Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uAZ2fBRipRQX9Vam3M4ItbKMkW0.roa
File: uAZ2fBRipRQX9Vam3M4ItbKMkW0.roa (raw, json)
Hash identifier: SjrrOWfuZf74L2GpcL0adHwM6zf/rplaWBiu/YOcYLA=
Subject key identifier: B8:06:76:7C:14:62:A5:14:17:F5:56:A6:DC:CE:08:B5:B2:8C:91:6D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01948D153CA39BE203EDA829D21C67F3CF8A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uAZ2fBRipRQX9Vam3M4ItbKMkW0.roa
Signing time: Wed 22 Jan 2025 08:16:06 +0000
ROA not before: Wed 22 Jan 2025 08:16:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213540
IP address blocks: 194.132.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:15:3c:a3:9b:e2:03:ed:a8:29:d2:1c:67:f3:cf:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 22 08:16:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b806767c1462a51417f556a6dcce08b5b28c916d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:2c:f3:a5:01:33:55:70:42:e2:03:57:5d:e9:
bd:52:3e:a5:1e:bb:4f:47:ec:86:46:e4:cc:32:89:
98:cd:f2:49:03:66:e8:16:49:97:30:92:05:24:53:
7b:f7:4b:be:d4:62:dd:9e:2b:69:e6:b7:09:b2:47:
60:d5:47:d0:44:6d:21:dc:e5:c0:ba:ed:84:a6:0f:
54:19:01:08:ec:fd:a5:0b:be:7a:36:f4:c5:3d:32:
0c:ad:af:5f:22:e3:cb:55:a1:52:32:63:ed:a5:b5:
d9:c5:20:da:4a:f2:17:fe:07:8f:59:40:66:e0:97:
42:88:82:fd:06:1f:95:f3:9d:e3:6d:62:0c:87:a8:
17:c0:ac:e6:4c:59:fb:95:dc:45:20:30:6c:59:b2:
82:74:ff:b0:39:a8:1e:06:10:18:78:6d:07:47:4d:
49:9b:67:ab:30:66:f7:e1:c8:a5:26:b1:bb:f1:82:
30:e9:d7:e0:54:be:88:e2:a5:c0:75:d2:2e:77:9c:
a0:dc:3d:0c:65:e5:67:ec:aa:bb:17:29:f3:6b:0f:
a9:d3:25:65:86:36:c2:04:78:63:25:ac:75:7c:76:
b4:41:7d:5a:a7:76:cb:b0:ed:cd:22:3c:33:fb:74:
2c:85:0f:c7:1e:a2:5d:04:ac:0b:26:2c:a0:75:bb:
84:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:06:76:7C:14:62:A5:14:17:F5:56:A6:DC:CE:08:B5:B2:8C:91:6D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/uAZ2fBRipRQX9Vam3M4ItbKMkW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.9.0/24
Signature Algorithm: sha256WithRSAEncryption
27:78:c6:b9:dc:2a:77:b2:af:a5:e1:ae:af:d1:d8:52:85:00:
53:40:57:67:1d:24:3e:24:3e:3f:b5:a5:52:20:01:14:90:d4:
4a:05:73:4c:fb:45:bc:5b:14:79:6b:b5:bc:dd:86:38:8f:e5:
b6:d1:09:e5:ef:45:75:b7:62:29:4a:ce:72:9e:f3:dc:1b:45:
9e:0d:d0:fc:f5:a5:86:f2:84:7b:c7:88:d6:65:b3:20:07:d6:
4d:61:c9:b4:ed:7a:27:e6:62:be:a0:17:40:ed:a1:15:22:40:
c2:d8:fb:81:99:3a:c4:8c:3f:fc:8f:17:54:e5:ff:0e:5f:cb:
7d:8d:72:41:00:aa:9c:ba:fa:87:c8:84:59:6f:5f:88:52:35:
91:c3:f5:85:c6:71:bd:18:45:96:7f:ae:0f:46:ea:94:72:0e:
37:3f:19:5d:82:ac:10:52:8e:f0:dc:d8:4a:13:49:0a:b2:eb:
44:18:e1:4a:8e:79:e3:90:be:fc:54:34:fc:e1:06:90:e5:b6:
3b:5d:55:b2:c1:de:47:83:a0:ee:0e:8e:e5:30:9b:6a:7d:5e:
ae:c7:f4:41:b4:aa:3e:a4:ad:71:a7:40:bf:35:b9:35:54:c6:
1f:4e:14:aa:93:4e:44:89:ae:41:65:ad:f1:4f:14:f1:73:91:
88:9b:9f:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZSNFTyjm+ID7agp0hxn88+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTIyMDgxNjA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiODA2NzY3YzE0NjJhNTE0MTdmNTU2YTZkY2NlMDhiNWIyOGM5MTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyzzpQEzVXBC4gNXXem9Uj6lHrtP
R+yGRuTMMomYzfJJA2boFkmXMJIFJFN790u+1GLdnitp5rcJskdg1UfQRG0h3OXA
uu2Epg9UGQEI7P2lC756NvTFPTIMra9fIuPLVaFSMmPtpbXZxSDaSvIX/gePWUBm
4JdCiIL9Bh+V853jbWIMh6gXwKzmTFn7ldxFIDBsWbKCdP+wOageBhAYeG0HR01J
m2erMGb34cilJrG78YIw6dfgVL6I4qXAddIud5yg3D0MZeVn7Kq7Fynzaw+p0yVl
hjbCBHhjJax1fHa0QX1ap3bLsO3NIjwz+3QshQ/HHqJdBKwLJiygdbuETwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLgGdnwUYqUUF/VWptzOCLWyjJFtMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvdUFaMmZCUmlwUlFYOVZhbTNNNEl0YktNa1cwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwoQJMA0G
CSqGSIb3DQEBCwUAA4IBAQAneMa53Cp3sq+l4a6v0dhShQBTQFdnHSQ+JD4/taVS
IAEUkNRKBXNM+0W8WxR5a7W83YY4j+W20Qnl70V1t2IpSs5ynvPcG0WeDdD89aWG
8oR7x4jWZbMgB9ZNYcm07Xon5mK+oBdA7aEVIkDC2PuBmTrEjD/8jxdU5f8OX8t9
jXJBAKqcuvqHyIRZb1+IUjWRw/WFxnG9GEWWf64PRuqUcg43PxldgqwQUo7w3NhK
E0kKsutEGOFKjnnjkL78VDT84QaQ5bY7XVWywd5Hg6DuDo7lMJtqfV6ux/RBtKo+
pK1xp0C/Nbk1VMYfThSqk05Eia5BZa3xTxTxc5GIm59s
-----END CERTIFICATE-----
Generated at Sun Feb 2 14:50:35 2025 by rpki-client