Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zTrb9p-gXBu1vPnKKF-pfGigjlk.roa
File: zTrb9p-gXBu1vPnKKF-pfGigjlk.roa (raw, json)
Hash identifier: Iuvp2kRE5DiB146NrBS1hj/NMgt+Rb+UPzgvOPqFrSI=
Subject key identifier: CD:3A:DB:F6:9F:A0:5C:1B:B5:BC:F9:CA:28:5F:A9:7C:68:A0:8E:59
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01942748405893AA3483DC996A70E5F23AF0
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zTrb9p-gXBu1vPnKKF-pfGigjlk.roa
Signing time: Thu 02 Jan 2025 13:50:33 +0000
ROA not before: Thu 02 Jan 2025 13:50:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8769
IP address blocks: 193.182.245.0/24 maxlen: 24
193.234.18.0/24 maxlen: 24
193.234.82.0/24 maxlen: 24
194.71.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:40:58:93:aa:34:83:dc:99:6a:70:e5:f2:3a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 13:50:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cd3adbf69fa05c1bb5bcf9ca285fa97c68a08e59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5c:0d:88:68:e4:b3:68:92:ad:30:4f:04:3d:
e2:4c:65:6a:ec:a7:6d:5a:78:c5:76:e5:a7:72:cd:
c9:1c:a9:6a:d1:48:90:b3:e2:41:da:e2:60:38:59:
97:20:46:4d:74:e5:0e:11:4c:e6:c0:70:09:98:05:
74:0a:3f:11:f8:2a:f2:28:95:06:4f:fe:5f:53:90:
3c:03:6d:d9:f7:35:33:66:66:b3:2d:12:b9:b5:bc:
32:0e:8c:1b:95:eb:55:d3:ae:48:6b:0e:cb:57:56:
48:cb:70:b8:26:54:ff:09:db:40:1e:9a:93:d6:4e:
2e:60:0a:75:b4:e7:ed:f3:d5:34:43:25:4c:6c:68:
7a:9b:4f:5f:98:ea:cb:25:e7:97:29:55:78:ad:30:
05:95:76:f2:2d:8d:ac:22:20:33:92:27:7c:5c:e2:
29:b7:ee:18:9e:85:97:89:5d:f1:ba:5f:81:19:45:
5a:d8:80:3f:27:d6:99:e5:94:d6:77:b5:23:dc:f7:
1a:a5:d8:1a:3b:2b:e1:f8:48:cc:94:1b:d1:a6:e0:
d8:a9:d7:88:8b:77:80:32:a1:08:16:d9:34:2a:78:
e8:db:4f:25:32:a1:49:d7:d3:5c:51:c5:37:9b:f0:
32:fb:a6:eb:08:ef:e0:16:2d:f4:aa:81:82:5f:d4:
7c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3A:DB:F6:9F:A0:5C:1B:B5:BC:F9:CA:28:5F:A9:7C:68:A0:8E:59
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zTrb9p-gXBu1vPnKKF-pfGigjlk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.182.245.0/24
193.234.18.0/24
193.234.82.0/24
194.71.221.0/24
Signature Algorithm: sha256WithRSAEncryption
10:e5:4c:dd:24:82:aa:29:7c:13:6a:a5:05:e7:f8:79:59:31:
69:8a:3c:56:48:8e:c3:7d:2f:c5:a2:57:24:c9:22:08:23:16:
c8:02:55:5f:d5:d9:65:28:57:a0:28:6b:62:c0:d1:89:23:72:
cf:07:f4:5b:04:d4:2a:86:b8:f2:f7:d4:b5:a8:b6:cf:24:4d:
64:81:46:ec:26:e8:ac:26:96:cc:8d:43:35:e7:f5:40:9d:44:
0b:f3:bf:b5:b1:97:0a:b7:eb:df:82:d5:bb:98:f7:8c:46:07:
d3:3f:9b:f6:68:2e:62:f7:40:72:52:a7:1e:c6:2e:dc:a8:ce:
24:92:1a:81:94:c9:1e:ba:df:81:dc:94:a7:2e:60:9e:6a:a0:
2f:4c:b4:6a:71:10:2d:b6:0b:b3:98:85:bb:ac:0c:7a:81:83:
b6:16:69:53:0f:0a:ff:13:80:c0:87:f7:d0:49:18:bf:09:cb:
36:54:c6:4f:5b:27:57:a7:37:e3:59:c9:3e:8e:5a:15:da:ef:
11:3c:1e:6f:83:a8:f6:48:fb:64:3f:4b:17:b1:f3:b7:c2:61:
42:f9:71:ca:b1:01:c3:5b:3e:38:13:53:dd:83:9d:a8:e7:26:
87:59:1b:bc:41:39:ab:e0:ec:13:f3:e4:26:5f:9b:3c:e1:54:
ac:55:aa:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:10 2025 by rpki-client