Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EDg8y78iKuTl1XBFIMGb4KGoLY4.roa
File: EDg8y78iKuTl1XBFIMGb4KGoLY4.roa (raw, json)
Hash identifier: 770OnLOeR7hmkrJsssp98oq3jyTruTlniCIwztzrn9I=
Subject key identifier: 10:38:3C:CB:BF:22:2A:E4:E5:D5:70:45:20:C1:9B:E0:A1:A8:2D:8E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01955AFA3114D663B0B9FBFE6F78F8C820D6
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EDg8y78iKuTl1XBFIMGb4KGoLY4.roa
Signing time: Mon 03 Mar 2025 07:48:20 +0000
ROA not before: Mon 03 Mar 2025 07:48:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203052
IP address blocks: 192.121.204.0/22 maxlen: 22
192.176.224.0/22 maxlen: 22
193.180.76.0/22 maxlen: 22
193.234.128.0/22 maxlen: 22
194.132.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Apr 2025 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5a:fa:31:14:d6:63:b0:b9:fb:fe:6f:78:f8:c8:20:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 3 07:48:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10383ccbbf222ae4e5d5704520c19be0a1a82d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c9:30:15:76:7f:95:c9:c6:9a:ce:ae:9f:78:
9d:e4:10:fb:31:59:af:54:df:a7:c2:3e:7e:0b:f9:
ca:47:73:b4:e2:a0:6a:e9:8c:5d:67:e8:2f:5d:95:
7a:02:1e:72:d0:41:21:42:2b:c6:39:7a:23:3f:ee:
7f:2c:fb:12:37:47:cd:45:ae:42:a2:2e:66:20:32:
e9:fb:0a:71:4b:59:6b:5f:6a:55:3b:8b:c4:c2:99:
bc:0e:eb:20:61:67:ab:85:4b:b2:b1:01:25:38:6a:
99:1c:49:47:e2:43:df:da:ba:64:91:84:05:6d:38:
99:c7:60:3c:82:6c:a1:37:e2:2d:de:79:11:81:5e:
a3:46:db:eb:54:4e:2a:c7:02:79:5e:83:e7:c8:1b:
5e:e4:b3:36:4e:be:71:b3:a1:92:26:58:58:49:1d:
a7:d2:1e:cf:2f:09:10:8c:ca:83:7b:35:6f:7d:ce:
9c:26:95:db:54:64:24:ec:95:e9:66:09:a7:64:09:
a0:13:1c:c8:17:06:6a:82:3e:51:44:e2:9e:5d:6e:
7e:b8:f7:a2:57:c3:56:f3:f7:50:0b:de:ee:ac:0a:
44:fd:72:a3:31:8b:1c:8a:7a:f1:33:2c:29:31:d8:
38:3e:ad:48:fa:83:9e:d8:bd:85:ea:e6:b2:1f:7b:
e1:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:38:3C:CB:BF:22:2A:E4:E5:D5:70:45:20:C1:9B:E0:A1:A8:2D:8E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/EDg8y78iKuTl1XBFIMGb4KGoLY4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.204.0/22
192.176.224.0/22
193.180.76.0/22
193.234.128.0/22
194.132.72.0/22
Signature Algorithm: sha256WithRSAEncryption
99:cc:b5:f6:7b:40:ef:e8:ef:49:d7:1d:24:e1:ac:90:65:d2:
f5:66:7c:ac:c7:8d:db:14:af:50:6a:94:a4:b5:e8:f3:4f:c6:
e7:cf:15:3a:35:c7:74:7d:e2:90:9b:d3:67:9c:a5:ca:ef:18:
c6:80:8e:d2:ad:11:dd:69:0a:6f:27:26:10:2a:87:4f:26:8e:
41:c1:31:41:49:f3:e9:fd:f0:17:b9:de:73:76:4b:91:8d:27:
58:68:87:55:2c:a8:ef:3f:44:00:5c:0b:70:8e:3c:e7:29:fb:
7c:7f:78:7c:63:e1:53:7d:bf:29:0d:f6:59:5a:37:dc:12:32:
74:3e:31:d2:7f:9b:d7:d1:f4:fe:a0:5c:72:7b:4f:95:c6:8c:
54:fa:cf:2b:ea:85:83:d3:ab:70:92:53:28:6a:97:97:36:fc:
48:4a:78:ac:05:b7:6b:06:96:29:7a:18:09:9a:2a:78:0e:ed:
8e:e0:1f:5e:50:6f:75:ab:b3:2e:76:65:70:b2:5e:a1:f9:2f:
fa:c6:5f:30:25:38:fb:1a:0e:84:8c:9f:8a:39:9c:84:01:21:
69:04:92:f6:b4:c3:82:16:9c:32:9a:57:27:50:51:b6:9a:53:
a6:22:5d:96:98:1b:75:a1:b2:f3:c1:6a:4e:55:30:b8:91:32:
d5:2d:a0:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 15:15:26 2025 by rpki-client