Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sXwOhebED1fFyztRnlOeUfSrrD4.roa
File: sXwOhebED1fFyztRnlOeUfSrrD4.roa (raw, json)
Hash identifier: 9JcXx5tkkjajU15ZFhoM1ogp0kD0oxsOd0wvoMUmiXw=
Subject key identifier: B1:7C:0E:85:E6:C4:0F:57:C5:CB:3B:51:9E:53:9E:51:F4:AB:AC:3E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019716D8798B20453E351AA0CD30A8FC05D2
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sXwOhebED1fFyztRnlOeUfSrrD4.roa
Signing time: Wed 28 May 2025 12:22:55 +0000
ROA not before: Wed 28 May 2025 12:22:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214202
IP address blocks: 192.121.255.0/24 maxlen: 24
193.234.16.0/24 maxlen: 24
194.14.6.0/24 maxlen: 24
194.14.7.0/24 maxlen: 24
194.68.238.0/24 maxlen: 24
194.71.174.0/24 maxlen: 24
194.71.175.0/24 maxlen: 24
194.71.176.0/24 maxlen: 24
194.71.177.0/24 maxlen: 24
194.71.178.0/24 maxlen: 24
194.71.179.0/24 maxlen: 24
2a01:280:310::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 04:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:16:d8:79:8b:20:45:3e:35:1a:a0:cd:30:a8:fc:05:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 28 12:22:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b17c0e85e6c40f57c5cb3b519e539e51f4abac3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9e:e2:dd:f3:02:30:9d:02:cc:d5:a2:fe:69:
55:d8:90:d4:60:b2:cf:2f:86:b9:2e:98:9a:bb:08:
42:a0:c0:9f:e1:cd:01:32:34:bb:4f:7a:2b:f1:83:
5d:2f:93:e0:9a:d5:d7:e2:57:80:ed:1d:42:36:0a:
13:c8:31:5d:88:19:5b:3e:9f:71:0a:99:9e:70:52:
9c:27:fb:31:bb:43:8b:6d:b3:43:04:77:a3:6f:a7:
59:53:e8:6f:30:c7:26:91:30:43:3d:84:ca:40:9e:
ce:44:e2:85:a8:60:7b:85:b0:09:09:25:fa:51:d6:
ab:f7:3d:1b:b9:98:d3:ef:12:62:22:20:9d:24:40:
f0:0b:0d:e1:2f:12:56:76:df:0a:b0:9f:20:52:c4:
1e:c3:22:15:08:5c:d6:71:aa:12:f8:14:16:82:a1:
13:7a:75:ed:84:67:3c:5a:b6:db:13:74:ba:8e:b8:
f4:5f:90:3c:a0:82:4e:54:6b:a4:d8:a1:d4:4a:47:
0f:14:77:c9:46:19:01:65:2a:7a:fb:37:05:45:d9:
c6:e5:91:54:d1:e0:ef:80:55:b6:1f:ee:5f:bb:d3:
eb:3b:e3:eb:5d:88:15:2a:1e:60:4a:8b:da:d0:6c:
e9:0d:c1:a2:f2:71:74:cd:4a:59:ae:d8:79:d8:24:
5c:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:7C:0E:85:E6:C4:0F:57:C5:CB:3B:51:9E:53:9E:51:F4:AB:AC:3E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sXwOhebED1fFyztRnlOeUfSrrD4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.255.0/24
193.234.16.0/24
194.14.6.0/23
194.68.238.0/24
194.71.174.0-194.71.179.255
IPv6:
2a01:280:310::/48
Signature Algorithm: sha256WithRSAEncryption
2c:79:30:73:54:41:8b:41:ca:d0:c6:6d:15:1b:de:3f:49:3f:
3d:64:59:11:37:d2:85:0b:f7:47:65:6c:a6:b7:08:ad:48:07:
b8:0d:7b:21:68:7c:09:82:a0:f4:15:ff:83:18:c3:10:a6:a3:
05:5d:68:d4:72:c6:78:8a:79:19:55:df:8b:c8:a3:96:a3:3c:
16:a9:ef:e1:ae:37:6d:5e:da:1d:78:da:24:2a:45:7a:3b:6a:
4d:74:98:15:c0:a0:a8:1f:2c:3b:37:68:4c:37:1b:52:9e:09:
d1:06:45:dd:be:5c:49:b6:95:b0:a2:cd:c2:e1:31:d6:d9:89:
a6:0e:e4:74:fb:b9:26:b7:4e:d5:e0:56:22:80:a1:b3:4e:52:
bd:75:8a:cb:a8:0d:dc:7c:6f:93:22:fc:4a:03:e3:b1:68:a9:
73:75:e8:39:0f:93:df:65:70:fc:f6:79:db:a4:51:59:5b:39:
96:ea:89:e7:83:26:0a:e3:61:b7:f7:39:ff:f6:31:b8:da:32:
6e:60:ac:d6:9e:a3:1d:91:34:73:e4:80:80:c7:94:f1:e9:50:
bd:c3:91:93:c4:80:eb:33:35:3c:05:a6:17:52:01:37:d9:be:
12:39:08:30:86:d9:c7:b3:d2:d8:1a:03:44:21:a9:97:df:7d:
77:ea:e8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 12:06:10 2025 by rpki-client