Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Tp69nBJrUU7E2JRKJpc4dPuo5pg.roa
File: Tp69nBJrUU7E2JRKJpc4dPuo5pg.roa (raw, json)
Hash identifier: OptlS6MVkDbd4gigFM1sEs7vfpfn84OZRDJxauzztRE=
Subject key identifier: 4E:9E:BD:9C:12:6B:51:4E:C4:D8:94:4A:26:97:38:74:FB:A8:E6:98
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427486701BBE1B60455C32314EA72B264
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Tp69nBJrUU7E2JRKJpc4dPuo5pg.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198463
IP address blocks: 193.182.180.0/24 maxlen: 24
194.68.125.0/24 maxlen: 24
194.132.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:67:01:bb:e1:b6:04:55:c3:23:14:ea:72:b2:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4e9ebd9c126b514ec4d8944a26973874fba8e698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:1a:77:ad:b9:b2:59:62:f4:3a:f9:8c:9f:
10:e4:48:8c:72:a0:17:fc:1d:89:cc:f0:85:ef:83:
7a:6c:00:19:bb:f2:90:73:7b:e9:09:f4:05:72:0f:
d3:b2:3c:93:9c:23:6d:9f:49:62:23:b8:f3:ef:a9:
86:da:29:3b:86:39:2b:eb:3b:78:a4:68:e3:19:45:
f9:06:04:7a:f6:84:2d:60:ac:c7:a1:5c:8c:70:87:
b1:69:36:23:1b:93:dd:e6:ac:a0:4e:72:f6:8e:28:
4d:44:96:24:ba:42:46:b2:3a:60:ac:c9:39:8d:de:
69:a8:fc:ee:a5:ed:c1:9f:6d:46:2d:a4:8f:da:07:
b3:ba:bc:2f:8c:e6:c5:81:69:db:b6:0b:c6:70:3a:
5d:ea:1f:1b:f4:ea:4f:ad:86:98:17:07:97:7b:bb:
0f:fb:54:1d:eb:9f:c5:51:67:99:f8:d9:52:b0:03:
4e:f4:86:1f:a0:be:26:a3:40:05:af:95:55:1e:76:
b6:07:c7:1f:a6:20:e7:75:19:32:0c:17:4e:0c:a9:
f1:06:81:64:03:27:e2:b1:a2:4f:8e:53:65:77:5f:
1c:72:86:0e:1e:0f:83:21:bd:f7:66:6d:2b:23:fb:
15:ec:c4:cb:c0:a6:78:0a:08:45:cf:bf:31:6c:38:
93:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:9E:BD:9C:12:6B:51:4E:C4:D8:94:4A:26:97:38:74:FB:A8:E6:98
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Tp69nBJrUU7E2JRKJpc4dPuo5pg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.182.180.0/24
194.68.125.0/24
194.132.214.0/24
Signature Algorithm: sha256WithRSAEncryption
91:b5:cc:36:5a:84:cb:ed:7a:6a:bb:33:7d:fd:36:48:16:33:
11:eb:33:8b:b0:ff:4d:26:5d:16:a2:da:7b:f6:b7:ea:12:92:
f5:23:0d:dd:92:67:13:f0:26:ac:bf:03:9c:62:79:56:d3:d7:
41:73:16:84:77:79:ed:d5:1d:cd:b7:53:c5:72:f9:17:7d:7e:
27:87:db:58:6e:9e:61:1d:fd:c3:bf:84:d0:af:07:9d:a7:90:
28:e6:9f:5e:73:37:e1:02:f5:3a:3e:30:d5:e6:3f:81:8b:d5:
a5:34:25:f9:90:60:0f:8c:8e:c8:20:f5:89:57:5e:a8:e3:ae:
38:ae:b0:80:d9:02:1c:14:d3:54:e3:65:e2:e4:57:24:0f:30:
95:6a:6a:b5:4e:5a:3e:fb:10:03:28:1a:c2:ca:c1:5e:f1:d7:
16:89:5e:79:78:8f:4f:54:0e:c1:b1:d3:45:83:bf:78:de:f1:
16:35:57:d9:8e:7c:24:7a:32:8e:87:3c:a0:a0:f3:69:a6:bb:
e7:00:25:32:f8:7a:d9:1d:39:c5:87:8f:12:15:48:30:ab:62:
fc:95:52:90:a0:10:43:c4:d0:c1:e1:ff:8c:6b:cb:26:4d:9f:
ca:78:67:b2:31:a6:5b:b5:bd:ee:6f:2f:a7:6c:8b:54:c2:23:
94:28:ad:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:26 2025 by rpki-client