Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PcysSgZgJy0Hky6qFThYUoA3aEQ.roa
File: PcysSgZgJy0Hky6qFThYUoA3aEQ.roa (raw, json)
Hash identifier: sOut62Bx5rxhSTG5aD83s9HNEWLZcIpX0zRyi4I65Sw=
Subject key identifier: 3D:CC:AC:4A:06:60:27:2D:07:93:2E:AA:15:38:58:52:80:37:68:44
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748744835F923979AC4ABA5095E6A65
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PcysSgZgJy0Hky6qFThYUoA3aEQ.roa
Signing time: Thu 02 Jan 2025 13:50:47 +0000
ROA not before: Thu 02 Jan 2025 13:50:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205199
IP address blocks: 192.36.246.0/24 maxlen: 24
192.121.11.0/24 maxlen: 24
192.121.128.0/22 maxlen: 24
193.180.192.0/23 maxlen: 24
193.181.36.0/24 maxlen: 24
193.181.44.0/24 maxlen: 24
193.234.6.0/24 maxlen: 24
193.234.97.0/24 maxlen: 24
193.234.112.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:74:48:35:f9:23:97:9a:c4:ab:a5:09:5e:6a:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3dccac4a0660272d07932eaa1538585280376844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:75:89:0b:10:15:05:82:93:49:05:b2:9d:
f0:5b:b1:c2:47:e3:56:9b:3c:7b:a2:ec:5c:a7:87:
eb:58:0c:a4:02:a3:36:17:5c:1d:75:bf:68:28:e4:
12:01:8d:5e:1f:e8:0e:5d:11:27:08:78:09:03:c3:
07:e4:a1:96:e8:93:d6:0f:40:09:59:ce:d8:de:eb:
48:40:30:d0:4c:e6:81:71:05:b0:57:f2:1f:23:1c:
83:e3:37:5b:19:40:60:db:10:3f:b6:e3:c0:f9:81:
01:e8:91:99:9f:4e:f8:fa:45:3d:af:87:05:3a:75:
b3:81:91:63:f5:56:88:ec:39:2d:46:5f:10:ca:af:
c7:7b:28:77:0c:d7:79:48:64:3e:22:85:f0:1a:3e:
75:4f:93:43:99:00:ff:9e:7e:4f:12:a2:fa:51:8a:
d2:90:46:b5:a0:b3:4a:32:df:49:97:9e:17:34:28:
95:7d:3f:1c:7b:46:a1:39:bc:27:f8:b6:e0:3d:75:
af:48:53:85:96:f1:7b:f1:a6:13:b8:61:bc:f6:94:
63:31:b2:c7:66:0f:61:a3:01:9a:00:8f:11:06:30:
61:0a:f6:74:95:a7:49:73:2f:22:08:49:db:06:df:
31:c9:d9:ab:bf:f6:5b:0b:3b:75:75:3b:66:81:5b:
b6:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:CC:AC:4A:06:60:27:2D:07:93:2E:AA:15:38:58:52:80:37:68:44
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/PcysSgZgJy0Hky6qFThYUoA3aEQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.246.0/24
192.121.11.0/24
192.121.128.0/22
193.180.192.0/23
193.181.36.0/24
193.181.44.0/24
193.234.6.0/24
193.234.97.0/24
193.234.112.0/22
Signature Algorithm: sha256WithRSAEncryption
67:7f:28:df:0d:66:72:3f:c2:99:8c:e8:86:46:e9:37:2a:a4:
a0:4d:4d:85:b6:c4:8a:d7:5f:ea:c6:e8:dc:32:7b:1c:73:89:
1d:9d:3c:41:de:5b:f4:77:0e:55:e8:9d:4f:08:c2:33:94:cc:
3f:03:6b:b7:d2:b9:2c:55:5f:e6:ac:89:9e:5c:b5:aa:69:1f:
dc:7b:fa:55:62:45:2d:43:88:81:e3:90:c9:ef:35:c1:07:1a:
39:55:3e:4a:72:56:76:df:b7:2b:b7:a2:12:5f:53:26:61:23:
66:ac:7e:fc:c8:f2:5e:a3:e7:25:f7:2b:b8:0a:97:8d:33:4c:
5a:e9:eb:db:3f:60:7b:bd:da:ce:ac:3d:30:9c:25:28:15:31:
68:93:3b:f4:53:9c:8e:fd:0b:10:77:fb:0c:3b:4d:bc:bf:ef:
e1:d6:bb:df:22:3f:43:fc:e4:f1:9e:71:f1:81:c3:7c:ff:30:
4b:ef:2e:5a:8c:64:51:55:59:9f:5a:d1:37:f3:e3:7e:78:4e:
c0:be:99:1b:0b:cc:72:78:d3:ac:e3:81:df:ba:fc:9e:2d:41:
9e:25:28:60:1a:e6:e7:75:54:6c:b6:00:f1:89:aa:1d:85:90:
e9:78:76:0c:d0:c5:b2:61:4b:6c:00:c2:a5:52:ad:d6:dc:22:
4c:47:05:2e
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZQnSHRINfkjl5rEq6UJXmplMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZGNjYWM0YTA2NjAyNzJkMDc5MzJlYWExNTM4NTg1MjgwMzc2ODQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3Z1iQsQFQWCk0kFsp3wW7HCR+NW
mzx7ouxcp4frWAykAqM2F1wddb9oKOQSAY1eH+gOXREnCHgJA8MH5KGW6JPWD0AJ
Wc7Y3utIQDDQTOaBcQWwV/IfIxyD4zdbGUBg2xA/tuPA+YEB6JGZn074+kU9r4cF
OnWzgZFj9VaI7DktRl8Qyq/Heyh3DNd5SGQ+IoXwGj51T5NDmQD/nn5PEqL6UYrS
kEa1oLNKMt9Jl54XNCiVfT8ce0ahObwn+LbgPXWvSFOFlvF78aYTuGG89pRjMbLH
Zg9howGaAI8RBjBhCvZ0ladJcy8iCEnbBt8xydmrv/ZbCzt1dTtmgVu2FwIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFD3MrEoGYCctB5MuqhU4WFKAN2hEMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvUGN5c1NnWmdKeTBIa3k2cUZUaFlVb0EzYUVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQAwCT2AwQA
wHkLAwQCwHmAAwQBwbTAAwQAwbUkAwQAwbUsAwQAweoGAwQAwephAwQCwepwMA0G
CSqGSIb3DQEBCwUAA4IBAQBnfyjfDWZyP8KZjOiGRuk3KqSgTU2FtsSK11/qxujc
Mnscc4kdnTxB3lv0dw5V6J1PCMIzlMw/A2u30rksVV/mrImeXLWqaR/ce/pVYkUt
Q4iB45DJ7zXBBxo5VT5KclZ237crt6ISX1MmYSNmrH78yPJeo+cl9yu4CpeNM0xa
6evbP2B7vdrOrD0wnCUoFTFokzv0U5yO/QsQd/sMO028v+/h1rvfIj9D/OTxnnHx
gcN8/zBL7y5ajGRRVVmfWtE38+N+eE7AvpkbC8xyeNOs44HfuvyeLUGeJShgGubn
dVRstgDxiaodhZDpeHYM0MWyYUtsAMKlUq3W3CJMRwUu
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:03 2025 by rpki-client