Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/drklO24QRPLPH-xW5DIqnUtTPcc.roa
File: drklO24QRPLPH-xW5DIqnUtTPcc.roa (raw, json)
Hash identifier: WfTRuTviFEYLRwvOY15QgjcIabpDH8klfCKkQ11GS28=
Subject key identifier: 76:B9:25:3B:6E:10:44:F2:CF:1F:EC:56:E4:32:2A:9D:4B:53:3D:C7
Certificate issuer: /CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Certificate serial: 018CC49231629B1A6EEF7FCDE21DC266F28C
Authority key identifier: 11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/drklO24QRPLPH-xW5DIqnUtTPcc.roa
Signing time: Mon 01 Jan 2024 10:29:24 +0000
ROA not before: Mon 01 Jan 2024 10:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61153
IP address blocks: 193.17.120.0/21 maxlen: 24
193.17.96.0/21 maxlen: 24
193.17.104.0/21 maxlen: 24
193.17.112.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:92:31:62:9b:1a:6e:ef:7f:cd:e2:1d:c2:66:f2:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1120a0ce013e2d52a6ff354a270894bb998e4547
Validity
Not Before: Jan 1 10:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76b9253b6e1044f2cf1fec56e4322a9d4b533dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:06:c4:69:9a:c6:72:83:ff:35:ee:00:5f:0a:
d3:2f:8c:57:16:58:72:00:4e:13:f9:96:89:1f:26:
aa:ca:86:9d:bb:da:64:89:7d:c0:65:be:45:d7:2d:
a1:23:45:92:ee:9b:59:f6:92:51:d8:0c:00:6f:75:
63:6c:fe:90:98:db:a8:7e:50:dc:04:68:dc:c7:eb:
b6:9e:3a:0a:b5:34:30:ec:78:93:9d:05:2c:f9:7e:
a7:71:f4:2c:2f:d9:8d:be:e8:71:95:82:c9:56:6a:
f7:d0:17:a0:b2:0f:02:8b:d8:e4:a8:18:cb:fa:1c:
4c:5c:68:4c:f1:df:6f:ce:a2:66:1d:65:19:8d:22:
04:dd:c3:f9:3c:c2:20:23:ce:fb:c4:9c:2f:9f:5c:
a3:e1:ac:da:11:91:d1:9d:02:8c:3d:30:00:39:6a:
c1:c6:3d:f7:59:d9:c4:64:af:37:11:56:71:e6:88:
3e:a4:b8:bf:aa:22:87:b4:a5:4e:a7:79:3f:a6:15:
87:83:03:ee:96:fd:19:5e:dd:04:6b:21:b5:7d:d3:
88:4f:8e:16:5c:13:af:18:b8:e1:fe:e3:9f:7c:c7:
2f:59:a4:14:d5:bd:ec:81:c3:35:54:d2:34:ab:38:
c6:de:00:83:c7:c9:c3:ff:23:13:60:10:52:d6:6f:
3d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B9:25:3B:6E:10:44:F2:CF:1F:EC:56:E4:32:2A:9D:4B:53:3D:C7
X509v3 Authority Key Identifier:
keyid:11:20:A0:CE:01:3E:2D:52:A6:FF:35:4A:27:08:94:BB:99:8E:45:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ESCgzgE-LVKm_zVKJwiUu5mORUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/drklO24QRPLPH-xW5DIqnUtTPcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/421498-28d3-4376-b625-31af3e294671/1/ESCgzgE-LVKm_zVKJwiUu5mORUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.96.0/19
Signature Algorithm: sha256WithRSAEncryption
5c:a6:ab:1a:97:4f:37:3c:52:97:3d:42:b6:7f:05:85:7e:20:
8b:25:65:8e:37:be:cd:18:9d:85:14:68:29:4c:2b:a3:30:20:
cc:2d:23:10:67:8e:83:61:14:9a:7e:2b:75:9c:0b:49:81:5d:
70:64:4c:e9:51:62:58:01:05:eb:ef:5c:a0:5a:01:7b:2d:04:
61:37:7b:09:3e:8e:7e:67:f8:af:c3:f2:6c:05:c6:66:3e:8d:
e4:90:fd:d5:42:e5:3c:bc:ed:6e:d5:4e:c1:aa:6c:93:3a:d4:
62:76:7a:9d:45:9b:2c:b8:e8:ef:53:5a:b9:c1:69:00:d9:51:
01:25:5f:27:24:97:d4:1b:be:65:e8:20:70:df:cf:9e:3e:e0:
36:c2:30:1c:cc:89:f0:94:fb:18:21:76:35:00:f1:f2:e6:b5:
07:a3:fb:b3:a0:e8:fd:58:a3:ed:c0:95:35:0e:24:25:6e:63:
8d:96:d2:79:02:57:eb:2a:34:72:ad:14:4d:a9:62:a2:d6:85:
c6:69:c8:24:c2:e8:55:6b:38:31:8f:a2:2b:0c:46:70:65:8d:
bf:64:79:6e:02:f9:69:ef:57:fd:d7:62:1a:12:cb:f1:9e:6f:
b3:ba:3f:87:db:41:98:59:70:59:e9:3b:61:17:b8:b0:61:ad:
a7:23:9a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:12:46 2024 by rpki-client on console-fra.rpki-client.org