Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AkRHmEH4GDET28bqG9-vGxEiv6c.roa
File: AkRHmEH4GDET28bqG9-vGxEiv6c.roa (raw, json)
Hash identifier: HPJ2cuIw681lRCyMfApXqBfi8ISU8KZbBJyh6IjsbxE=
Subject key identifier: 02:44:47:98:41:F8:18:31:13:DB:C6:EA:1B:DF:AF:1B:11:22:BF:A7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 0196C4D319748501B60A4DF06B24D7C7B692
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AkRHmEH4GDET28bqG9-vGxEiv6c.roa
Signing time: Mon 12 May 2025 14:08:10 +0000
ROA not before: Mon 12 May 2025 14:08:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206013
IP address blocks: 192.36.37.0/24 maxlen: 24
193.180.104.0/21 maxlen: 24
193.180.112.0/23 maxlen: 24
193.180.114.0/24 maxlen: 24
193.181.187.0/24 maxlen: 24
194.14.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 May 2025 23:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c4:d3:19:74:85:01:b6:0a:4d:f0:6b:24:d7:c7:b6:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 12 14:08:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0244479841f8183113dbc6ea1bdfaf1b1122bfa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:ba:32:44:39:d1:3f:33:ad:88:86:4a:63:
f2:2e:a5:fe:08:7b:c1:67:46:ce:39:99:fd:33:8c:
35:ff:f6:00:90:24:8e:43:36:0d:59:d9:c2:d3:00:
ce:0a:1f:02:f3:68:71:2d:72:da:14:11:83:43:b9:
ab:54:81:54:fe:46:c6:c9:7c:9b:27:55:d3:bf:ce:
aa:9b:09:ce:78:85:f4:35:1d:d2:a6:be:5e:72:ba:
c7:b5:97:db:2a:e5:4d:91:fc:d5:cf:99:91:6b:b5:
41:c8:68:a2:23:9e:28:4a:73:c3:e4:26:c1:46:c9:
32:19:a4:97:c9:30:b5:09:93:46:a4:b0:f0:38:1d:
3f:5d:1e:50:53:73:ad:b1:fc:9b:2d:61:f4:c1:3a:
8b:db:b7:bf:ef:29:02:bc:c5:50:d9:19:ff:a0:e6:
1a:19:92:f0:c0:32:f5:c2:cb:5f:3c:5b:43:be:a3:
31:0c:74:0f:6b:94:75:2e:d4:67:a6:33:01:d7:da:
64:69:c6:68:50:81:99:cc:10:cb:cc:cd:55:ed:ed:
d0:9a:1c:ea:6e:c5:7a:7a:cc:f5:df:a0:41:fa:30:
27:81:69:b5:f7:2b:89:3d:db:2d:d5:57:fb:32:2a:
45:98:84:24:44:6d:95:b8:ba:f2:93:4b:73:46:73:
3c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:44:47:98:41:F8:18:31:13:DB:C6:EA:1B:DF:AF:1B:11:22:BF:A7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/AkRHmEH4GDET28bqG9-vGxEiv6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.37.0/24
193.180.104.0-193.180.114.255
193.181.187.0/24
194.14.33.0/24
Signature Algorithm: sha256WithRSAEncryption
69:39:fb:e8:6e:bc:f8:e5:05:07:46:a1:cd:ce:9b:bb:81:73:
4c:fc:08:55:90:a1:d2:bd:f6:77:42:e0:f1:36:bb:0c:42:e6:
3a:20:39:55:0a:34:2c:d4:b7:cc:3a:e6:e7:b5:f8:ec:95:60:
bb:f0:66:f7:93:3a:85:4b:ed:e2:df:80:86:dc:2c:95:12:14:
d3:60:bf:1b:15:7c:f8:c0:ee:7b:6a:9f:15:22:9e:70:13:fd:
3d:bd:10:19:7d:eb:dd:59:76:c2:d6:0b:4d:6c:ef:e8:65:88:
7e:25:53:cd:fd:41:72:03:c7:9b:4c:89:f5:3d:2e:46:1f:cf:
40:d5:07:db:8f:fb:1f:5e:52:ab:35:3c:b6:27:b5:86:7b:11:
26:bc:1c:fd:3b:b7:ff:af:b0:89:73:ea:07:1c:43:f4:c1:b3:
b4:c0:c7:7d:2f:7d:cf:bd:75:8d:67:a5:5b:47:b9:49:e5:bc:
3e:f1:a0:6d:61:cb:9e:fe:99:a1:a1:96:8b:85:5d:ed:45:c7:
09:0b:b7:7c:6f:a8:0d:fc:a3:28:d2:a3:75:95:4d:30:18:88:
16:8b:69:c4:a2:f1:7d:c0:03:cf:1b:ca:b2:ff:3a:87:a0:72:
83:ac:b6:bc:0c:49:32:8d:f7:f1:3d:c3:1d:7d:1e:99:85:47:
47:2c:bf:84
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZbE0xl0hQG2Ck3wayTXx7aSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwNTEyMTQwODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjQ0NDc5ODQxZjgxODMxMTNkYmM2ZWExYmRmYWYxYjExMjJiZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqi6MkQ50T8zrYiGSmPyLqX+CHvB
Z0bOOZn9M4w1//YAkCSOQzYNWdnC0wDOCh8C82hxLXLaFBGDQ7mrVIFU/kbGyXyb
J1XTv86qmwnOeIX0NR3Spr5ecrrHtZfbKuVNkfzVz5mRa7VByGiiI54oSnPD5CbB
RskyGaSXyTC1CZNGpLDwOB0/XR5QU3OtsfybLWH0wTqL27e/7ykCvMVQ2Rn/oOYa
GZLwwDL1wstfPFtDvqMxDHQPa5R1LtRnpjMB19pkacZoUIGZzBDLzM1V7e3Qmhzq
bsV6esz136BB+jAngWm19yuJPdst1Vf7MipFmIQkRG2VuLryk0tzRnM8xwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFAJER5hB+BgxE9vG6hvfrxsRIr+nMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvQWtSSG1FSDRHREVUMjhicUc5LXZHeEVpdjZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAwCQlMAwD
BAPBtGgDBADBtHIDBADBtbsDBADCDiEwDQYJKoZIhvcNAQELBQADggEBAGk5++hu
vPjlBQdGoc3Om7uBc0z8CFWQodK99ndC4PE2uwxC5jogOVUKNCzUt8w65ue1+OyV
YLvwZveTOoVL7eLfgIbcLJUSFNNgvxsVfPjA7ntqnxUinnAT/T29EBl9691ZdsLW
C01s7+hliH4lU839QXIDx5tMifU9LkYfz0DVB9uP+x9eUqs1PLYntYZ7ESa8HP07
t/+vsIlz6gccQ/TBs7TAx30vfc+9dY1npVtHuUnlvD7xoG1hy57+maGhlouFXe1F
xwkLt3xvqA38oyjSo3WVTTAYiBaLacSi8X3AA88byrL/OoegcoOstrwMSTKN9/E9
wx19HpmFR0csv4Q=
-----END CERTIFICATE-----
Generated at Thu May 15 07:30:59 2025 by rpki-client