ff:
6b:d6:03:a6:3e:f0:26:65:4a:94:3c:be:8c:dc:c4:e8:99:f1:
b7:c6:30:8c:ce:af:66:0f:34:4c:e6:b5:cf:fd:a2:e2:76:e5:
7b:8d:e0:1f:81:a9:cd:a2:ca:4c:1b:88:56:ee:f1:c3:30:f8:
c1:db:ba:55:27:37:92:98:10:39:54:67:ef:d3:be:b4:6d:6a:
f0:a4:a8:79
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnSDP4LSj3qJrTu724GpjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzUxMDViMzU2ZTczZDZmMDMwNzk3OTg3YmYwZWUwZGNiMjhhNDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjukiBau59+ADbNOT92JdDzcivpL
hDGWqyB3WB8uohcCE3HQ3xYsU6TaSu7GvAwjUVEYjzhWQ5jlCHSjvvUZV3CBVvWN
Fu/3lo9DY56iETWjpTRdkGjbgnuu+4E/i0gMFjUntIO7J4Wrss5vmK/d6BUooxCp
Ww7KBwJ4GGSwK/VRJ2P3K+J1CugC9SRPI+x6zRvt7E4wL/GyO4IJKmLOk0jcgpN9
qLrld6i1VK/c3TPo0BvoFCvvx2ofGhiyG1raG714MCT2evtR5YGwtAszIE/BqMZ9
9tXwU1YfBZZSES6W34KnZXYrd/wdOGWtI4V6TZjKfYUVVBsh9BCUm0/G1wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBNRBbNW5z1vAweXmHvw7g3LKKRVMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvRTFFRnMxYm5QVzhEQjVlWWVfRHVEY3NvcEZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwevPAwQA
wmcqMA0GCSqGSIb3DQEBCwUAA4IBAQBI90hLwl3VtGcmcl59g9v+b8litmhQoodg
Rkb8LXg0/eT6e3vpxedXfcYAB4NS2zMSb9WqlQ0qGcRg8mymtPBcQAlMU6jiOrTo
DbtsmIzltHR84zC4knVGBaC5LAjaTLXAwEc2ynkIZ4GtmMRZc4q78k0Etgb9mhfC
zC+oAmBConXe2N72m/G5tKnOH2QlB1tho6B61mSXkTjqQg+ANfCRwPukTaiwI2Ob
bRGUxJCWrXaF+v9r1gOmPvAmZUqUPL6M3MTomfG3xjCMzq9mDzRM5rXP/aLiduV7
jeAfganNospMG4hW7vHDMPjB27pVJzeSmBA5VGfv0760bWrwpKh5
-----END CERTIFICATE-----
Generated at Wed Feb 5 10:56:13 2025 by rpki-client