Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/kYU7RBO_d1smpz5OOLBZywDTWIs.roa
File: kYU7RBO_d1smpz5OOLBZywDTWIs.roa (raw, json)
Hash identifier: bOF9WkleIOj6cTUKAPI+BHZ2E1pH6NF+bfkauEI8qIw=
Subject key identifier: 91:85:3B:44:13:BF:77:5B:26:A7:3E:4E:38:B0:59:CB:00:D3:58:8B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274834BF78A5EAB2E1F5CAA9B1728A15
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/kYU7RBO_d1smpz5OOLBZywDTWIs.roa
Signing time: Thu 02 Jan 2025 13:50:31 +0000
ROA not before: Thu 02 Jan 2025 13:50:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1234
IP address blocks: 192.176.176.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:34:bf:78:a5:ea:b2:e1:f5:ca:a9:b1:72:8a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=91853b4413bf775b26a73e4e38b059cb00d3588b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cb:59:5d:e1:b2:54:90:47:fc:69:c4:ee:c4:
55:8b:ac:15:45:2e:83:83:9f:f5:ae:c2:b4:27:07:
6f:3d:c2:be:d1:11:e5:3d:26:10:89:8d:5b:12:01:
aa:0c:78:f5:c5:86:69:88:ec:96:8e:2a:bf:3e:48:
70:97:df:45:98:55:9e:d2:58:b8:8b:0d:10:75:1c:
f8:cc:37:ce:01:db:30:f9:9a:87:ea:2b:38:f0:08:
ee:46:a5:2f:1c:45:c8:dd:22:e1:01:f1:cb:86:77:
be:c0:66:89:d6:18:77:db:8c:e2:94:94:c8:45:7f:
68:97:68:cb:c4:26:9f:35:9b:43:55:5d:93:cd:7f:
a7:7d:b6:ba:c0:bd:23:9b:a1:8d:a3:8c:9a:46:7f:
e5:9d:e4:5f:1b:c5:de:ca:b9:3f:54:17:cc:07:18:
5e:af:09:6b:4a:40:8d:bb:d2:4a:18:7b:b2:d3:28:
82:27:af:56:4e:12:08:98:3f:84:c2:c9:a1:6a:c5:
ef:39:89:f3:f1:f4:10:4d:e6:a0:b2:37:ea:84:05:
62:87:e8:20:1c:20:79:c9:26:85:29:1f:ca:ad:0e:
16:13:5a:b2:d2:18:de:f6:a0:a0:1c:61:91:52:ae:
8a:f8:b9:da:33:3c:f9:b7:b6:31:54:b1:32:56:4c:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:85:3B:44:13:BF:77:5B:26:A7:3E:4E:38:B0:59:CB:00:D3:58:8B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/kYU7RBO_d1smpz5OOLBZywDTWIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.176.176.0/21
Signature Algorithm: sha256WithRSAEncryption
28:28:ed:c5:f0:bc:80:6a:55:5a:c1:44:c6:c3:c5:32:e5:c2:
2a:1b:65:da:ed:f5:d7:55:62:ef:97:cd:c6:9f:4a:39:bc:37:
25:1e:6c:90:70:81:e0:80:cc:f6:af:2e:f6:f2:92:63:03:6d:
c8:11:98:4a:38:a8:e7:3c:44:14:62:61:29:7f:03:47:53:09:
3e:04:34:91:1d:f3:14:36:c2:38:2b:3e:db:cb:83:f3:d3:cd:
05:f2:26:6b:a3:b0:77:b4:d2:b6:be:81:72:a5:01:fc:dd:3c:
8d:30:41:72:ef:6a:91:82:14:07:98:92:41:7a:0c:a1:9e:83:
25:33:c5:f3:94:4b:f1:26:3c:21:6d:7b:e9:8d:ef:47:b0:93:
70:61:ab:12:e5:c0:3e:70:c9:af:7a:db:a1:c8:3c:1a:b5:4e:
2f:7e:8c:84:48:71:d8:5d:22:3b:ae:58:da:e9:bf:b5:1e:fa:
6c:cf:63:4a:19:0b:a6:e9:97:2d:d0:89:ba:f7:0d:85:0c:ff:
9a:83:17:09:52:f1:46:b0:4d:da:a0:55:43:69:50:6d:a6:25:
16:d8:c3:05:dc:a6:89:f4:14:a7:a1:49:a1:f8:3f:c8:61:b6:
3f:13:62:ac:13:68:82:b4:c0:c5:b6:78:b4:ca:b8:e8:48:a7:
cf:c9:6d:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSDS/eKXqsuH1yqmxcooVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDMxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MTg1M2I0NDEzYmY3NzViMjZhNzNlNGUzOGIwNTljYjAwZDM1ODhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArstZXeGyVJBH/GnE7sRVi6wVRS6D
g5/1rsK0JwdvPcK+0RHlPSYQiY1bEgGqDHj1xYZpiOyWjiq/Pkhwl99FmFWe0li4
iw0QdRz4zDfOAdsw+ZqH6is48AjuRqUvHEXI3SLhAfHLhne+wGaJ1hh324zilJTI
RX9ol2jLxCafNZtDVV2TzX+nfba6wL0jm6GNo4yaRn/lneRfG8Xeyrk/VBfMBxhe
rwlrSkCNu9JKGHuy0yiCJ69WThIImD+EwsmhasXvOYnz8fQQTeagsjfqhAVih+gg
HCB5ySaFKR/KrQ4WE1qy0hje9qCgHGGRUq6K+LnaMzz5t7YxVLEyVkzYvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJGFO0QTv3dbJqc+TjiwWcsA01iLMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEva1lVN1JCT19kMXNtcHo1T09MQlp5d0RUV0lzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwLCwMA0G
CSqGSIb3DQEBCwUAA4IBAQAoKO3F8LyAalVawUTGw8Uy5cIqG2Xa7fXXVWLvl83G
n0o5vDclHmyQcIHggMz2ry728pJjA23IEZhKOKjnPEQUYmEpfwNHUwk+BDSRHfMU
NsI4Kz7by4Pz080F8iZro7B3tNK2voFypQH83TyNMEFy72qRghQHmJJBegyhnoMl
M8XzlEvxJjwhbXvpje9HsJNwYasS5cA+cMmvetuhyDwatU4vfoyESHHYXSI7rlja
6b+1Hvpsz2NKGQum6Zct0Im69w2FDP+agxcJUvFGsE3aoFVDaVBtpiUW2MMF3KaJ
9BSnoUmh+D/IYbY/E2KsE2iCtMDFtni0yrjoSKfPyW1V
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:58:51 2025 by rpki-client