Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/msQrfN4rLRLaqxkO2l_jV3JlE8o.roa
File: msQrfN4rLRLaqxkO2l_jV3JlE8o.roa (raw, json)
Hash identifier: 5UWNWHm8NSrleOrJ6HXA/IAvWEfVsOWC+vXFT9diAD8=
Subject key identifier: 9A:C4:2B:7C:DE:2B:2D:12:DA:AB:19:0E:DA:5F:E3:57:72:65:13:CA
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748674CBD01933F66E3F516255B1AD1
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/msQrfN4rLRLaqxkO2l_jV3JlE8o.roa
Signing time: Thu 02 Jan 2025 13:50:43 +0000
ROA not before: Thu 02 Jan 2025 13:50:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198549
IP address blocks: 192.36.36.0/24 maxlen: 24
192.36.214.0/23 maxlen: 24
192.71.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:67:4c:bd:01:93:3f:66:e3:f5:16:25:5b:1a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9ac42b7cde2b2d12daab190eda5fe357726513ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:57:9c:1f:2d:7b:a0:70:1e:09:0b:73:e4:4c:
6a:2b:9a:06:8a:1c:d7:fe:a9:ad:15:5c:c2:d2:54:
7b:ed:fd:8d:75:e5:d5:e7:10:b3:56:f2:32:78:2e:
a6:03:07:55:88:8a:17:2c:5a:14:f4:ea:2b:af:a4:
bd:ec:cf:be:53:0c:8a:f6:58:93:9c:98:94:a2:9e:
dd:da:e1:c1:58:c5:12:2a:2d:30:c2:8a:76:e0:31:
2d:03:82:2e:61:5a:ba:c9:c8:f6:a8:4b:8c:4c:e3:
d7:46:e8:01:73:e9:5d:0b:07:a0:98:45:c8:f7:3c:
39:f9:a8:02:ae:02:b6:85:ca:cc:74:54:bf:64:bc:
c2:67:65:73:f9:a8:1e:dd:98:d3:3c:1c:15:bf:2f:
35:57:17:a4:79:89:a6:c3:ef:0f:48:c1:3f:d4:28:
aa:68:6f:64:61:77:97:5d:08:7e:83:fc:52:ed:7c:
3c:a1:da:41:58:54:eb:2b:62:6d:e3:f2:98:04:9e:
6c:6f:85:90:e7:62:61:ba:cb:7c:ea:f6:b4:39:2b:
1d:aa:c8:32:93:d2:54:13:dc:59:f8:3c:29:9b:b0:
b5:0e:f1:71:dd:85:38:57:ae:f9:12:1f:65:e0:79:
ba:51:ff:5b:ca:60:26:1b:bc:ac:80:d3:b6:08:a3:
4b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:C4:2B:7C:DE:2B:2D:12:DA:AB:19:0E:DA:5F:E3:57:72:65:13:CA
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/msQrfN4rLRLaqxkO2l_jV3JlE8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.36.0/24
192.36.214.0/23
192.71.199.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:81:10:3c:7d:91:be:2f:64:30:af:fb:a1:e7:95:92:80:ce:
39:02:cb:27:3e:99:17:32:32:dc:b3:8a:e2:08:72:0e:a3:72:
f8:ec:ad:66:d9:9c:26:79:74:34:6a:be:ed:fa:19:d9:14:b5:
1e:d7:c9:3d:67:34:dd:c4:c2:2b:68:de:55:9d:69:3a:bc:d9:
fe:bc:9c:a4:74:d3:4e:23:19:0a:2e:5c:a7:23:74:0e:e5:c5:
a1:c7:5e:e8:1e:e5:7e:b4:74:c8:c2:48:00:15:97:55:de:72:
1c:7f:09:d1:57:47:e2:b3:33:23:b7:21:d2:a8:93:25:80:da:
79:d3:ba:c3:0b:f1:96:0e:3f:f7:02:c4:b5:91:8d:d0:71:9a:
42:c1:63:53:fe:6b:92:bb:6e:47:4f:4e:c2:95:fb:80:38:fb:
8e:8d:c6:4f:f4:57:90:b3:df:04:9d:4b:58:5c:77:33:d4:da:
a6:42:64:5b:0b:0d:4f:8a:f9:83:53:ca:14:54:77:cb:0e:0a:
43:8b:d1:ec:49:04:48:52:c9:07:38:5a:d5:56:b1:4b:c8:95:
0d:68:d1:5a:2e:40:1c:5e:47:0a:87:c3:d2:d6:ec:b6:80:63:
c4:43:c1:eb:26:d3:05:0a:c1:c2:e0:c3:6b:0b:e7:c6:38:2b:
9c:0d:5b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:11:10 2025 by rpki-client