Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_AhGx5jsxLQxGTgNDhEaBbkH7qM.roa
File: _AhGx5jsxLQxGTgNDhEaBbkH7qM.roa (raw, json)
Hash identifier: MFbScnNv+F4X3r10NFOc2zvwlH9VAF3eo7x06cTkBxc=
Subject key identifier: FC:08:46:C7:98:EC:C4:B4:31:19:38:0D:0E:11:1A:05:B9:07:EE:A3
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01946A42BF1F4F6A792E897FC2239E0C83C7
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_AhGx5jsxLQxGTgNDhEaBbkH7qM.roa
Signing time: Wed 15 Jan 2025 13:59:06 +0000
ROA not before: Wed 15 Jan 2025 13:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8674
IP address blocks: 192.36.133.0/24 maxlen: 24
192.36.134.0/24 maxlen: 24
192.36.135.0/24 maxlen: 24
192.36.144.0/24 maxlen: 24
192.71.53.0/24 maxlen: 24
192.71.80.0/24 maxlen: 24
192.165.72.0/24 maxlen: 24
194.68.132.0/24 maxlen: 24
194.68.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:42:bf:1f:4f:6a:79:2e:89:7f:c2:23:9e:0c:83:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 15 13:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc0846c798ecc4b43119380d0e111a05b907eea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a5:17:fa:d6:61:aa:60:30:df:32:00:9a:7e:
58:59:63:43:a6:ae:bf:ea:ec:df:3e:b2:dc:ba:c7:
99:3a:08:27:9c:8e:c4:da:26:19:32:f6:5e:20:ef:
97:75:72:49:25:c3:34:3d:90:b3:14:63:93:d8:65:
83:1e:c7:a7:10:7b:da:a6:44:cf:be:af:aa:15:5b:
c4:4a:bc:44:43:19:27:56:5c:28:30:d9:90:26:1e:
e8:21:1c:62:86:ad:25:d3:34:a6:20:d7:f3:40:88:
fb:15:f1:e6:40:08:fb:89:a5:9b:76:71:e7:42:dc:
a5:24:36:cb:de:7b:ac:3b:be:c2:41:cc:2d:0d:bc:
e5:b2:e5:42:79:56:01:4b:10:04:ce:5c:6d:46:24:
b3:38:6a:fb:85:1a:58:71:60:18:fc:1d:97:f4:9b:
49:8c:a9:d5:2c:f4:1b:5f:c3:44:49:18:43:ab:ec:
e4:01:3a:ff:15:61:0b:59:05:07:41:e0:4f:a5:f7:
ca:7a:0f:37:36:77:9f:f5:d7:74:84:93:15:8f:00:
0f:97:f2:c5:8f:f2:0e:f9:45:7f:72:07:a3:f9:42:
7c:0e:b0:51:b4:94:a6:10:3b:f5:74:c1:b5:d8:ae:
26:8b:2c:d8:4c:5a:61:71:7a:93:c5:6f:b6:26:87:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:08:46:C7:98:EC:C4:B4:31:19:38:0D:0E:11:1A:05:B9:07:EE:A3
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/_AhGx5jsxLQxGTgNDhEaBbkH7qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.133.0-192.36.135.255
192.36.144.0/24
192.71.53.0/24
192.71.80.0/24
192.165.72.0/24
194.68.132.0/24
194.68.134.0/24
Signature Algorithm: sha256WithRSAEncryption
32:b7:ea:50:6a:9e:55:20:78:7d:93:a4:8f:83:57:d6:93:77:
80:bf:b4:63:2f:57:d6:3f:28:1c:7d:ec:1a:35:04:28:d9:1f:
cc:db:47:01:be:8a:a2:1d:98:53:1e:05:ba:92:d8:0f:a0:8a:
14:6a:b4:68:ff:ec:32:ad:f6:b7:be:d0:83:5f:a2:7e:7c:48:
b9:cb:ed:1a:08:42:18:cc:96:93:8e:70:04:26:a9:b3:a2:94:
f7:06:9a:ce:de:5a:cf:cf:c9:ad:91:9f:5b:3b:c4:46:53:3c:
e5:f2:9e:22:6b:f9:63:33:31:d5:40:bf:08:f5:39:b9:2e:a4:
bb:7b:f9:24:16:8a:fb:1f:43:16:42:1c:1b:56:e5:6b:13:a8:
7b:d4:13:b0:8d:b7:a7:87:0f:46:3e:11:69:47:36:56:86:82:
5b:46:26:ed:33:d5:4f:a1:33:c0:0c:4f:bc:67:9c:48:07:e3:
d4:f6:23:f8:d5:5a:86:a4:45:4b:f0:9a:e0:b5:81:7e:a2:2d:
21:d2:63:ca:fa:44:7a:0e:ec:d2:08:75:73:d2:54:b0:1f:02:
52:b0:5d:02:9e:66:a7:0c:39:80:79:6b:f0:36:97:f8:87:04:
83:b2:54:06:61:12:18:77:6f:34:64:c9:73:e0:27:e3:e1:d9:
70:e8:6f:c8
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZRqQr8fT2p5Lol/wiOeDIPHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTE1MTM1OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYzA4NDZjNzk4ZWNjNGI0MzExOTM4MGQwZTExMWEwNWI5MDdlZWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKUX+tZhqmAw3zIAmn5YWWNDpq6/
6uzfPrLcuseZOggnnI7E2iYZMvZeIO+XdXJJJcM0PZCzFGOT2GWDHsenEHvapkTP
vq+qFVvESrxEQxknVlwoMNmQJh7oIRxihq0l0zSmINfzQIj7FfHmQAj7iaWbdnHn
QtylJDbL3nusO77CQcwtDbzlsuVCeVYBSxAEzlxtRiSzOGr7hRpYcWAY/B2X9JtJ
jKnVLPQbX8NESRhDq+zkATr/FWELWQUHQeBPpffKeg83Nnef9dd0hJMVjwAPl/LF
j/IO+UV/cgej+UJ8DrBRtJSmEDv1dMG12K4miyzYTFphcXqTxW+2JodTowIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFPwIRseY7MS0MRk4DQ4RGgW5B+6jMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvX0FoR3g1anN4TFF4R1RnTkRoRWFCYmtIN3FNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjA4BAIAATAyMAwDBADAJIUD
BAPAJIADBADAJJADBADARzUDBADAR1ADBADApUgDBADCRIQDBADCRIYwDQYJKoZI
hvcNAQELBQADggEBADK36lBqnlUgeH2TpI+DV9aTd4C/tGMvV9Y/KBx97Bo1BCjZ
H8zbRwG+iqIdmFMeBbqS2A+gihRqtGj/7DKt9re+0INfon58SLnL7RoIQhjMlpOO
cAQmqbOilPcGms7eWs/Pya2Rn1s7xEZTPOXyniJr+WMzMdVAvwj1ObkupLt7+SQW
ivsfQxZCHBtW5WsTqHvUE7CNt6eHD0Y+EWlHNlaGgltGJu0z1U+hM8AMT7xnnEgH
49T2I/jVWoakRUvwmuC1gX6iLSHSY8r6RHoO7NIIdXPSVLAfAlKwXQKeZqcMOYB5
a/A2l/iHBIOyVAZhEhh3bzRkyXPgJ+Ph2XDob8g=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:59 2025 by rpki-client