Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ut2RH7JdiBm_BMeULUySAwfu998.roa
File: ut2RH7JdiBm_BMeULUySAwfu998.roa (raw, json)
Hash identifier: K9ht40n3jgJJGiJZdd6CtGIV/wfBj2aPer+/RlFoPHI=
Subject key identifier: BA:DD:91:1F:B2:5D:88:19:BF:04:C7:94:2D:4C:92:03:07:EE:F7:DF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01975A08D66C54ED8A3EAC118F23ACF03AC5
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ut2RH7JdiBm_BMeULUySAwfu998.roa
Signing time: Tue 10 Jun 2025 13:30:18 +0000
ROA not before: Tue 10 Jun 2025 13:30:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199950
IP address blocks: 192.121.44.0/24 maxlen: 24
192.121.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:08:d6:6c:54:ed:8a:3e:ac:11:8f:23:ac:f0:3a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 10 13:30:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=badd911fb25d8819bf04c7942d4c920307eef7df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5c:c4:70:3a:82:75:0f:7b:c8:a6:2d:ca:4b:
9d:56:2a:16:2b:75:c2:96:5a:73:93:92:f1:91:20:
6d:9f:08:6f:a7:16:da:69:30:64:46:9c:74:57:df:
be:67:aa:a7:0b:05:3b:c5:83:c6:28:ce:aa:88:75:
4b:8b:49:92:f8:39:61:d9:cc:e3:d3:9e:69:31:68:
69:a2:d9:4c:1e:b1:cc:dc:2f:55:17:2e:6f:6b:ef:
5c:04:af:a2:92:7e:de:00:1b:12:e2:18:06:24:d6:
4b:ca:2c:0e:ce:66:8a:f3:a2:11:86:46:a3:a6:d0:
fa:10:3b:98:5a:8d:27:36:58:9a:5d:ba:c5:ae:1e:
fe:41:94:38:70:04:13:21:ff:a8:4b:9f:6e:eb:86:
a4:e9:a9:00:4a:f2:95:17:c8:5b:1e:75:e2:a5:04:
92:22:92:eb:7d:a2:ed:09:6a:31:13:63:c8:32:0e:
89:ad:6e:98:d3:0a:48:c2:78:4f:76:c1:68:14:84:
32:55:45:84:b2:63:7d:50:da:68:e3:b4:73:5c:b1:
66:46:e1:7b:eb:3d:30:41:d3:22:63:93:25:f6:ec:
2b:40:7c:fa:d3:10:13:ed:a2:46:d7:d2:9b:7c:7d:
13:ea:c6:94:15:40:53:e1:68:d0:00:0a:46:66:23:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:DD:91:1F:B2:5D:88:19:BF:04:C7:94:2D:4C:92:03:07:EE:F7:DF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ut2RH7JdiBm_BMeULUySAwfu998.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.44.0/24
192.121.108.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:93:50:94:ae:cc:ce:e9:7a:19:85:d3:9b:28:34:b4:db:36:
8f:77:5b:06:a1:0c:ad:23:27:9c:d0:76:08:79:62:16:93:b0:
55:5f:e6:71:a2:1f:58:10:9e:5b:04:d6:a5:13:8b:e2:0d:06:
05:44:6e:1e:35:9d:92:10:53:42:1e:f3:be:e8:5e:e7:71:8f:
b8:6f:ee:9c:d4:a1:14:dd:12:06:b3:ad:51:50:c4:48:bd:bb:
01:bc:12:71:58:0e:26:e0:40:88:67:d8:d4:ef:c9:92:25:e1:
3f:0e:75:79:0f:7f:f3:7d:89:5d:bd:54:3d:94:a3:68:22:2f:
31:09:6f:aa:de:a2:ec:b9:8f:42:40:35:71:35:f2:23:87:5a:
c4:7c:74:c6:0f:a7:92:7d:83:d1:4b:fc:67:7f:a3:f5:27:11:
4f:a3:ac:94:93:9e:a4:1f:f7:cd:6f:27:91:0d:dc:32:32:6c:
3e:f0:87:c9:be:f0:fa:00:c2:ab:d7:44:95:4b:8c:6b:c8:62:
28:f0:9f:4a:9e:f4:25:f2:09:9b:5b:de:ec:30:54:b9:9b:b9:
fa:08:50:de:35:92:ba:2e:3b:35:4a:f6:86:6f:07:62:4f:27:
33:b9:b1:d2:e5:a8:d9:73:08:65:d6:fe:dd:5e:46:43:01:b1:
d4:8c:d4:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:22:37 2025 by rpki-client