Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ITVXeY-3Fv925a3wvGGY8v_CY_k.roa
File: ITVXeY-3Fv925a3wvGGY8v_CY_k.roa (raw, json)
Hash identifier: g0lRc4xZcDrc9SBpQR0W1xPlzWygV1lGi4G3cBKKYF4=
Subject key identifier: 21:35:57:79:8F:B7:16:FF:76:E5:AD:F0:BC:61:98:F2:FF:C2:63:F9
Certificate issuer: /CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Certificate serial: 018CC348AF59E1DCA21E6FF8A264D16F0339
Authority key identifier: 0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ITVXeY-3Fv925a3wvGGY8v_CY_k.roa
Signing time: Mon 01 Jan 2024 04:29:29 +0000
ROA not before: Mon 01 Jan 2024 04:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212396
IP address blocks: 193.110.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:af:59:e1:dc:a2:1e:6f:f8:a2:64:d1:6f:03:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2999042c5e2006bd5aeb7a05de1e96a5e73664
Validity
Not Before: Jan 1 04:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=213557798fb716ff76e5adf0bc6198f2ffc263f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:4d:29:37:30:1a:8b:af:4d:08:47:0e:28:
29:5e:1f:4d:7c:58:44:b9:d4:c0:cc:8d:7a:3a:19:
42:0e:d6:8a:15:1f:4a:1b:14:54:23:79:e0:a5:60:
4d:a6:52:4f:9a:d2:b9:30:a2:3f:41:16:45:eb:c1:
2b:ba:56:ea:24:f0:de:fd:79:d2:49:df:62:83:67:
8b:94:38:eb:4f:1b:30:68:73:38:7d:de:46:9b:c6:
ae:3b:17:28:90:a4:87:ca:0d:d6:54:ae:b2:4f:3f:
ec:0f:93:46:b2:46:fc:d3:e1:1b:e9:2a:3a:90:e3:
52:9c:6d:6c:6a:b1:ab:1c:b0:25:62:87:d8:bf:3d:
f7:9f:95:86:e2:52:df:99:63:44:54:02:0d:b5:9e:
7d:c7:5a:7b:62:3d:03:d9:3a:23:e7:85:3f:b9:6f:
44:73:51:e7:49:09:23:f0:b9:c7:bb:e1:06:a4:96:
60:7f:3c:76:1d:fe:70:49:19:a7:71:47:c0:f3:51:
71:27:80:5a:cd:cb:5d:02:53:62:55:c1:36:a8:cc:
a2:a3:9d:40:82:18:b5:5c:21:58:88:14:2d:56:f6:
96:2b:23:86:a0:56:20:e9:cd:b4:55:13:ad:e5:2d:
e1:ba:7e:17:d0:9d:17:4c:fc:29:93:06:43:30:ef:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:35:57:79:8F:B7:16:FF:76:E5:AD:F0:BC:61:98:F2:FF:C2:63:F9
X509v3 Authority Key Identifier:
keyid:0D:29:99:04:2C:5E:20:06:BD:5A:EB:7A:05:DE:1E:96:A5:E7:36:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/ITVXeY-3Fv925a3wvGGY8v_CY_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/2c3316-efc7-4952-9efe-8c153965bac9/1/DSmZBCxeIAa9Wut6Bd4elqXnNmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.160.0/24
Signature Algorithm: sha256WithRSAEncryption
61:7f:ec:aa:73:02:3a:39:db:e3:5c:09:98:8a:72:51:84:38:
70:96:d6:67:c3:37:e5:25:d8:2b:5d:c3:f7:a9:74:af:33:28:
63:3c:70:60:de:d9:12:57:78:5a:f2:cf:1d:70:5e:43:ec:28:
d1:73:9d:eb:b7:36:0e:86:0e:ea:cb:7d:50:fe:cb:f3:21:8f:
54:56:a4:34:7f:75:46:6e:d3:f8:38:b3:22:c4:72:10:28:3a:
2f:07:56:fb:b1:8b:86:df:cb:a1:dd:ec:ea:3b:ee:b8:bb:21:
3b:0f:44:da:d5:ee:92:ac:58:93:26:0a:14:8e:fc:e3:08:91:
54:8d:cc:79:13:95:01:b6:6a:76:9f:7d:ee:e1:00:0e:4b:3f:
38:eb:a3:cf:f6:c1:f5:c7:9a:b3:f2:47:e4:cf:f7:e8:ab:d3:
01:bb:71:12:63:2a:c5:74:02:56:64:9a:17:cf:0a:26:e1:08:
11:cc:b7:27:95:61:a1:b8:dc:74:b0:e0:19:0e:3c:b2:e6:c9:
26:a4:a5:82:8b:03:cb:3a:d4:60:d8:33:d7:cb:6c:f8:ed:64:
c4:e6:b7:a0:1b:74:7d:68:92:88:6d:2e:82:c7:91:73:29:b9:
9d:2d:ce:21:77:55:c9:a0:6c:55:6b:c5:03:b5:1c:8c:ec:0d:
e3:a0:c7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:20:51 2024 by rpki-client on console-fra.rpki-client.org