Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vz26hUzZII8XzInqqYyuIpVy3Y8.roa
File: vz26hUzZII8XzInqqYyuIpVy3Y8.roa (raw, json)
Hash identifier: C1HFrWFJ4UOKKwj0qEl2Ba0L5KQbET+p8O/PQkO3KQE=
Subject key identifier: BF:3D:BA:85:4C:D9:20:8F:17:CC:89:EA:A9:8C:AE:22:95:72:DD:8F
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0194274858B71570BAE6FE9880E7D35D70B0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vz26hUzZII8XzInqqYyuIpVy3Y8.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44803
IP address blocks: 193.180.208.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:58:b7:15:70:ba:e6:fe:98:80:e7:d3:5d:70:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bf3dba854cd9208f17cc89eaa98cae229572dd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:dd:ee:f3:e1:b9:25:14:67:6e:e0:80:64:9c:
ca:17:5b:ff:36:67:fd:31:60:67:3a:7b:e4:e9:75:
31:18:7d:56:8d:41:2c:aa:e4:95:33:03:5d:29:48:
e0:ab:ee:8f:f1:56:eb:c1:ba:23:de:17:ba:e8:d4:
e0:f8:b6:86:91:c6:02:7d:34:c1:f3:d2:c9:45:d4:
27:b9:98:74:37:a1:d4:b1:e0:fb:92:8b:8d:ae:2e:
ea:23:65:90:3c:92:69:60:18:d1:8a:5c:f3:f1:ff:
0a:6f:64:43:b3:07:ed:08:ff:dc:dc:67:86:92:4c:
41:dc:fc:33:a5:31:d0:69:60:3e:99:e1:71:81:aa:
0e:76:e2:6f:9d:33:93:0b:a9:b0:2b:7e:04:c9:96:
95:38:9c:f0:bf:8c:5e:ac:a2:87:20:ca:fd:47:33:
56:c8:60:bb:4f:f5:28:a0:bc:5c:e3:4e:95:20:9d:
1f:9b:89:c1:ba:1a:9a:91:d8:f5:52:92:ca:fe:6e:
29:92:9f:ac:77:b2:da:0c:e2:33:91:5d:72:68:9d:
bb:e5:f7:2e:e1:26:12:93:cf:30:cb:72:95:43:b4:
89:12:43:cc:30:9f:0c:10:ab:1d:55:ae:85:7f:d4:
03:83:c1:85:1b:dc:4b:e8:05:c2:b0:cb:80:4c:ee:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3D:BA:85:4C:D9:20:8F:17:CC:89:EA:A9:8C:AE:22:95:72:DD:8F
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vz26hUzZII8XzInqqYyuIpVy3Y8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.208.0/21
Signature Algorithm: sha256WithRSAEncryption
22:85:c0:e5:03:87:2f:fa:a9:a9:c3:3d:2f:4e:69:ea:7d:f1:
b1:2f:8c:59:1e:8a:61:e2:bd:e4:76:a4:11:d9:cf:25:06:2c:
8c:1d:a9:62:a3:86:5b:3f:bd:af:c9:0b:6a:51:98:ef:a8:9c:
be:47:1e:5e:3d:47:a5:94:cf:ba:04:96:20:5b:43:35:c8:a4:
f1:02:1c:07:9a:db:48:73:3f:7a:69:d9:be:52:20:52:94:04:
d0:e2:7d:5b:f2:df:98:f5:3f:0f:f7:aa:84:96:bb:81:fd:ce:
17:73:47:b3:a3:cf:0f:3d:43:f6:00:83:63:d8:77:90:7e:7b:
8c:52:fe:2c:48:39:bb:40:39:cc:2b:42:65:a3:d1:51:36:04:
81:92:32:de:40:18:c4:08:a7:e7:2e:2c:ad:9e:9e:26:e1:2f:
54:cd:4b:59:ab:5d:ac:35:5c:f7:1e:83:6e:61:ad:7f:de:0f:
77:a6:51:9e:d5:5c:02:c0:01:47:2f:46:a0:7f:d2:88:87:46:
e9:26:10:5d:7c:80:0e:24:fe:9c:19:6b:73:ab:ef:53:8b:cb:
92:cb:02:77:c7:e9:6b:0a:d8:02:0c:a2:38:66:48:40:9e:ad:
86:23:4b:76:b4:61:fc:39:bd:41:fc:37:22:41:03:af:29:27:
72:f0:71:d5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSFi3FXC65v6YgOfTXXCwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZjNkYmE4NTRjZDkyMDhmMTdjYzg5ZWFhOThjYWUyMjk1NzJkZDhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzd3u8+G5JRRnbuCAZJzKF1v/Nmf9
MWBnOnvk6XUxGH1WjUEsquSVMwNdKUjgq+6P8Vbrwboj3he66NTg+LaGkcYCfTTB
89LJRdQnuZh0N6HUseD7kouNri7qI2WQPJJpYBjRilzz8f8Kb2RDswftCP/c3GeG
kkxB3PwzpTHQaWA+meFxgaoOduJvnTOTC6mwK34EyZaVOJzwv4xerKKHIMr9RzNW
yGC7T/UooLxc406VIJ0fm4nBuhqakdj1UpLK/m4pkp+sd7LaDOIzkV1yaJ275fcu
4SYSk88wy3KVQ7SJEkPMMJ8MEKsdVa6Ff9QDg8GFG9xL6AXCsMuATO7CTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFL89uoVM2SCPF8yJ6qmMriKVct2PMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvdnoyNmhVelpJSThYeklucXFZeXVJcFZ5M1k4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwbTQMA0G
CSqGSIb3DQEBCwUAA4IBAQAihcDlA4cv+qmpwz0vTmnqffGxL4xZHoph4r3kdqQR
2c8lBiyMHalio4ZbP72vyQtqUZjvqJy+Rx5ePUellM+6BJYgW0M1yKTxAhwHmttI
cz96adm+UiBSlATQ4n1b8t+Y9T8P96qElruB/c4Xc0ezo88PPUP2AINj2HeQfnuM
Uv4sSDm7QDnMK0Jlo9FRNgSBkjLeQBjECKfnLiytnp4m4S9UzUtZq12sNVz3HoNu
Ya1/3g93plGe1VwCwAFHL0agf9KIh0bpJhBdfIAOJP6cGWtzq+9Ti8uSywJ3x+lr
CtgCDKI4ZkhAnq2GI0t2tGH8Ob1B/DciQQOvKSdy8HHV
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:05:04 2025 by rpki-client