Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9UZfoUDrR-LGTRnBfZ6z2PhDHjM.roa
File: 9UZfoUDrR-LGTRnBfZ6z2PhDHjM.roa (raw, json)
Hash identifier: g4+e+KvBUbIrJrEBmMXDNPES8hfG/L9fEr5sfT+Parg=
Subject key identifier: F5:46:5F:A1:40:EB:47:E2:C6:4D:19:C1:7D:9E:B3:D8:F8:43:1E:33
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019642C99A55238BE6147C9A4FDAADC37010
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9UZfoUDrR-LGTRnBfZ6z2PhDHjM.roa
Signing time: Thu 17 Apr 2025 08:07:10 +0000
ROA not before: Thu 17 Apr 2025 08:07:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50273
IP address blocks: 192.121.211.0/24 maxlen: 24
192.121.215.0/24 maxlen: 24
192.121.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 May 2025 08:31:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:42:c9:9a:55:23:8b:e6:14:7c:9a:4f:da:ad:c3:70:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 17 08:07:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5465fa140eb47e2c64d19c17d9eb3d8f8431e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:80:9d:f3:00:07:7c:c2:a1:a7:ae:55:94:77:
25:77:df:a4:6b:2c:e2:f9:3c:b8:6a:23:9e:b0:61:
8f:7d:6a:ab:48:39:8d:e1:9c:80:5b:a1:43:1d:b0:
63:45:fc:d5:ce:24:bb:6d:00:a6:1b:d3:c2:4e:16:
17:a0:47:c7:39:5f:8a:da:32:2e:83:ca:f7:83:15:
9c:c8:55:23:f7:04:3b:86:97:93:66:29:b3:36:f3:
a7:a7:2c:98:bc:56:c2:74:cb:a4:17:9a:78:f2:05:
2f:12:b0:75:b9:39:cc:84:d3:86:c9:e8:35:95:7c:
42:c8:d9:8e:3f:d4:22:d1:59:59:fc:e0:79:77:43:
c8:96:9a:a0:b2:2a:1d:57:52:47:c1:16:9f:96:c8:
5d:6c:b9:4d:ca:00:ed:f8:02:aa:2c:e7:a3:cb:02:
71:7a:7f:c1:f8:35:7f:e3:7e:dc:99:d3:a0:6e:ed:
28:ae:d4:69:58:ce:37:04:fe:6b:c1:ad:23:6d:08:
e3:6a:51:93:be:12:b4:55:c1:67:16:5b:52:69:b2:
7c:82:b4:42:cd:16:bc:22:ac:6f:70:dc:78:2e:15:
15:28:a8:df:c0:35:41:3f:c0:23:c5:63:71:38:82:
a9:95:b5:ce:eb:69:2a:3b:c1:f8:62:f3:4b:c1:6a:
ce:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:46:5F:A1:40:EB:47:E2:C6:4D:19:C1:7D:9E:B3:D8:F8:43:1E:33
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9UZfoUDrR-LGTRnBfZ6z2PhDHjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.211.0/24
192.121.215.0-192.121.216.255
Signature Algorithm: sha256WithRSAEncryption
07:7c:6d:2b:63:5c:cc:d9:69:b4:d0:d8:60:8c:7f:16:6b:2d:
2b:ea:26:f8:69:eb:97:7c:ae:17:ef:92:f3:26:9d:e6:eb:20:
cb:77:35:b9:e6:db:cd:54:54:f8:81:76:3a:9e:aa:af:be:77:
05:bf:86:ec:85:ed:d3:74:e5:0e:92:99:e6:58:c8:f6:56:2e:
09:84:3b:f1:cf:e5:28:3a:b5:bd:51:ae:34:3a:bb:fa:80:93:
00:a9:ad:31:01:2b:32:99:86:a8:a7:4a:92:8c:04:13:15:b4:
ed:13:ac:93:2b:df:f6:20:5b:ca:eb:95:99:39:68:69:8c:14:
cb:ed:78:da:e6:83:7c:04:66:f1:88:5a:0b:eb:a8:2a:df:f9:
11:21:73:ab:91:35:46:3e:ca:35:80:13:4c:00:d1:05:2f:35:
4e:d8:ac:65:7c:e7:88:be:92:79:df:8c:bf:7a:a5:99:86:0a:
bd:e1:ab:8a:0b:7e:4d:b5:30:0f:b3:0c:d6:83:36:8b:5a:ee:
4a:87:fb:73:eb:d8:80:4d:e0:a3:5b:b1:bd:98:96:34:95:b7:
0b:9b:90:a0:c7:4a:4d:38:a5:d9:3d:a5:41:22:a6:27:63:91:
15:22:38:0f:46:75:47:d7:69:bb:02:9c:66:e5:4a:a9:f2:45:
9f:b8:88:e7
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZZCyZpVI4vmFHyaT9qtw3AQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjUwNDE3MDgwNzEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTQ2NWZhMTQwZWI0N2UyYzY0ZDE5YzE3ZDllYjNkOGY4NDMxZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YCd8wAHfMKhp65VlHcld9+kayzi
+Ty4aiOesGGPfWqrSDmN4ZyAW6FDHbBjRfzVziS7bQCmG9PCThYXoEfHOV+K2jIu
g8r3gxWcyFUj9wQ7hpeTZimzNvOnpyyYvFbCdMukF5p48gUvErB1uTnMhNOGyeg1
lXxCyNmOP9Qi0VlZ/OB5d0PIlpqgsiodV1JHwRaflshdbLlNygDt+AKqLOejywJx
en/B+DV/437cmdOgbu0ortRpWM43BP5rwa0jbQjjalGTvhK0VcFnFltSabJ8grRC
zRa8IqxvcNx4LhUVKKjfwDVBP8AjxWNxOIKplbXO62kqO8H4YvNLwWrOfwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFPVGX6FA60fixk0ZwX2es9j4Qx4zMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvOVVaZm9VRHJSLUxHVFJuQmZaNnoyUGhESGpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAwHnTMAwD
BADAedcDBADAedgwDQYJKoZIhvcNAQELBQADggEBAAd8bStjXMzZabTQ2GCMfxZr
LSvqJvhp65d8rhfvkvMmnebrIMt3Nbnm281UVPiBdjqeqq++dwW/huyF7dN05Q6S
meZYyPZWLgmEO/HP5Sg6tb1RrjQ6u/qAkwCprTEBKzKZhqinSpKMBBMVtO0TrJMr
3/YgW8rrlZk5aGmMFMvteNrmg3wEZvGIWgvrqCrf+REhc6uRNUY+yjWAE0wA0QUv
NU7YrGV854i+knnfjL96pZmGCr3hq4oLfk21MA+zDNaDNota7kqH+3Pr2IBN4KNb
sb2YljSVtwubkKDHSk04pdk9pUEipidjkRUiOA9GdUfXabsCnGblSqnyRZ+4iOc=
-----END CERTIFICATE-----
Generated at Mon May 5 13:41:38 2025 by rpki-client on console.sobornost.net