Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/ITU9N73wNSwtRlo0RIBRFcqyI18.roa
File: ITU9N73wNSwtRlo0RIBRFcqyI18.roa (raw, json)
Hash identifier: tZ8waA6UjAXlSU4mKy5eCZ0yrObYCvk+4Q5dVUfAZCs=
Subject key identifier: 21:35:3D:37:BD:F0:35:2C:2D:46:5A:34:44:80:51:15:CA:B2:23:5F
Certificate issuer: /CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Certificate serial: 019426D9D5F4C384FDD0AEE00188FD9998AD
Authority key identifier: 75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/ITU9N73wNSwtRlo0RIBRFcqyI18.roa
Signing time: Thu 02 Jan 2025 11:49:57 +0000
ROA not before: Thu 02 Jan 2025 11:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203111
IP address blocks: 185.144.104.0/22 maxlen: 22
2a07:3e80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Feb 2025 00:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d5:f4:c3:84:fd:d0:ae:e0:01:88:fd:99:98:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b982eaba4408cd941899f5ceec1da6a67c5c49
Validity
Not Before: Jan 2 11:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21353d37bdf0352c2d465a3444805115cab2235f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:51:70:c7:9e:af:8f:31:6b:23:91:49:ec:
b4:04:6d:24:4e:46:91:c4:3b:ce:33:39:c5:a7:38:
5b:f6:54:07:cb:aa:b5:0f:ab:82:8a:22:1e:06:1a:
92:f7:01:0f:f9:c2:a8:21:30:6e:f6:f2:85:dc:e7:
43:de:52:02:2d:dd:65:d1:25:2e:d9:bd:4a:77:b6:
c8:43:92:77:59:ba:b9:5f:5f:63:7a:3c:2e:91:e8:
ec:a5:31:ab:17:3e:8c:80:82:75:87:fc:05:30:52:
2b:cb:67:36:0a:75:90:06:ec:b1:31:5a:91:ae:59:
7f:a1:b2:7f:f7:98:aa:6f:53:73:91:70:da:1d:fc:
c4:8c:0b:0f:27:84:3b:59:d6:58:0a:73:8f:02:21:
96:8b:66:c7:44:c7:9b:96:e5:05:a4:1a:02:80:dd:
49:4d:62:f8:0a:c1:b7:2c:a1:b3:a9:4a:bb:d5:d4:
7d:69:09:5f:85:15:32:1b:e7:aa:f6:a0:29:4a:ef:
cb:ce:12:8a:70:98:31:e9:8a:ee:87:0b:ee:b6:4c:
b2:fa:15:73:d5:37:79:7c:b6:ea:34:4d:2a:ea:23:
a4:66:e0:f0:fc:85:04:ad:6e:18:ec:5d:c4:f1:65:
71:70:91:1b:e3:6c:db:05:91:15:03:09:28:63:15:
18:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:35:3D:37:BD:F0:35:2C:2D:46:5A:34:44:80:51:15:CA:B2:23:5F
X509v3 Authority Key Identifier:
keyid:75:B9:82:EA:BA:44:08:CD:94:18:99:F5:CE:EC:1D:A6:A6:7C:5C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbmC6rpECM2UGJn1zuwdpqZ8XEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/ITU9N73wNSwtRlo0RIBRFcqyI18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/69f3f3-0faa-465f-aa7a-d71ca19f989e/1/dbmC6rpECM2UGJn1zuwdpqZ8XEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.104.0/22
IPv6:
2a07:3e80::/29
Signature Algorithm: sha256WithRSAEncryption
23:1e:02:aa:a1:bc:e5:b8:90:28:16:a8:6d:f3:71:59:ca:44:
4b:c5:72:a7:8e:24:0a:0c:9f:f3:01:a9:1c:f0:30:1c:9c:19:
60:a0:23:87:c9:2a:3e:aa:ed:df:2a:bd:a3:bd:2e:c9:cd:73:
92:fc:fa:eb:90:45:fd:ce:eb:6f:f5:52:5f:7c:12:b5:d8:84:
23:07:39:69:17:b8:f8:6c:fd:6b:5f:69:6a:2a:f3:58:c1:c7:
31:20:7a:3f:d6:ea:25:db:49:b5:8e:81:1c:03:b6:c8:79:7e:
55:10:8d:f3:18:e4:a5:51:b2:5c:25:e1:ea:63:12:88:55:30:
12:11:03:74:8f:5b:60:c7:0d:d2:07:90:bb:0e:db:07:fa:2f:
5d:63:95:ee:5f:4d:41:d5:d4:e1:e8:c5:a5:a4:ce:2b:02:2d:
20:31:4f:cd:52:f5:49:73:bc:f1:93:20:97:59:7e:75:26:a7:
96:e4:2e:e8:b4:47:4f:3a:e5:e7:27:32:2f:7b:4b:96:05:e6:
97:9a:6f:f5:f0:6a:63:b2:94:d3:f0:4a:15:44:8c:38:ce:a3:
0f:f2:7c:7e:9f:6f:7c:c9:19:b3:f5:98:cc:b9:fd:e7:4e:3d:
fa:68:e9:e5:b7:4f:fe:c7:ec:1a:15:ff:dc:fb:7f:e6:93:5f:
48:5c:c8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:00:13 2025 by rpki-client