Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tYVP3oQNCmDst9poOfcxT8oHwG0.roa
File: tYVP3oQNCmDst9poOfcxT8oHwG0.roa (raw, json)
Hash identifier: Vmb5eV1USUWL1gnE/kTyVEEyDw8dGWEaS1rWcGsGNSk=
Subject key identifier: B5:85:4F:DE:84:0D:0A:60:EC:B7:DA:68:39:F7:31:4F:CA:07:C0:6D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427487C702AE577A135D9E227731E3F6D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tYVP3oQNCmDst9poOfcxT8oHwG0.roa
Signing time: Thu 02 Jan 2025 13:50:49 +0000
ROA not before: Thu 02 Jan 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208822
IP address blocks: 194.68.172.0/24 maxlen: 24
194.103.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:7c:70:2a:e5:77:a1:35:d9:e2:27:73:1e:3f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5854fde840d0a60ecb7da6839f7314fca07c06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:64:31:ac:81:e5:e8:1b:df:fa:b1:57:37:57:
08:9a:d6:cf:fb:e2:65:7e:c5:81:94:3d:82:1e:e2:
36:55:84:20:94:d4:44:fe:62:ec:f6:c3:fa:a8:db:
e8:b3:37:d6:a1:5d:f8:19:68:3e:ab:da:31:8a:a3:
65:2f:79:0f:d2:98:70:e8:ca:8a:71:6a:1b:31:81:
72:45:99:e3:db:69:7f:b2:59:3c:35:07:04:f7:7f:
fc:0d:06:94:22:59:9a:5b:95:43:2a:91:6d:39:8e:
4d:1e:8b:db:ec:fc:db:dd:3b:78:f2:55:e2:a7:23:
a7:a8:65:52:1d:9e:5e:fe:f9:65:4e:b4:61:ee:30:
56:2c:f9:b2:e8:69:8f:61:0e:9e:39:11:ac:15:c1:
67:f0:1d:d8:a7:4b:df:7d:6e:af:95:82:1a:bf:2e:
c4:ca:d5:44:7a:47:8d:92:7f:b5:d4:fe:cc:0a:85:
68:ac:be:7d:bc:3c:3e:44:f2:0e:ee:0f:ae:84:16:
c9:8f:e5:58:47:2c:10:3b:50:69:99:72:85:ef:51:
e0:9d:0c:1e:b0:f9:70:4d:63:c3:c0:49:4b:2c:67:
67:e7:ba:e5:8e:9b:6a:bb:b8:3c:b7:25:f1:7e:ae:
53:c4:38:34:6c:c9:fc:74:e0:a0:f7:af:05:76:e4:
90:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:85:4F:DE:84:0D:0A:60:EC:B7:DA:68:39:F7:31:4F:CA:07:C0:6D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tYVP3oQNCmDst9poOfcxT8oHwG0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.172.0/24
194.103.196.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:3c:0f:80:f4:26:ae:19:9e:c2:1c:03:f0:83:bb:2a:94:89:
a6:3c:c6:7b:98:46:10:7f:43:94:80:b5:5f:67:84:29:9a:cc:
83:e2:1d:ec:5e:1d:3c:ea:36:d5:31:cc:ae:7a:de:f1:44:92:
01:bf:44:5c:2c:4c:94:95:7a:f0:01:c1:33:f2:f0:1d:22:11:
3b:16:0b:9e:a4:38:5b:b3:ee:36:3d:38:d7:d1:4d:5c:42:ff:
58:20:01:d6:39:1e:e3:3a:cd:32:2c:98:d8:0f:7f:b0:74:26:
5d:bf:52:c1:94:15:0f:81:7b:d6:7b:19:f9:dd:6a:b4:ff:fe:
1f:49:db:d6:74:e9:c9:bb:7d:9a:08:c6:06:ac:ee:fe:6a:9c:
7c:11:5d:7b:a4:28:ec:d8:d7:18:85:f1:52:49:4f:c5:d1:aa:
0d:3b:3f:20:97:2a:ce:8a:7d:93:c3:5d:13:ac:4f:65:59:91:
ea:8f:07:3c:9c:36:06:9e:b5:35:f1:1a:3e:2b:3e:bf:c4:d5:
58:01:28:3e:2a:00:1f:ef:4b:d5:97:f0:60:4a:20:45:db:7f:
43:ac:a7:c3:d8:56:60:d3:1a:41:91:b3:d9:b7:d8:66:ad:73:
77:6a:34:02:2f:bf:06:6e:41:e1:48:cf:eb:0f:64:2d:bb:6f:
af:26:49:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:11 2025 by rpki-client