Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XYz1qVRByK4nDKq_Ryx_pkq6fVM.roa
File: XYz1qVRByK4nDKq_Ryx_pkq6fVM.roa (raw, json)
Hash identifier: bbCRdUlStzL7SlP8U77D1Uzi2FaXYyOWuRtRddJqB+Y=
Subject key identifier: 5D:8C:F5:A9:54:41:C8:AE:27:0C:AA:BF:47:2C:7F:A6:4A:BA:7D:53
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018DD4FEDAFB2BB26AB1E2E8E61BAE69D709
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XYz1qVRByK4nDKq_Ryx_pkq6fVM.roa
Signing time: Fri 23 Feb 2024 08:04:48 +0000
ROA not before: Fri 23 Feb 2024 08:04:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56946
IP address blocks: 193.181.52.0/22 maxlen: 22
193.181.52.0/24 maxlen: 24
193.181.53.0/24 maxlen: 24
193.181.54.0/24 maxlen: 24
193.181.55.0/24 maxlen: 24
193.235.198.0/23 maxlen: 23
193.235.198.0/24 maxlen: 24
193.235.199.0/24 maxlen: 24
194.103.88.0/24 maxlen: 24
194.103.134.0/23 maxlen: 23
194.103.134.0/24 maxlen: 24
194.103.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:d4:fe:da:fb:2b:b2:6a:b1:e2:e8:e6:1b:ae:69:d7:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 23 08:04:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d8cf5a95441c8ae270caabf472c7fa64aba7d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6c:40:4b:9b:2e:83:94:92:41:6a:c6:49:73:
10:71:0f:46:08:01:9a:86:d5:c0:3b:55:79:3e:66:
47:dc:8a:11:c1:ff:2a:0a:9c:bf:5d:42:5f:2d:29:
15:8b:70:a5:97:d3:66:8d:31:0c:02:d6:35:5b:df:
ea:22:3f:ec:57:39:98:41:ce:98:d9:91:ae:01:61:
51:41:08:c2:ca:c7:ce:b4:2f:9f:61:e7:4a:1d:4e:
82:9a:d4:c1:2a:2d:82:43:af:de:3c:4e:16:3e:e6:
02:80:4c:1b:94:22:d6:7b:3a:55:9f:c5:96:e5:5c:
fe:0c:26:c8:1d:b4:4e:9c:97:90:40:55:9f:a0:23:
05:68:a3:18:0a:89:85:22:c1:9d:c8:a2:a8:bb:62:
51:92:e8:f4:69:c4:b4:82:b9:d7:32:b8:cc:db:b9:
05:50:3f:e1:a9:17:d5:aa:4d:21:2e:b6:7b:dc:4e:
0f:85:a3:d3:d2:9e:32:34:1e:3b:88:1c:13:a3:ef:
83:f7:cd:e0:0f:6d:a4:13:88:38:b3:8e:9e:3f:03:
3d:8d:02:7a:7d:83:9a:4a:e2:37:90:f7:da:24:72:
b6:41:a3:53:4b:06:56:61:51:4b:b1:81:b3:5a:b3:
de:9a:ae:11:01:18:b3:5d:48:3c:74:26:20:e3:7e:
a7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8C:F5:A9:54:41:C8:AE:27:0C:AA:BF:47:2C:7F:A6:4A:BA:7D:53
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XYz1qVRByK4nDKq_Ryx_pkq6fVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.52.0/22
193.235.198.0/23
194.103.88.0/24
194.103.134.0/23
Signature Algorithm: sha256WithRSAEncryption
58:3c:8e:3f:a7:7a:31:12:f4:21:e1:7d:8b:77:5a:72:03:8c:
0f:fc:b1:eb:78:31:d4:ba:39:16:c3:a6:d7:8c:ae:c9:a2:8d:
5a:c5:04:89:2d:98:3d:b3:e9:e0:0e:95:22:3e:53:c7:43:94:
8d:7c:df:ec:ea:da:34:55:a7:ee:6d:f5:2e:c3:4d:dd:5f:cb:
65:01:6f:2f:ba:72:dd:1f:17:c5:2c:db:ad:f3:f0:3d:91:da:
50:86:20:51:a6:af:51:81:0a:bf:de:dc:e0:7f:01:f7:3e:2b:
11:62:78:1e:c4:e1:fa:05:a5:d0:1c:34:04:19:7d:45:f8:ac:
81:1e:c0:d8:26:87:4b:b1:b0:19:b7:b9:43:67:02:84:f4:cb:
80:23:9e:2e:55:e2:24:15:e0:7a:c7:a4:50:b2:54:58:b8:9e:
0e:eb:33:03:e1:95:72:3b:29:77:72:22:95:93:c8:ec:01:db:
4f:a4:eb:33:90:82:ab:6f:32:02:3a:6f:72:72:3c:4b:09:a7:
2d:78:d3:f3:6c:09:a7:4f:35:5d:03:93:46:0a:32:60:c4:29:
e2:fb:0d:28:b5:d6:a5:bd:79:cb:e1:40:83:f4:25:2a:a9:96:
01:27:dd:1a:51:f9:82:b2:de:4b:8e:23:2e:bd:f2:eb:48:ea:
9f:8f:ff:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:56:11 2024 by rpki-client on console-fra.rpki-client.org