Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lEuqeZ2LFIoOTcTxhE2_Ns2hvf8.roa
File: lEuqeZ2LFIoOTcTxhE2_Ns2hvf8.roa (raw, json)
Hash identifier: s4pjEcbhsIN3Y5/QwrmNcFZ5uZVkUbrtzMT4kaP9F+E=
Subject key identifier: 94:4B:AA:79:9D:8B:14:8A:0E:4D:C4:F1:84:4D:BF:36:CD:A1:BD:FF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0195D1AF6EE077754DDDB5638F8F5B38677A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lEuqeZ2LFIoOTcTxhE2_Ns2hvf8.roa
Signing time: Wed 26 Mar 2025 09:01:30 +0000
ROA not before: Wed 26 Mar 2025 09:01:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8473
IP address blocks: 192.71.5.0/24 maxlen: 24
192.121.12.0/24 maxlen: 24
192.121.101.0/24 maxlen: 24
193.181.65.0/24 maxlen: 24
193.183.47.0/24 maxlen: 24
193.183.48.0/24 maxlen: 24
194.71.215.0/24 maxlen: 24
194.103.93.0/24 maxlen: 24
194.132.162.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Apr 2025 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:d1:af:6e:e0:77:75:4d:dd:b5:63:8f:8f:5b:38:67:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Mar 26 09:01:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=944baa799d8b148a0e4dc4f1844dbf36cda1bdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:2b:c9:fe:53:94:df:38:18:27:12:67:fb:
40:4a:f3:b3:72:71:15:5f:42:a3:e0:00:36:cb:ed:
94:db:3e:25:8a:82:d2:b5:26:a6:30:06:a8:a4:00:
cf:73:a5:6f:b2:8d:50:66:15:ba:0c:22:8e:2f:da:
46:6a:2e:8d:36:85:0f:e8:dd:a7:7e:ca:50:e5:45:
c8:2d:e4:07:d2:18:c7:f7:1f:11:c0:18:1a:61:0f:
87:11:12:ef:74:b4:18:ba:c1:6d:e1:68:9b:8a:e3:
32:a7:e3:8a:e0:96:9b:c3:8f:6b:96:6b:42:95:8a:
a7:96:3e:cf:ee:ae:db:a7:bd:1e:dc:e8:23:6c:34:
1b:27:14:c4:b3:be:f7:c4:24:26:cb:79:49:b0:57:
0a:b5:e5:f0:a3:de:d2:5b:67:98:ec:2b:33:1e:1c:
b2:d4:e4:d5:71:9e:c2:a7:18:08:6f:42:ec:a6:1b:
06:2a:d3:58:86:98:46:b2:3e:f1:db:02:8c:65:21:
76:7b:0d:d3:2f:4b:54:f4:25:d6:f0:c6:da:84:7d:
16:03:1b:81:0e:4b:7b:ec:99:38:88:ea:90:58:48:
15:a8:b6:f6:e7:91:66:6c:3b:c4:65:ee:02:e4:85:
1b:c9:c5:2d:97:82:3a:dc:21:c4:19:69:c8:df:f3:
d1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:4B:AA:79:9D:8B:14:8A:0E:4D:C4:F1:84:4D:BF:36:CD:A1:BD:FF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lEuqeZ2LFIoOTcTxhE2_Ns2hvf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.5.0/24
192.121.12.0/24
192.121.101.0/24
193.181.65.0/24
193.183.47.0-193.183.48.255
194.71.215.0/24
194.103.93.0/24
194.132.162.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:07:52:43:95:86:42:6e:d5:6b:51:a7:6f:51:6f:7d:18:90:
2d:6e:89:64:74:52:01:9f:2e:db:5e:3c:55:f5:68:d6:2e:02:
b1:02:e4:27:12:42:09:2a:80:57:c0:f2:d6:be:71:e2:89:39:
fe:c9:10:8b:0c:3b:4c:37:9b:b5:5b:ca:e7:38:1a:5e:46:48:
59:05:2a:21:a5:f4:b4:92:ee:d8:12:5c:11:64:4a:63:b1:06:
27:fa:98:99:df:58:e7:4d:8c:a2:8e:ea:2b:8b:cc:30:2e:75:
b8:2b:0e:f4:8e:6d:6a:53:5c:6c:93:64:6c:d0:52:0a:ed:59:
1b:51:ea:4a:fe:66:96:98:1a:94:ab:f1:5f:e7:31:59:fa:bc:
88:45:21:43:09:18:14:ff:73:76:82:6f:94:a9:89:a8:9d:9e:
65:03:b5:9c:c8:0a:a4:20:27:49:ed:ad:95:8b:d5:fb:2d:b0:
36:2d:97:49:f5:37:31:e6:1c:66:34:94:b7:65:1f:d0:ea:e7:
38:bc:29:f7:61:a3:f3:08:0b:2a:03:cf:d1:60:78:3b:ff:82:
ff:3b:de:c2:ad:a4:5c:bd:f6:a0:1b:cd:6f:b1:c7:01:bb:2f:
93:57:61:da:77:c9:a7:fe:3b:c3:3f:ea:2e:e4:c2:67:9f:1d:
dd:c1:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:27:22 2025 by rpki-client