Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lWf-c9Z7PdgH_UqsdSZxM6R2cP8.roa
File: lWf-c9Z7PdgH_UqsdSZxM6R2cP8.roa (raw, json)
Hash identifier: 3+8rUYdG/t2IYR8l8ov/0FZKNup9NBbZQu4IMB4wMEE=
Subject key identifier: 95:67:FE:73:D6:7B:3D:D8:07:FD:4A:AC:75:26:71:33:A4:76:70:FF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018DEF026649CAFF1AF9B116DCA79310521B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lWf-c9Z7PdgH_UqsdSZxM6R2cP8.roa
Signing time: Wed 28 Feb 2024 09:18:48 +0000
ROA not before: Wed 28 Feb 2024 09:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30821
IP address blocks: 192.121.168.0/24 maxlen: 24
193.183.144.0/24 maxlen: 24
193.234.233.0/24 maxlen: 24
194.103.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ef:02:66:49:ca:ff:1a:f9:b1:16:dc:a7:93:10:52:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 28 09:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9567fe73d67b3dd807fd4aac75267133a47670ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4b:04:fb:61:0a:48:57:d8:61:ce:b5:32:7d:
cc:1b:95:5f:cb:f0:45:86:07:08:b0:e8:93:74:6e:
fb:c2:cf:04:fe:f4:62:c2:14:a0:48:68:3d:7a:b4:
94:2a:5b:8d:d3:70:05:b2:e7:e4:e2:87:33:b7:fd:
01:34:03:65:bf:77:9a:42:81:fd:17:1c:8f:f3:5a:
a6:92:99:22:f5:ed:1d:5f:1d:bf:65:a9:4c:e6:b3:
fd:17:3b:f6:9f:8a:0f:40:1a:c0:88:44:f9:36:b8:
38:2b:cf:ef:79:f1:38:e6:01:83:67:93:0a:af:5a:
02:a1:97:2d:3f:d6:6e:06:79:da:d8:6c:4f:63:f3:
12:1d:7c:32:1b:d3:15:7b:54:3f:63:a1:c6:4b:38:
6f:9c:0a:70:74:c6:f9:36:df:38:e6:59:72:a4:de:
d2:9b:29:74:fb:a3:ba:3c:6e:7a:cf:ce:1e:45:43:
60:2a:cf:bc:70:6a:cf:51:72:b7:d2:86:4c:32:22:
0f:d0:f0:69:ec:5b:13:ad:68:bb:8d:d9:39:80:ec:
0d:1d:02:0f:9e:06:38:88:5b:ae:0c:38:f7:89:d6:
7d:9c:9e:c0:40:46:42:47:5f:52:76:82:98:c9:f6:
f8:77:4e:45:f9:1e:38:a0:3f:50:cd:4d:61:05:7b:
f4:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:67:FE:73:D6:7B:3D:D8:07:FD:4A:AC:75:26:71:33:A4:76:70:FF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/lWf-c9Z7PdgH_UqsdSZxM6R2cP8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.168.0/24
193.183.144.0/24
193.234.233.0/24
194.103.63.0/24
Signature Algorithm: sha256WithRSAEncryption
23:33:95:35:fd:c5:d0:46:a2:e7:db:d4:5b:50:ab:a5:8d:4c:
a4:9c:cc:3c:aa:c3:cb:05:d7:d5:23:af:d9:6a:61:87:58:c0:
20:34:9f:5d:5a:0f:4e:80:df:c0:a9:28:ef:16:92:32:2b:ab:
b7:1b:c1:34:36:c9:da:8a:52:31:c6:78:6a:5b:40:93:ab:7c:
0d:79:2b:9f:e4:1e:e4:ce:b6:af:bb:8b:ba:34:53:34:db:ce:
fe:18:12:e4:bf:5b:38:7c:32:5b:de:44:67:31:80:72:a3:2d:
c6:0b:68:07:2f:2c:d0:99:a8:b3:7f:d4:f2:1d:d6:29:11:52:
92:a5:5a:cc:10:79:bf:28:b7:9d:d6:5b:ac:08:90:dc:11:28:
b2:ad:45:eb:1d:6f:62:9c:3b:b5:5b:a4:4e:de:fc:37:cc:3e:
45:b4:0b:c8:ec:c8:23:71:17:2f:4b:3c:1b:97:e9:17:f5:c5:
17:ef:02:d3:73:12:c8:58:92:cd:27:9b:36:d5:7b:03:97:a8:
65:3e:90:62:6d:9f:86:c2:9e:e3:38:cd:8e:15:fb:7a:ac:7c:
dc:2b:fa:71:64:37:7f:e5:59:71:31:e7:3f:79:61:70:f5:c6:
24:7f:80:75:2a:0a:6d:df:eb:32:d0:fc:a0:78:d2:f3:62:2a:
db:75:7a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 18:19:33 2024 by rpki-client on console-fra.rpki-client.org