Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tywZ5CzNmeCP09-47kYLiPDgyG4.roa
File: tywZ5CzNmeCP09-47kYLiPDgyG4.roa (raw, json)
Hash identifier: MXRRw4lMTZyEZ+0MBjEMwTppzYWakrvQVZ45RuuHk1I=
Subject key identifier: B7:2C:19:E4:2C:CD:99:E0:8F:D3:DF:B8:EE:46:0B:88:F0:E0:C8:6E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018DC17C430CC2ABEC6CAC62A5B2BF607452
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tywZ5CzNmeCP09-47kYLiPDgyG4.roa
Signing time: Mon 19 Feb 2024 13:09:22 +0000
ROA not before: Mon 19 Feb 2024 13:09:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197425
IP address blocks: 192.176.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:7c:43:0c:c2:ab:ec:6c:ac:62:a5:b2:bf:60:74:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 19 13:09:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b72c19e42ccd99e08fd3dfb8ee460b88f0e0c86e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:78:4e:ea:58:af:2a:bc:38:ea:c6:6e:39:b2:
3c:68:51:95:c7:01:b2:2e:7f:77:6f:8a:ef:0f:36:
aa:6d:5e:09:02:11:68:ba:fe:77:77:51:e1:16:04:
20:db:db:0c:ff:94:20:d2:e2:37:21:f2:38:c0:7d:
ba:69:f3:7f:c9:22:48:37:ba:60:78:82:42:20:b2:
49:48:d7:73:28:2f:04:cc:b2:99:5e:d8:c6:cb:2c:
d8:f9:8d:fa:aa:a8:77:db:a3:97:c5:12:7f:fd:b9:
35:68:f7:d7:57:03:17:ad:5f:df:2f:fb:be:58:0a:
5e:5d:17:e9:44:b1:bf:9c:3f:97:e9:27:8a:58:fe:
db:fe:21:b2:0d:83:e8:bc:8a:bd:57:88:25:45:3c:
c3:42:eb:72:12:17:89:1b:af:29:cd:6f:5a:00:9c:
ab:26:5a:cd:64:c7:3b:f8:19:58:f9:77:ca:eb:34:
7a:23:25:4a:8f:8b:93:de:5a:64:fa:3e:2d:3c:46:
c6:ca:6d:fd:9a:2b:33:a1:a0:aa:7c:20:78:dd:c9:
7e:63:bb:8d:b5:cf:75:6d:9b:59:67:a9:17:97:ea:
0b:69:b7:27:88:8c:3e:e3:e2:34:01:22:c3:c5:f8:
89:27:7f:06:52:26:ee:72:f8:2b:33:5a:53:43:45:
1e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:2C:19:E4:2C:CD:99:E0:8F:D3:DF:B8:EE:46:0B:88:F0:E0:C8:6E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tywZ5CzNmeCP09-47kYLiPDgyG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.176.33.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:a5:d8:a1:e0:a5:dd:42:ad:c2:52:d7:e5:03:77:f2:a6:b0:
60:d5:6c:b2:34:0d:ce:f5:3b:5f:dc:45:c4:74:47:60:e4:11:
62:28:c7:21:0d:c6:20:fa:46:fe:41:09:e6:72:ed:e3:d2:4b:
12:13:9f:83:65:3a:b6:a5:31:67:36:ef:d5:59:1e:c6:fd:06:
b5:7b:31:ea:a4:9a:c4:83:42:55:e2:55:9a:ff:98:6f:09:12:
c1:17:63:8b:eb:0f:d5:23:99:85:d5:cf:a0:d7:9c:ef:b9:12:
3d:b5:54:0d:6d:10:47:01:1c:9c:0b:f6:39:57:63:b5:e4:d0:
5a:76:f7:e1:f6:60:5c:03:34:ad:9a:3c:4a:25:86:3d:d0:9b:
92:94:b8:28:e5:9c:cf:05:2e:68:e0:50:60:4c:3e:7a:e9:18:
bd:2a:0c:15:94:16:d2:90:2b:e4:6a:4a:cb:8b:7f:af:21:2d:
46:74:0f:4a:6f:e3:87:8f:0a:32:b1:83:90:5f:4c:b5:78:d8:
70:02:78:31:6a:1f:c7:fe:e8:60:b2:08:52:99:ae:21:c6:4a:
25:94:5c:f4:69:3e:0e:f8:49:d0:32:97:dc:e5:ce:62:a2:ed:
91:a7:63:1c:07:dd:80:67:de:e8:e9:2c:62:a6:1d:ba:72:6e:
a2:66:2d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 4 04:59:09 2024 by rpki-client on console-fra.rpki-client.org