Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wBtHCQ_Z8xeXsfywIMwvI_o4v8k.roa
File: wBtHCQ_Z8xeXsfywIMwvI_o4v8k.roa (raw, json)
Hash identifier: QZgAY4AI59IAJMR8S3AFwKAFto6nwd6xuchwkroVZLc=
Subject key identifier: C0:1B:47:09:0F:D9:F3:17:97:B1:FC:B0:20:CC:2F:23:FA:38:BF:C9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019427485AB570CF4913D1B6EAF0C3E9950B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wBtHCQ_Z8xeXsfywIMwvI_o4v8k.roa
Signing time: Thu 02 Jan 2025 13:50:40 +0000
ROA not before: Thu 02 Jan 2025 13:50:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48579
IP address blocks: 192.121.20.0/24 maxlen: 24
192.121.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5a:b5:70:cf:49:13:d1:b6:ea:f0:c3:e9:95:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c01b47090fd9f31797b1fcb020cc2f23fa38bfc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1a:c1:85:1c:0d:22:76:e3:89:01:71:71:b6:
ad:09:33:11:73:e0:e7:b6:09:6a:04:46:43:05:9d:
b9:7c:57:d9:27:38:a0:7e:6c:e0:9a:db:c6:88:bc:
54:fb:48:45:14:ff:0d:1f:3f:56:0b:99:78:2b:fb:
cc:26:f9:8a:e1:d2:54:56:68:70:88:83:7b:64:83:
95:40:08:71:4d:a4:41:12:6d:a9:0f:aa:55:c3:c2:
60:c6:30:fb:72:cc:1f:d0:66:f6:cd:53:bd:23:da:
f2:53:c3:a4:8a:59:d7:93:f3:20:66:76:5b:83:c4:
e9:3c:59:16:25:13:7d:59:ab:16:1e:b8:8f:9b:95:
1f:ff:a5:d5:7b:d5:db:30:6a:4c:62:3f:5b:9a:95:
1b:59:37:72:ce:a7:30:da:60:34:69:07:33:75:a8:
ea:f5:a4:ef:46:e1:57:50:04:bd:8f:93:b3:7f:7f:
d1:c7:4d:58:13:0c:e4:aa:61:f8:dd:66:7a:31:d9:
8b:77:25:db:b9:de:b7:70:e6:e4:15:6f:2a:e6:b1:
b9:d9:ef:85:7c:1a:ce:2c:cf:6a:04:48:51:22:d1:
f0:8f:f9:b9:0c:a1:c5:72:fe:65:24:ec:2b:78:cb:
b6:3b:56:ee:e4:8c:d7:ae:4e:4f:12:31:f4:95:a9:
ac:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:1B:47:09:0F:D9:F3:17:97:B1:FC:B0:20:CC:2F:23:FA:38:BF:C9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/wBtHCQ_Z8xeXsfywIMwvI_o4v8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.20.0/24
192.121.165.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:12:58:2d:f7:03:2c:d6:25:5e:13:36:d3:a8:c0:b3:41:62:
8a:fc:f2:43:48:ea:e9:22:36:f5:c6:04:32:ed:b7:5f:9d:d1:
93:d5:a4:a3:a3:c0:a3:6a:d1:80:6f:26:33:69:ad:93:7f:d6:
f1:c7:f3:f5:02:5b:ec:8a:39:fe:c5:78:2f:82:8d:60:b7:9c:
e2:e1:f3:90:50:8f:49:77:a5:56:a0:c9:d6:e3:c6:e4:d1:2a:
7e:9b:ba:d0:f0:6a:20:d9:09:c9:63:f4:e1:20:aa:f9:b1:95:
10:e9:c5:f6:77:f4:13:a0:62:bf:f7:37:aa:c7:a3:ca:c2:98:
a7:cc:31:89:93:dd:db:3f:73:9d:08:8e:1b:85:0d:21:29:1d:
7f:ba:b1:bc:3c:cb:d1:36:9d:26:30:0c:bf:02:a2:8d:07:e7:
76:ed:9e:dd:9f:30:45:2a:47:75:87:84:55:ed:6e:8c:69:8c:
a0:19:b4:f4:31:35:51:d2:b6:34:f8:91:c8:d5:9d:82:f7:03:
0b:f3:df:1f:3f:25:5b:b7:e5:09:30:07:5e:18:c2:4e:44:47:
57:75:d7:40:67:fd:de:74:cb:a7:27:31:5c:36:e8:e1:5f:dd:
96:0c:ce:52:d6:77:ec:6f:ca:2f:58:52:7d:f5:3e:69:98:45:
68:1a:cc:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:10:21 2025 by rpki-client