Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-Yb9iEoFvU38p32nxCWt01tFk8o.roa
File: 1-Yb9iEoFvU38p32nxCWt01tFk8o.roa (raw, json)
Hash identifier: hq6pmdBPil2VAb6NyScfSpPOZxfyPXwoA1RT/ZqM2VI=
Subject key identifier: F9:86:FD:88:4A:05:BD:4D:FC:A7:7D:A7:C4:25:AD:D3:5B:45:93:CA
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802E4FAD2E0FC2B93EFBCEF459D11CD
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-Yb9iEoFvU38p32nxCWt01tFk8o.roa
Signing time: Tue 02 Jan 2024 02:31:21 +0000
ROA not before: Tue 02 Jan 2024 02:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29217
IP address blocks: 194.68.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:e4:fa:d2:e0:fc:2b:93:ef:bc:ef:45:9d:11:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f986fd884a05bd4dfca77da7c425add35b4593ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:f5:c3:4a:44:cd:e3:20:7a:09:be:a8:de:c9:
b0:c0:97:bd:f1:fc:9b:e0:58:b4:52:1f:dd:9d:8c:
b8:db:49:e5:76:76:0d:04:2e:4a:a6:da:93:95:e5:
f1:3a:d4:ca:71:d0:b2:b5:9a:02:16:c8:d2:c2:f5:
b7:0a:46:47:7e:a0:67:d3:ab:ed:29:c5:65:f6:75:
d9:b8:a3:89:6d:fe:8e:1d:73:7c:d4:41:27:b8:2f:
32:89:f5:ba:53:a5:3c:fd:11:63:b2:d8:f3:6f:28:
ba:8c:2f:db:0e:97:57:2f:c9:dc:e9:e6:29:89:c3:
1c:e7:58:ff:7d:38:ee:52:86:b6:f0:27:08:df:87:
fe:93:32:e9:f0:a4:0b:c1:20:7a:4d:04:09:ec:76:
50:cf:79:80:a9:f2:9f:d7:15:06:f8:e4:b4:15:df:
66:7c:e7:51:19:5d:89:71:c9:ca:4a:3b:90:08:42:
69:52:4e:3d:4f:db:c6:cc:c1:53:42:39:8c:3c:c8:
54:24:02:9e:ba:36:32:16:06:62:6e:38:ed:28:0c:
0b:db:60:f7:4d:46:68:53:eb:53:7a:4b:02:f9:a1:
59:9d:ac:19:53:d4:eb:27:0c:66:65:bf:01:b0:ac:
e0:89:6b:2f:bb:4c:44:43:5b:bb:22:15:73:09:3e:
9b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:86:FD:88:4A:05:BD:4D:FC:A7:7D:A7:C4:25:AD:D3:5B:45:93:CA
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-Yb9iEoFvU38p32nxCWt01tFk8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.78.0/24
Signature Algorithm: sha256WithRSAEncryption
56:c2:bb:aa:01:fb:7a:80:e5:2f:88:f0:5c:15:81:4f:bb:ef:
8d:28:53:e0:50:a3:a6:38:7e:fb:d2:8c:2f:c1:66:f3:a5:71:
4c:6f:86:89:28:9d:be:0b:03:46:61:5b:07:44:d8:2e:b6:78:
0b:64:47:6f:02:12:3f:6e:af:97:c8:80:4f:bf:15:c1:9a:a3:
ed:c5:69:50:5a:4d:1b:50:09:7e:1e:a7:e1:09:74:48:44:98:
46:0e:43:3f:54:20:75:ca:47:12:03:be:f8:0a:ab:b2:b2:0a:
cb:47:f0:1c:45:48:f5:e1:67:62:4d:61:b5:d5:ac:69:f9:83:
a9:6d:a2:b8:1a:ac:86:c2:8e:fd:25:b4:81:3c:e9:87:a8:e9:
d5:f0:ce:71:c7:ea:ab:19:bf:91:e0:30:cb:95:8a:ae:40:88:
49:df:25:ab:c5:36:b8:5c:7c:ae:ed:4e:ae:3f:d1:d0:d6:7f:
2c:d5:0b:2b:a6:cf:ad:32:1f:24:e1:b4:4a:8a:e8:99:db:34:
a0:18:73:8c:20:f2:65:e5:a6:b6:0c:a6:81:bf:ca:e2:c5:0c:
fc:d8:36:85:35:e8:63:69:2c:cf:d8:40:41:ce:70:55:2f:07:
ce:92:07:28:7d:8c:11:7d:70:b8:f9:64:d9:99:a5:f0:73:90:
eb:4d:40:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:56:11 2024 by rpki-client on console-fra.rpki-client.org