Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XzTtaYYd_8Oo6keCDk2TUMXh9k0.roa
File: XzTtaYYd_8Oo6keCDk2TUMXh9k0.roa (raw, json)
Hash identifier: c0NmjK4JRi6+tyAtTjqtL8gdq8NBH/mbI1QBZJAOzvQ=
Subject key identifier: 5F:34:ED:69:86:1D:FF:C3:A8:EA:47:82:0E:4D:93:50:C5:E1:F6:4D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802E9DCF32743F867C68A716C9ED700
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XzTtaYYd_8Oo6keCDk2TUMXh9k0.roa
Signing time: Tue 02 Jan 2024 02:31:23 +0000
ROA not before: Tue 02 Jan 2024 02:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39840
IP address blocks: 192.36.135.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:e9:dc:f3:27:43:f8:67:c6:8a:71:6c:9e:d7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5f34ed69861dffc3a8ea47820e4d9350c5e1f64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:96:b0:f9:ad:3e:14:9f:f9:19:e4:c1:7a:
2d:46:46:45:33:e0:91:5c:ad:0e:95:2c:53:90:a9:
70:0b:9a:57:75:d8:93:65:b9:19:ee:8d:b9:0e:eb:
03:1b:15:10:b3:d9:f7:af:2f:44:05:61:24:20:37:
2a:6a:b0:ac:d7:fc:9c:18:68:9a:c9:ca:dc:6d:1e:
3d:f2:61:b4:75:3e:67:de:c1:3f:a4:ec:d5:06:04:
86:d0:af:e7:0f:82:a2:99:cc:92:bf:91:b3:95:16:
b3:19:1e:9d:01:66:e8:08:89:20:44:51:1a:67:1d:
2a:00:ae:c0:63:12:39:52:41:ec:ac:0c:b4:0b:4f:
38:70:98:41:a7:37:8e:a2:bf:a7:3e:9b:48:0e:6d:
cb:a1:df:15:b2:83:d7:e9:da:93:c1:da:a0:48:fb:
97:14:d3:86:8b:55:ed:e0:a9:ac:10:f5:c0:44:53:
dc:86:c8:ab:57:53:07:39:63:5a:e4:c0:1a:51:04:
7f:90:d1:1f:ba:a6:6a:06:71:1e:90:ed:37:96:37:
94:04:ab:92:d1:06:e2:44:1d:5a:d1:79:5a:01:76:
b6:c2:37:b9:bc:23:69:ef:3d:d3:3b:fd:83:97:cb:
2d:d7:f1:c0:f6:c7:b7:9d:f4:0a:17:4c:c7:a3:aa:
1f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:34:ED:69:86:1D:FF:C3:A8:EA:47:82:0E:4D:93:50:C5:E1:F6:4D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/XzTtaYYd_8Oo6keCDk2TUMXh9k0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.135.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:ec:ca:79:75:10:4c:6e:f3:75:dc:73:bc:b0:13:08:89:cc:
e0:eb:d3:4e:3f:9a:bc:e7:99:9c:20:5c:3b:69:9d:dc:2b:54:
77:f3:69:99:dd:89:12:28:42:f1:fd:56:f9:35:88:02:11:c5:
6c:c1:aa:63:b8:38:f7:d0:22:0f:a8:91:09:4c:3b:34:bc:a3:
6c:de:21:ba:7e:b9:e8:57:ee:c5:e1:80:51:6c:cf:44:86:4b:
e5:7a:ec:2a:0d:4f:f7:b7:cf:84:bc:6d:d6:55:09:db:1c:02:
31:5e:f7:fc:a2:a2:fe:12:62:79:bb:7d:a9:fd:68:1f:cc:8b:
13:84:14:70:7f:ff:ee:f4:8f:77:ed:ab:3e:46:b5:f5:3f:79:
88:b4:24:07:59:93:97:f4:ab:ed:fa:d4:ff:a1:f8:08:46:db:
71:07:bf:b0:26:15:97:15:a0:77:9e:73:52:23:13:35:4a:c9:
d4:6c:94:ac:ba:4e:62:01:91:4b:c0:3e:7f:28:84:d5:9a:bd:
a2:96:b2:1e:46:dc:9c:1d:21:d6:45:5b:a3:21:08:7c:e4:40:
d9:d9:31:7e:9f:2c:a6:9c:4d:b3:d9:4c:ec:68:d1:f1:35:b2:
fa:d3:9e:5b:a2:ea:41:bf:91:9d:9f:3a:80:d7:08:0d:be:82:
42:48:2c:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAunc8ydD+GfGinFsntcAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1ZjM0ZWQ2OTg2MWRmZmMzYThlYTQ3ODIwZTRkOTM1MGM1ZTFmNjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCuWsPmtPhSf+RnkwXotRkZFM+CR
XK0OlSxTkKlwC5pXddiTZbkZ7o25DusDGxUQs9n3ry9EBWEkIDcqarCs1/ycGGia
ycrcbR498mG0dT5n3sE/pOzVBgSG0K/nD4KimcySv5GzlRazGR6dAWboCIkgRFEa
Zx0qAK7AYxI5UkHsrAy0C084cJhBpzeOor+nPptIDm3Lod8VsoPX6dqTwdqgSPuX
FNOGi1Xt4KmsEPXARFPchsirV1MHOWNa5MAaUQR/kNEfuqZqBnEekO03ljeUBKuS
0QbiRB1a0XlaAXa2wje5vCNp7z3TO/2Dl8st1/HA9se3nfQKF0zHo6ofywIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFF807WmGHf/DqOpHgg5Nk1DF4fZNMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvWHpUdGFZWWRfOE9vNmtlQ0RrMlRVTVhoOWswLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCSHMA0G
CSqGSIb3DQEBCwUAA4IBAQDE7Mp5dRBMbvN13HO8sBMIiczg69NOP5q855mcIFw7
aZ3cK1R382mZ3YkSKELx/Vb5NYgCEcVswapjuDj30CIPqJEJTDs0vKNs3iG6frno
V+7F4YBRbM9EhkvleuwqDU/3t8+EvG3WVQnbHAIxXvf8oqL+EmJ5u32p/WgfzIsT
hBRwf//u9I937as+RrX1P3mItCQHWZOX9Kvt+tT/ofgIRttxB7+wJhWXFaB3nnNS
IxM1SsnUbJSsuk5iAZFLwD5/KITVmr2ilrIeRtycHSHWRVujIQh85EDZ2TF+nyym
nE2z2UzsaNHxNbL6055boupBv5GdnzqA1wgNvoJCSCxN
-----END CERTIFICATE-----
Generated at Thu May 23 01:56:11 2024 by rpki-client on console-fra.rpki-client.org