Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DnnwkvjJmo3UKURw5dntgbPyBRc.roa
File: DnnwkvjJmo3UKURw5dntgbPyBRc.roa (raw, json)
Hash identifier: EnAIUyuegYNDzJ9bJ8FGkNFq75SaU6/h7URYND99JGM=
Subject key identifier: 0E:79:F0:92:F8:C9:9A:8D:D4:29:44:70:E5:D9:ED:81:B3:F2:05:17
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802D8F17A7A0C11DF624057B2404576
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DnnwkvjJmo3UKURw5dntgbPyBRc.roa
Signing time: Tue 02 Jan 2024 02:31:18 +0000
ROA not before: Tue 02 Jan 2024 02:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2859
IP address blocks: 192.121.121.0/24 maxlen: 24
194.68.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d8:f1:7a:7a:0c:11:df:62:40:57:b2:40:45:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0e79f092f8c99a8dd4294470e5d9ed81b3f20517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:ad:a6:63:95:93:d4:8f:85:52:75:57:b6:
51:be:bd:12:28:15:4e:03:d9:d4:98:25:b1:9d:29:
01:ee:74:73:e9:ae:14:79:c3:7c:54:25:52:ff:a1:
23:29:e0:ca:04:f2:8d:e0:b9:5e:21:e0:d1:75:bb:
94:94:f9:b7:f1:b8:ba:00:83:34:cb:7f:38:c3:94:
4b:77:c7:3d:45:2d:fe:2b:60:d8:f6:6f:b0:ba:e0:
61:4c:06:b7:4a:76:1d:05:d6:96:98:0e:ad:bd:f7:
94:fa:53:fd:2d:6e:dd:00:75:d1:90:97:d6:be:a2:
da:a5:e9:45:c4:1e:c1:9f:f1:9b:0a:6e:29:79:21:
f4:fa:ab:fd:73:0f:12:ef:21:e0:19:9a:81:4d:54:
52:1c:1d:1b:e2:0c:ec:1b:e6:dd:d1:5b:07:cf:02:
f5:26:88:16:83:a8:d7:20:fa:c7:30:c5:ec:8d:9c:
6d:29:d9:8f:80:ae:6c:34:80:49:25:10:5f:22:3b:
59:21:43:36:6b:3e:fd:f0:81:05:98:57:2f:56:e6:
3a:16:9a:3a:3e:de:f2:76:68:cb:59:64:9a:3f:24:
19:cd:eb:03:68:4a:3b:03:20:f3:d4:61:2c:73:6a:
0f:f0:71:b5:04:71:fe:75:bd:4d:80:25:0d:9a:69:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:79:F0:92:F8:C9:9A:8D:D4:29:44:70:E5:D9:ED:81:B3:F2:05:17
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/DnnwkvjJmo3UKURw5dntgbPyBRc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.121.0/24
194.68.230.0/24
Signature Algorithm: sha256WithRSAEncryption
19:2e:e0:ae:e2:f0:aa:79:98:82:a6:97:0a:7e:fb:f3:4f:bb:
cf:5f:c3:5a:0d:69:f7:79:ef:e1:93:f8:27:fa:93:01:6a:47:
cc:7e:bf:7c:00:1a:5f:62:9d:31:92:c5:84:44:02:5e:a1:45:
4f:88:21:ab:80:64:45:b4:76:95:89:69:d9:74:c6:9c:7b:6e:
ba:5e:47:c7:60:00:56:01:f2:ed:50:61:ba:46:a3:53:45:d1:
e6:9c:e7:3b:8e:40:3e:4d:90:f2:56:07:c4:b0:1e:9f:ed:2b:
80:50:53:67:10:19:4c:82:2b:b0:a5:fa:95:8b:d1:eb:28:21:
85:62:bb:88:67:60:cf:88:0d:08:9d:a0:aa:f6:c4:ac:bc:8a:
1c:cb:8a:ab:7c:ee:e2:d6:7c:20:a9:99:80:15:68:96:15:02:
83:94:97:ee:40:ee:ff:10:8d:c9:f3:7e:1d:7a:bc:fc:1d:55:
69:e6:ee:6d:59:f5:2f:42:b3:fb:23:6f:41:39:11:d3:37:00:
d7:65:58:ce:cb:c7:dd:ac:64:91:2d:87:8f:2e:2b:7a:3a:d3:
b7:11:eb:1d:bb:22:ec:6c:b9:a5:41:b6:a7:04:0c:1b:31:13:
36:6d:49:f1:76:e9:df:48:1c:11:f1:9f:c3:9c:94:87:12:e1:
6d:a6:95:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:56:11 2024 by rpki-client on console-fra.rpki-client.org