Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YYQbSwVdSyZ0X1zA7nEJo5ZXbag.roa
File: YYQbSwVdSyZ0X1zA7nEJo5ZXbag.roa (raw, json)
Hash identifier: NoWq5hrKOiqKFfMd9vAnqkkcnMNbdYpdz9Fy6AxFnD0=
Subject key identifier: 61:84:1B:4B:05:5D:4B:26:74:5F:5C:C0:EE:71:09:A3:96:57:6D:A8
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748375B86160A03AC45718665C14B39
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YYQbSwVdSyZ0X1zA7nEJo5ZXbag.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1881
IP address blocks: 192.71.128.0/24 maxlen: 24
192.121.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:37:5b:86:16:0a:03:ac:45:71:86:65:c1:4b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=61841b4b055d4b26745f5cc0ee7109a396576da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:44:1a:8e:0e:e0:a2:1f:17:da:c8:3b:be:5c:
91:d2:5d:18:c9:e2:15:7b:1c:aa:22:8d:b1:aa:42:
5e:dc:13:6b:45:d5:17:98:8f:75:28:27:51:b1:98:
c4:e9:0b:17:71:18:f2:29:66:91:a0:91:ca:60:07:
92:30:32:cb:c5:0e:91:c0:66:df:ff:98:e7:67:22:
09:54:f4:4b:90:c7:25:35:88:38:be:18:b3:09:21:
c6:c9:4d:79:08:72:e2:e5:a7:69:7e:5b:6b:f7:25:
d6:c0:c5:aa:ab:e3:d4:f5:ad:92:b3:26:c6:06:63:
9c:5f:51:54:4b:fd:93:4d:3d:73:7a:f7:1a:90:ee:
95:94:f0:eb:35:08:56:57:2e:3b:fe:16:53:69:28:
81:05:70:c3:47:2e:0b:a0:88:05:40:a5:f8:6f:b3:
4d:0f:0c:24:bc:05:cd:2a:a9:1e:89:a6:10:e9:c5:
b6:1c:92:f5:d4:0b:28:89:a1:1b:0e:50:eb:05:92:
fd:66:8d:48:7d:07:95:eb:f6:ee:70:4d:67:e3:25:
3a:45:10:46:ea:dc:54:07:50:c2:00:f9:a9:fb:e8:
03:b8:14:8c:93:3f:07:8f:b5:20:31:75:17:50:68:
4b:86:bd:26:8f:31:17:e0:8e:27:f8:3b:19:88:72:
02:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:84:1B:4B:05:5D:4B:26:74:5F:5C:C0:EE:71:09:A3:96:57:6D:A8
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YYQbSwVdSyZ0X1zA7nEJo5ZXbag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.128.0/24
192.121.30.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:6b:17:05:e5:f9:f2:08:cf:cb:02:b3:49:b9:e1:ab:f6:a6:
05:52:4a:43:a4:6d:b6:79:e8:ab:53:85:2e:00:5c:7b:6c:61:
f4:b1:cc:6a:e6:82:b1:db:cd:7f:26:59:21:ff:7a:2a:fc:30:
a2:d1:13:16:0d:ef:5f:f8:98:a4:49:09:f3:6f:2f:f3:30:5f:
66:30:34:52:cd:73:b9:4c:b3:d6:23:b6:41:17:85:0e:73:c2:
d8:c1:0a:ed:88:c1:60:34:8c:28:49:34:43:aa:20:8c:ad:42:
e3:50:df:23:61:9f:41:de:ed:e5:94:72:b0:0e:75:1f:78:e5:
e8:e3:c7:50:18:ef:89:6c:06:3a:53:27:30:00:9e:cf:d4:41:
b8:cf:44:eb:aa:e9:84:cf:fa:73:b1:e4:c3:00:4d:d4:32:d1:
a8:f2:3d:d1:c5:1e:bd:12:99:b6:09:09:86:0d:f6:b7:26:c2:
a8:93:c2:9b:b6:9a:fd:d0:52:9d:e7:13:4a:0a:44:5d:06:50:
e8:80:2e:fc:6a:d0:4c:4d:a6:f0:ae:1b:e5:b4:a5:28:4d:9a:
ee:1b:df:0c:a5:51:79:fb:69:7b:4c:88:ab:d8:0f:45:ca:16:
a2:6f:fe:6a:eb:c3:cf:21:20:64:b1:77:7c:4b:0c:4d:27:61:
98:4e:e6:48
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQnSDdbhhYKA6xFcYZlwUs5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2MTg0MWI0YjA1NWQ0YjI2NzQ1ZjVjYzBlZTcxMDlhMzk2NTc2ZGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3EQajg7goh8X2sg7vlyR0l0YyeIV
exyqIo2xqkJe3BNrRdUXmI91KCdRsZjE6QsXcRjyKWaRoJHKYAeSMDLLxQ6RwGbf
/5jnZyIJVPRLkMclNYg4vhizCSHGyU15CHLi5adpfltr9yXWwMWqq+PU9a2SsybG
BmOcX1FUS/2TTT1zevcakO6VlPDrNQhWVy47/hZTaSiBBXDDRy4LoIgFQKX4b7NN
DwwkvAXNKqkeiaYQ6cW2HJL11AsoiaEbDlDrBZL9Zo1IfQeV6/bucE1n4yU6RRBG
6txUB1DCAPmp++gDuBSMkz8Hj7UgMXUXUGhLhr0mjzEX4I4n+DsZiHIC+QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGGEG0sFXUsmdF9cwO5xCaOWV22oMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvWVlRYlN3VmRTeVowWDF6QTduRUpvNVpYYmFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwEeAAwQA
wHkeMA0GCSqGSIb3DQEBCwUAA4IBAQAtaxcF5fnyCM/LArNJueGr9qYFUkpDpG22
eeirU4UuAFx7bGH0scxq5oKx281/Jlkh/3oq/DCi0RMWDe9f+JikSQnzby/zMF9m
MDRSzXO5TLPWI7ZBF4UOc8LYwQrtiMFgNIwoSTRDqiCMrULjUN8jYZ9B3u3llHKw
DnUfeOXo48dQGO+JbAY6UycwAJ7P1EG4z0TrqumEz/pzseTDAE3UMtGo8j3RxR69
Epm2CQmGDfa3JsKok8Kbtpr90FKd5xNKCkRdBlDogC78atBMTabwrhvltKUoTZru
G98MpVF5+2l7TIir2A9Fyhaib/5q68PPISBksXd8SwxNJ2GYTuZI
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:50 2025 by rpki-client