Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zRxITurxRQfzjWcmv8amajm4Z8s.roa
File: zRxITurxRQfzjWcmv8amajm4Z8s.roa (raw, json)
Hash identifier: lI8Xk6UWDfpBIr1IkXu0crZSqKFtu1+iEpd7O0VsBM8=
Subject key identifier: CD:1C:48:4E:EA:F1:45:07:F3:8D:67:26:BF:C6:A6:6A:39:B8:67:CB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748874D7754E7853E09B3FC4E30B1F9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zRxITurxRQfzjWcmv8amajm4Z8s.roa
Signing time: Thu 02 Jan 2025 13:50:52 +0000
ROA not before: Thu 02 Jan 2025 13:50:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 216347
IP address blocks: 194.68.244.0/22 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:87:4d:77:54:e7:85:3e:09:b3:fc:4e:30:b1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd1c484eeaf14507f38d6726bfc6a66a39b867cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:87:06:91:ad:32:af:bd:c4:79:e2:26:21:
50:22:c8:a0:93:fe:6f:d9:e6:df:03:b4:53:68:bd:
25:d7:7a:4a:ee:a7:85:cf:f2:a5:be:5d:1a:59:dc:
8a:25:a0:15:44:34:28:8d:c1:73:8e:cc:08:73:6b:
12:8f:92:96:af:9f:f2:a7:51:b2:dd:8a:a7:6b:9c:
d2:05:3e:33:c2:a5:e5:fb:f7:95:c7:2e:ed:e9:79:
f1:37:86:7e:a4:f3:3e:b9:43:d7:77:b6:0e:9b:a9:
8b:22:a9:24:48:e3:e3:fc:34:9e:e3:70:50:4b:d6:
fa:8c:cb:80:44:90:c7:69:d5:75:67:aa:26:a8:2f:
1d:c7:fa:3c:98:15:78:42:40:2b:97:9f:f5:b0:4e:
00:f3:9f:c6:98:d7:4c:34:ad:53:b3:2c:54:c1:78:
60:86:43:ff:f0:2d:0a:df:a6:24:b8:ad:71:f0:41:
34:6a:9f:34:6f:dc:a1:ab:1a:9c:5d:5a:03:56:09:
52:44:45:cc:6e:e7:6b:40:ff:2e:30:3d:7e:25:9a:
0c:d3:56:72:70:64:a1:c2:21:6e:26:80:2b:9f:54:
a7:22:31:50:20:e0:c7:a6:35:f6:87:ed:a2:f5:7e:
55:ea:48:33:4f:35:07:bf:6c:40:f3:49:ec:ed:00:
67:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:1C:48:4E:EA:F1:45:07:F3:8D:67:26:BF:C6:A6:6A:39:B8:67:CB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zRxITurxRQfzjWcmv8amajm4Z8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.244.0/22
Signature Algorithm: sha256WithRSAEncryption
03:b1:23:64:ef:10:ab:44:48:30:a5:68:15:9d:91:21:99:5c:
6d:f1:32:c5:05:44:09:b5:50:34:be:f3:28:d3:7d:c1:9e:8f:
7f:0a:6a:2c:cc:a0:f1:a2:13:0b:2f:b4:1e:91:05:aa:7e:51:
60:3c:58:3c:36:4f:8a:1d:f6:c5:24:80:a1:aa:48:2c:46:00:
70:e2:2e:04:7b:5a:33:86:a3:43:28:21:6e:03:de:34:0a:c9:
71:68:29:cf:52:3e:6c:f6:a9:e9:f5:c0:a1:e1:bf:51:b1:7e:
66:1d:98:72:df:d5:93:88:60:ed:c0:0b:47:ea:05:3b:bc:df:
9e:65:b1:fb:4b:33:4c:19:c0:60:77:43:b2:76:62:80:a9:45:
50:d3:56:56:9e:44:e2:35:5a:a7:b8:64:3e:f9:9f:fa:b6:c9:
85:b1:82:e2:51:cc:44:70:3c:41:9a:05:be:c2:7d:b3:64:9d:
1c:12:9a:52:9e:da:44:82:df:47:ad:65:99:00:c9:79:b5:23:
3c:0a:49:4b:a0:7c:35:2a:56:fa:1e:86:60:fe:f4:f2:5a:90:
f0:7e:ab:0b:3e:0e:1b:92:f4:86:91:c9:2b:55:b6:db:48:79:
d3:21:f9:10:60:3d:8f:3a:7b:c4:29:a4:f5:68:e2:4f:7a:e4:
27:de:b5:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSIdNd1TnhT4Js/xOMLH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwMTAyMTM1MDUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZDFjNDg0ZWVhZjE0NTA3ZjM4ZDY3MjZiZmM2YTY2YTM5Yjg2N2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZqHBpGtMq+9xHniJiFQIsigk/5v
2ebfA7RTaL0l13pK7qeFz/Klvl0aWdyKJaAVRDQojcFzjswIc2sSj5KWr5/yp1Gy
3Yqna5zSBT4zwqXl+/eVxy7t6XnxN4Z+pPM+uUPXd7YOm6mLIqkkSOPj/DSe43BQ
S9b6jMuARJDHadV1Z6omqC8dx/o8mBV4QkArl5/1sE4A85/GmNdMNK1TsyxUwXhg
hkP/8C0K36YkuK1x8EE0ap80b9yhqxqcXVoDVglSREXMbudrQP8uMD1+JZoM01Zy
cGShwiFuJoArn1SnIjFQIODHpjX2h+2i9X5V6kgzTzUHv2xA80ns7QBnuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM0cSE7q8UUH841nJr/Gpmo5uGfLMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvelJ4SVR1cnhSUWZ6aldjbXY4YW1ham00WjhzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwkT0MA0G
CSqGSIb3DQEBCwUAA4IBAQADsSNk7xCrREgwpWgVnZEhmVxt8TLFBUQJtVA0vvMo
033Bno9/CmoszKDxohMLL7QekQWqflFgPFg8Nk+KHfbFJIChqkgsRgBw4i4Ee1oz
hqNDKCFuA940CslxaCnPUj5s9qnp9cCh4b9RsX5mHZhy39WTiGDtwAtH6gU7vN+e
ZbH7SzNMGcBgd0OydmKAqUVQ01ZWnkTiNVqnuGQ++Z/6tsmFsYLiUcxEcDxBmgW+
wn2zZJ0cEppSntpEgt9HrWWZAMl5tSM8CklLoHw1Klb6HoZg/vTyWpDwfqsLPg4b
kvSGkckrVbbbSHnTIfkQYD2POnvEKaT1aOJPeuQn3rUb
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:56:50 2025 by rpki-client