Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UJdHPFrPELmjfxgR_TlwRRl666M.roa
File: UJdHPFrPELmjfxgR_TlwRRl666M.roa (raw, json)
Hash identifier: 67LSlC1Mv0Tvp43yOL17jaLV7cz3HqNnUc32cq+3v1Q=
Subject key identifier: 50:97:47:3C:5A:CF:10:B9:A3:7F:18:11:FD:39:70:45:19:7A:EB:A3
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427484171F35CC5434872C22012C80740
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UJdHPFrPELmjfxgR_TlwRRl666M.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9009
IP address blocks: 192.36.57.0/24 maxlen: 24
192.71.227.0/24 maxlen: 24
192.71.249.0/24 maxlen: 24
192.121.22.0/24 maxlen: 24
192.121.23.0/24 maxlen: 24
192.121.46.0/23 maxlen: 24
192.121.46.0/24 maxlen: 24
192.121.47.0/24 maxlen: 24
192.121.162.0/24 maxlen: 24
192.121.170.0/24 maxlen: 24
194.14.208.0/24 maxlen: 24
194.14.217.0/24 maxlen: 24
194.68.26.0/24 maxlen: 24
194.68.27.0/24 maxlen: 24
194.68.44.0/24 maxlen: 24
194.71.126.0/24 maxlen: 24
194.71.227.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:41:71:f3:5c:c5:43:48:72:c2:20:12:c8:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5097473c5acf10b9a37f1811fd397045197aeba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:11:c6:e0:0f:a0:a5:2b:38:c2:ee:57:df:c4:
1f:30:2b:65:6a:95:30:df:67:5b:e8:77:0e:70:d0:
90:1b:33:11:87:95:f2:11:4f:c2:84:83:0a:48:b7:
64:d7:d5:db:85:4b:bc:0d:33:62:fb:0a:82:bc:1c:
e3:9b:10:e0:37:5a:1f:67:6f:53:aa:fb:6c:1a:da:
17:77:89:b2:f7:97:ef:e3:c3:51:32:20:f9:ae:ef:
31:67:c0:1d:25:ec:1f:2d:bc:20:5e:5d:0d:61:b7:
76:07:b5:10:77:a5:35:86:3c:d7:4e:c9:cd:40:10:
14:85:96:0b:da:42:79:d1:e7:64:cc:7d:47:80:e4:
7f:f1:27:1e:70:cc:9f:e6:39:88:13:5d:31:e1:6e:
86:18:63:05:0c:fb:62:18:1c:c7:22:1f:89:25:a0:
1f:a6:1d:ce:c8:c2:59:90:58:a7:6c:1b:80:9e:5f:
6f:67:16:01:4b:67:11:b0:de:fe:6d:df:7c:ed:96:
14:e3:c5:0e:20:57:7e:2a:1c:3b:aa:64:07:b8:ab:
a0:18:ae:84:6a:23:5d:61:cd:05:ed:7c:aa:06:55:
15:2f:28:d0:ff:b5:dc:18:7f:ce:d8:52:0e:41:a9:
87:78:8b:ed:0c:1c:42:07:f4:1c:b8:e3:50:45:c0:
06:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:97:47:3C:5A:CF:10:B9:A3:7F:18:11:FD:39:70:45:19:7A:EB:A3
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/UJdHPFrPELmjfxgR_TlwRRl666M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.57.0/24
192.71.227.0/24
192.71.249.0/24
192.121.22.0/23
192.121.46.0/23
192.121.162.0/24
192.121.170.0/24
194.14.208.0/24
194.14.217.0/24
194.68.26.0/23
194.68.44.0/24
194.71.126.0/24
194.71.227.0/24
Signature Algorithm: sha256WithRSAEncryption
59:77:70:e4:b7:b5:ab:20:8c:2b:c7:49:bd:37:60:71:c8:65:
f5:fc:8a:b3:0f:ee:ab:3f:02:36:93:9e:9b:7e:8d:18:62:3e:
5a:7d:63:ba:6e:8c:62:cd:4f:1b:b7:c5:3f:dd:f3:2b:5d:54:
4e:ad:ac:cb:6a:5a:fb:e2:fb:ee:d7:b5:84:58:61:3f:ec:f2:
d1:03:15:4b:76:6e:02:0b:18:e4:ff:da:cd:66:43:83:a3:d0:
02:38:64:1d:13:24:5d:c1:53:f0:28:56:99:3c:61:27:dc:df:
8d:5e:fb:f0:87:a6:ce:df:f5:2d:55:40:49:65:de:69:1e:16:
cc:e6:69:80:55:9a:0e:bf:45:ff:8a:92:5c:84:07:d1:6b:7d:
01:5f:e9:e2:3d:d8:dd:37:c2:2d:9e:e7:0e:b3:f5:36:6c:64:
cd:5b:74:90:cf:97:ba:00:50:9f:93:0c:e6:59:db:a4:02:89:
da:a9:d4:88:d8:93:5e:9a:6f:39:e8:10:18:be:53:85:86:c0:
b2:06:0d:7d:3d:94:41:1f:00:75:d3:9b:8a:1c:f0:8b:f7:4e:
cb:85:13:a0:9d:dd:31:71:74:13:a1:d1:66:bf:1c:99:11:89:
21:87:89:a5:1b:be:b6:a0:41:e7:a5:1b:ef:2a:bf:54:91:47:
e5:80:64:d3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgISAZQnSEFx81zFQ0hywiASyAdAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MDk3NDczYzVhY2YxMGI5YTM3ZjE4MTFmZDM5NzA0NTE5N2FlYmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxHG4A+gpSs4wu5X38QfMCtlapUw
32db6HcOcNCQGzMRh5XyEU/ChIMKSLdk19XbhUu8DTNi+wqCvBzjmxDgN1ofZ29T
qvtsGtoXd4my95fv48NRMiD5ru8xZ8AdJewfLbwgXl0NYbd2B7UQd6U1hjzXTsnN
QBAUhZYL2kJ50edkzH1HgOR/8ScecMyf5jmIE10x4W6GGGMFDPtiGBzHIh+JJaAf
ph3OyMJZkFinbBuAnl9vZxYBS2cRsN7+bd987ZYU48UOIFd+Khw7qmQHuKugGK6E
aiNdYc0F7XyqBlUVLyjQ/7XcGH/O2FIOQamHeIvtDBxCB/QcuONQRcAGfwIDAQAB
o4ICUTCCAk0wHQYDVR0OBBYEFFCXRzxazxC5o38YEf05cEUZeuujMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvVUpkSFBGclBFTG1qZnhnUl9UbHdSUmw2NjZNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGcGCCsGAQUFBwEHAQH/BFgwVjBUBAIAATBOAwQAwCQ5AwQA
wEfjAwQAwEf5AwQBwHkWAwQBwHkuAwQAwHmiAwQAwHmqAwQAwg7QAwQAwg7ZAwQB
wkQaAwQAwkQsAwQAwkd+AwQAwkfjMA0GCSqGSIb3DQEBCwUAA4IBAQBZd3Dkt7Wr
IIwrx0m9N2BxyGX1/IqzD+6rPwI2k56bfo0YYj5afWO6boxizU8bt8U/3fMrXVRO
razLalr74vvu17WEWGE/7PLRAxVLdm4CCxjk/9rNZkODo9ACOGQdEyRdwVPwKFaZ
PGEn3N+NXvvwh6bO3/UtVUBJZd5pHhbM5mmAVZoOv0X/ipJchAfRa30BX+niPdjd
N8ItnucOs/U2bGTNW3SQz5e6AFCfkwzmWdukAonaqdSI2JNemm856BAYvlOFhsCy
Bg19PZRBHwB105uKHPCL907LhROgnd0xcXQTodFmvxyZEYkhh4mlG762oEHnpRvv
Kr9UkUflgGTT
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:50 2025 by rpki-client