Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/V4u1kNzhZEzJl_3zABa37339yc0.roa
File: V4u1kNzhZEzJl_3zABa37339yc0.roa (raw, json)
Hash identifier: Maybll12Bie3hYf1bAh/0+8D2Hu+qIpOlakSpPUBWBg=
Subject key identifier: 57:8B:B5:90:DC:E1:64:4C:C9:97:FD:F3:00:16:B7:EF:7D:FD:C9:CD
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC8030783FABA13818C0DC0E45AD646BF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/V4u1kNzhZEzJl_3zABa37339yc0.roa
Signing time: Tue 02 Jan 2024 02:31:30 +0000
ROA not before: Tue 02 Jan 2024 02:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209578
IP address blocks: 193.180.64.0/21 maxlen: 32
193.182.96.0/21 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:07:83:fa:ba:13:81:8c:0d:c0:e4:5a:d6:46:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=578bb590dce1644cc997fdf30016b7ef7dfdc9cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3b:78:c0:64:24:cf:9c:5d:7c:f9:c8:11:a9:
aa:7c:a1:62:87:f4:7e:34:fa:63:ef:78:44:ee:6a:
03:29:1c:d4:82:21:fc:7a:6f:e5:8a:4f:8a:63:d3:
97:bd:de:9b:36:7f:8c:f3:bf:6c:09:c4:8a:94:ee:
3e:4a:e5:a8:97:6e:82:46:bc:ce:92:24:78:ae:2b:
5e:47:e2:74:f0:93:fc:54:81:6e:de:de:b3:b3:95:
81:b0:36:00:69:07:b4:33:e8:58:cf:57:a0:70:a5:
66:98:ae:05:86:f9:cd:c3:c4:79:3d:d2:6e:50:23:
71:56:18:44:ee:c0:a4:db:6f:fd:0e:90:3d:d3:09:
b4:c1:dc:30:d0:ef:f6:b1:bb:7e:2f:2a:99:ac:c0:
b8:b7:da:ac:de:e7:b5:bb:19:a4:97:14:c2:46:b1:
de:4b:e8:c7:55:d6:e6:4d:74:de:04:b7:31:4c:9c:
e5:cc:21:23:cf:42:b7:d1:28:2d:71:75:86:53:ed:
fb:82:e6:17:b6:92:ec:cb:eb:40:a1:6e:4f:56:59:
e3:61:b0:f3:1a:1f:26:34:cb:84:12:84:6d:8b:d3:
4e:40:4b:22:eb:f6:65:13:02:ef:5c:9b:f3:51:bd:
44:de:b7:92:31:f1:36:a8:bd:66:55:63:a2:f1:ae:
2d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:8B:B5:90:DC:E1:64:4C:C9:97:FD:F3:00:16:B7:EF:7D:FD:C9:CD
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/V4u1kNzhZEzJl_3zABa37339yc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.64.0/21
193.182.96.0/21
Signature Algorithm: sha256WithRSAEncryption
09:a3:39:46:bc:db:d6:e3:6b:ce:de:eb:a6:57:e9:99:88:25:
70:77:05:a5:d6:2e:f7:57:38:c0:ff:4a:23:b6:08:d3:bc:64:
a4:79:65:ea:68:9d:10:4f:89:2e:d3:56:5a:c1:02:ff:26:28:
28:02:41:64:8e:ec:5f:28:05:18:03:7a:48:49:25:ad:42:29:
f0:14:ba:86:48:c4:f3:d5:5f:d5:a8:e3:02:dd:b7:d6:a4:e7:
55:0b:a2:e1:87:40:95:27:fe:73:08:ab:12:81:b7:f6:87:09:
bd:07:57:99:8b:2e:8c:a5:eb:fd:21:89:6d:f4:ff:0d:18:9b:
d9:92:c4:64:44:5c:18:41:b2:da:02:7a:42:af:2a:ff:bc:d1:
b2:78:31:90:b1:c2:ac:17:20:83:91:74:f3:01:32:26:d6:8f:
e9:9c:90:52:b2:57:74:d1:07:b6:9e:7a:a2:50:08:5c:80:47:
49:52:06:04:c1:34:b0:08:e6:b9:a4:e3:a7:f6:0a:b2:62:4e:
9e:34:e2:35:86:13:61:1c:f6:11:07:f6:bf:6e:48:b6:ab:85:
9e:ff:e5:8f:2f:95:5b:a9:e1:9c:02:43:17:42:2f:94:52:fd:
e0:13:6d:f7:80:e1:89:78:74:03:e1:e0:10:c6:48:8a:06:37:
1e:8b:88:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:56:11 2024 by rpki-client on console-fra.rpki-client.org