Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rlO0HPkNDgD6s-CWiDdUdLQFpls.roa
File: rlO0HPkNDgD6s-CWiDdUdLQFpls.roa (raw, json)
Hash identifier: RR6x7fnd48yrEioZ/eVhEDnrqX6FkJMvE45hO2p0W0I=
Subject key identifier: AE:53:B4:1C:F9:0D:0E:00:FA:B3:E0:96:88:37:54:74:B4:05:A6:5B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274862198F81D64EED74A0F70614C216
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rlO0HPkNDgD6s-CWiDdUdLQFpls.roa
Signing time: Thu 02 Jan 2025 13:50:42 +0000
ROA not before: Thu 02 Jan 2025 13:50:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56946
IP address blocks: 193.181.52.0/22 maxlen: 22
193.181.52.0/24 maxlen: 24
193.181.53.0/24 maxlen: 24
193.181.54.0/24 maxlen: 24
193.181.55.0/24 maxlen: 24
193.235.198.0/23 maxlen: 23
193.235.198.0/24 maxlen: 24
193.235.199.0/24 maxlen: 24
194.103.88.0/24 maxlen: 24
194.103.134.0/23 maxlen: 23
194.103.134.0/24 maxlen: 24
194.103.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:62:19:8f:81:d6:4e:ed:74:a0:f7:06:14:c2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae53b41cf90d0e00fab3e09688375474b405a65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f3:be:5c:57:ad:40:eb:05:13:24:5d:46:9c:
9d:97:ad:26:f8:c9:eb:42:4d:ed:f5:33:13:24:b2:
cb:a7:83:6f:21:6d:43:f1:77:ac:41:60:ee:46:98:
58:ef:95:cc:34:ea:95:ba:5a:eb:cd:ea:98:fb:32:
c7:3a:5c:52:de:50:68:d0:09:85:86:9c:bd:a4:77:
d6:31:6c:04:3d:d4:7a:fc:c3:79:86:05:f1:0c:19:
d3:b2:e4:30:53:e2:4a:41:cf:39:8a:b1:2c:71:16:
02:5a:7d:d5:1e:99:56:f3:5e:c2:4c:cb:fe:2d:b5:
37:db:de:ee:c5:b4:51:a7:a7:cb:b1:f8:72:4c:a4:
21:e5:40:a1:c1:bf:eb:2f:b4:e7:c6:dd:80:e8:33:
c8:d2:1b:fc:f8:da:d3:e7:a6:00:07:ca:ee:03:77:
5e:09:82:4a:08:fe:84:0d:fb:81:2c:d4:39:3b:56:
93:4d:42:a7:66:d1:80:8c:41:02:2d:ca:20:8b:b6:
d2:ee:f7:a7:15:f8:d8:ca:41:29:2a:b8:ab:d7:58:
a1:44:ad:4f:f3:86:73:f6:fb:d2:f4:02:a5:be:25:
ff:5b:e8:04:1c:87:a2:e9:35:79:63:37:98:57:4a:
9b:4e:fe:a7:be:ed:76:32:e2:cf:b6:ae:3a:81:a0:
57:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:53:B4:1C:F9:0D:0E:00:FA:B3:E0:96:88:37:54:74:B4:05:A6:5B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/rlO0HPkNDgD6s-CWiDdUdLQFpls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.52.0/22
193.235.198.0/23
194.103.88.0/24
194.103.134.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:23:12:fe:5a:cb:1c:a9:ce:45:e2:5e:76:5c:38:41:bb:51:
fe:f9:69:33:4c:09:6a:06:e5:4f:da:b5:5f:71:e3:64:12:34:
8f:bc:2e:5f:41:cc:c0:44:fb:6f:e3:91:50:fd:51:31:02:29:
5d:06:0a:56:2c:16:b5:dd:8e:e5:fa:9c:68:67:90:70:47:cc:
41:9b:c5:31:d0:6c:cd:42:83:1d:7b:f3:d1:01:8b:bf:cd:40:
ba:29:78:3b:20:1e:d0:da:be:9c:f8:45:f0:75:21:59:8f:cf:
bd:ac:56:cb:19:00:f4:2c:cd:8d:de:9a:7d:5e:9d:0a:7d:b1:
ff:dc:3e:34:88:76:cc:d6:a8:b9:c2:c8:94:a6:22:b3:e2:41:
13:ec:3d:eb:80:d3:51:b3:16:cb:9e:aa:aa:a2:02:60:ce:ec:
34:ce:44:ed:35:57:67:22:1f:cc:88:59:3e:69:cb:ec:ce:b7:
f1:e3:ba:2b:d0:37:ab:96:bd:33:7e:09:37:d4:f3:36:4c:6f:
58:f7:e4:e4:43:56:24:58:5f:80:15:bf:d3:70:a4:ce:7a:5c:
a4:7c:37:1a:ad:af:7f:d1:a1:35:4b:9b:3c:28:db:c7:1f:21:
dc:83:0a:fe:f5:f1:4e:2d:66:c1:39:36:83:a3:d0:4b:a4:4b:
d5:1a:ae:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:42 2025 by rpki-client