Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/h5PCWdU8Q3YXX0DihuqQdpU8k6E.roa
File: h5PCWdU8Q3YXX0DihuqQdpU8k6E.roa (raw, json)
Hash identifier: iKXpbJftqbRoIJaKLhz+cr7yrDqDuy+aPZ4CJVdhxP8=
Subject key identifier: 87:93:C2:59:D5:3C:43:76:17:5F:40:E2:86:EA:90:76:95:3C:93:A1
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274855641601AAE8068AFA06491EA705
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/h5PCWdU8Q3YXX0DihuqQdpU8k6E.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42675
IP address blocks: 193.182.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:55:64:16:01:aa:e8:06:8a:fa:06:49:1e:a7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8793c259d53c4376175f40e286ea9076953c93a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b6:1d:f5:01:e0:69:cf:48:9c:90:2a:b1:c9:
e5:87:20:39:22:46:ca:da:bb:d1:77:48:de:47:21:
a6:b1:d7:90:8b:db:f0:45:0e:0b:87:82:27:7d:0a:
30:cf:0c:28:d8:e5:93:34:b0:10:3c:bb:bc:69:71:
be:08:4b:32:28:03:c1:68:03:73:68:14:77:92:2d:
b3:ea:41:df:64:25:1e:d6:c8:26:e2:04:62:54:82:
e2:ef:cf:b0:bb:9d:5e:cb:b2:44:34:41:26:f2:11:
e7:5b:91:0e:43:ed:cf:bc:3f:d2:13:86:92:5c:e3:
a7:44:c8:c2:44:8b:5b:6f:b2:d4:23:29:c3:45:b0:
8e:1d:5a:8f:14:d4:0a:d3:f1:cd:33:0a:4f:ae:21:
71:65:f9:13:a1:08:bc:79:f6:36:0f:89:51:7d:68:
5b:ae:60:63:4f:7d:e2:26:cf:fe:d9:94:61:fe:e0:
a4:ac:23:f7:19:10:b2:5f:fe:c0:cc:1d:1e:f7:4c:
66:ff:05:8d:a3:b8:0a:37:53:e3:bc:24:59:75:7c:
ac:93:c3:01:b4:22:67:08:1a:f0:d7:64:ea:6b:1d:
ac:30:db:7a:91:3a:e5:96:03:b0:29:b3:3e:e7:15:
38:a8:0c:b8:e7:e3:31:f4:17:7d:68:1a:02:de:85:
a0:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:93:C2:59:D5:3C:43:76:17:5F:40:E2:86:EA:90:76:95:3C:93:A1
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/h5PCWdU8Q3YXX0DihuqQdpU8k6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.182.111.0/24
Signature Algorithm: sha256WithRSAEncryption
64:66:1b:11:d9:cd:1b:c2:19:b4:24:83:2c:fd:5a:22:8e:fb:
34:8d:1d:b6:ae:de:36:06:13:fe:b0:b0:86:49:d8:49:e6:8e:
f4:5a:42:4c:05:eb:ca:05:2e:5d:b2:f5:6a:d3:e8:6d:79:33:
9c:44:f5:72:47:cf:7e:c0:06:98:d1:bf:0f:e8:a8:e8:a0:97:
59:c5:24:43:da:89:ba:3a:28:a8:95:5f:dc:72:fd:5d:d7:94:
b6:3c:d8:48:c3:ac:9c:c5:e7:49:39:4e:29:2a:c6:ea:7e:e6:
47:21:31:16:60:1f:ce:60:b3:57:19:77:89:15:da:52:70:d0:
9e:8a:61:0b:67:97:d5:33:2b:c6:34:8b:e8:c1:93:86:88:78:
8d:7a:c4:c0:73:06:bd:5a:58:6d:97:b5:a2:8c:02:23:b3:f9:
56:04:81:cb:e7:e3:bd:2c:05:bc:72:56:ab:e5:99:29:74:e5:
fa:1e:59:06:09:a4:8d:a8:be:14:0a:ad:45:47:f2:26:46:b6:
2a:d4:03:29:89:40:ba:08:3b:ad:78:a4:1b:45:9e:60:5f:94:
9d:b8:ae:25:01:d1:40:de:4e:1f:50:46:b0:41:19:9c:03:cf:
f5:ae:47:a6:88:15:fd:a8:27:41:36:a4:df:84:1d:59:6c:08:
2d:5f:a4:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:03:40 2025 by rpki-client