Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/T5Vu0XZkm10c-JiGnKixYa94nYI.roa
File: T5Vu0XZkm10c-JiGnKixYa94nYI.roa (raw, json)
Hash identifier: zO0JzlGVpeWxV/adHRuf5iEz6p0cQreR6ORGu617748=
Subject key identifier: 4F:95:6E:D1:76:64:9B:5D:1C:F8:98:86:9C:A8:B1:61:AF:78:9D:82
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427486998B7D4220827420B4AEB9EB9AB
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/T5Vu0XZkm10c-JiGnKixYa94nYI.roa
Signing time: Thu 02 Jan 2025 13:50:44 +0000
ROA not before: Thu 02 Jan 2025 13:50:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199438
IP address blocks: 194.14.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:69:98:b7:d4:22:08:27:42:0b:4a:eb:9e:b9:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4f956ed176649b5d1cf898869ca8b161af789d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:01:a2:a9:f9:8c:12:43:2b:ed:37:10:ed:
b6:77:6c:84:40:61:7e:4b:1b:b3:11:d9:a9:a2:7c:
f4:ce:5e:fd:07:9f:d0:36:bd:c7:25:9f:3c:1b:d5:
72:72:77:a6:fd:c7:50:fb:18:8c:db:53:2c:5d:0e:
a0:6f:f2:10:87:9c:83:89:b6:f4:a7:66:b8:b5:72:
aa:fc:f2:e3:f0:d3:1e:26:f2:77:d4:6f:3c:a5:15:
53:6a:f0:6a:a6:78:18:1e:49:ec:0f:c1:80:b4:5b:
c3:6b:b4:3e:85:00:fb:d3:5c:88:be:61:4c:33:7f:
35:84:aa:9a:41:8c:83:dd:4d:88:d4:e8:d6:99:27:
f8:37:5b:03:41:cf:ec:e3:bc:fa:76:a2:8d:26:d3:
45:18:2e:66:3c:3a:62:87:e5:64:73:d7:47:f2:76:
76:55:e9:f9:15:fa:b8:aa:cb:18:e6:68:8b:fd:8a:
7c:ce:b6:43:a0:4e:1a:3a:28:83:6b:82:a0:23:97:
4b:34:26:d3:4c:07:28:8a:44:4c:3d:9a:6f:16:ca:
ee:41:90:75:5f:65:28:d9:98:74:69:aa:2a:66:2f:
78:82:4c:e5:21:51:b0:a1:b0:2d:a8:f9:a4:8a:b6:
59:58:e3:36:d8:c1:5d:b6:5e:29:50:ff:a6:c3:27:
63:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:95:6E:D1:76:64:9B:5D:1C:F8:98:86:9C:A8:B1:61:AF:78:9D:82
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/T5Vu0XZkm10c-JiGnKixYa94nYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.14.219.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:d5:ee:28:f2:53:bd:6c:34:7e:99:66:6d:c6:32:63:eb:2e:
7b:ad:ea:4b:90:cf:b1:0e:73:1b:da:d6:18:7f:17:28:55:0e:
67:67:15:51:93:ac:8d:63:34:a0:5d:b6:4f:d2:e0:4d:4c:3f:
3e:8e:69:5b:d1:59:9c:17:a9:09:24:94:94:fe:95:f1:23:17:
9c:f3:62:13:33:dc:21:7a:cb:f6:b9:56:fe:97:4d:3c:e3:4a:
3c:7a:16:4d:69:59:9c:c4:82:79:f0:5d:f1:e9:61:30:75:44:
9b:86:36:be:8a:11:f4:85:a4:bb:85:84:e5:76:24:9a:9e:32:
f4:cd:99:9f:48:1f:e2:d1:ad:d3:ae:b7:3f:1e:a9:26:b7:4e:
5c:ba:16:8b:37:4a:5e:0e:00:91:1d:24:6c:89:12:3c:a1:0f:
bd:93:8d:9a:92:7d:ae:e0:e6:91:83:87:7d:46:02:8d:e3:4a:
94:14:79:92:33:59:ee:a8:eb:c9:ff:bf:b7:36:3c:e8:97:4f:
aa:8e:83:c2:32:8c:13:d3:00:20:87:fd:d0:5a:80:31:a5:15:
81:26:e8:75:8f:e0:bb:78:86:14:d7:28:47:8e:91:92:dd:04:
ed:ee:c5:2e:8e:87:55:17:56:15:32:3a:93:6c:0c:b2:e8:4f:
fa:63:a0:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSGmYt9QiCCdCC0rrnrmrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Zjk1NmVkMTc2NjQ5YjVkMWNmODk4ODY5Y2E4YjE2MWFmNzg5ZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BgBoqn5jBJDK+03EO22d2yEQGF+
SxuzEdmponz0zl79B5/QNr3HJZ88G9Vycnem/cdQ+xiM21MsXQ6gb/IQh5yDibb0
p2a4tXKq/PLj8NMeJvJ31G88pRVTavBqpngYHknsD8GAtFvDa7Q+hQD701yIvmFM
M381hKqaQYyD3U2I1OjWmSf4N1sDQc/s47z6dqKNJtNFGC5mPDpih+Vkc9dH8nZ2
Ven5Ffq4qssY5miL/Yp8zrZDoE4aOiiDa4KgI5dLNCbTTAcoikRMPZpvFsruQZB1
X2Uo2Zh0aaoqZi94gkzlIVGwobAtqPmkirZZWOM22MFdtl4pUP+mwydjLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE+VbtF2ZJtdHPiYhpyosWGveJ2CMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvVDVWdTBYWmttMTBjLUppR25LaXhZYTk0bllJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwg7bMA0G
CSqGSIb3DQEBCwUAA4IBAQCr1e4o8lO9bDR+mWZtxjJj6y57repLkM+xDnMb2tYY
fxcoVQ5nZxVRk6yNYzSgXbZP0uBNTD8+jmlb0VmcF6kJJJSU/pXxIxec82ITM9wh
esv2uVb+l00840o8ehZNaVmcxIJ58F3x6WEwdUSbhja+ihH0haS7hYTldiSanjL0
zZmfSB/i0a3Trrc/Hqkmt05cuhaLN0peDgCRHSRsiRI8oQ+9k42akn2u4OaRg4d9
RgKN40qUFHmSM1nuqOvJ/7+3Njzol0+qjoPCMowT0wAgh/3QWoAxpRWBJuh1j+C7
eIYU1yhHjpGS3QTt7sUujodVF1YVMjqTbAyy6E/6Y6CI
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:47 2025 by rpki-client