Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yTmtvS9z6iRlyYoSwf2sh_aN0ls.roa
File: yTmtvS9z6iRlyYoSwf2sh_aN0ls.roa (raw, json)
Hash identifier: YkutfXbcM28OHp6kPvKvlcVgABMfdQFwa2cCy4gtEKQ=
Subject key identifier: C9:39:AD:BD:2F:73:EA:24:65:C9:8A:12:C1:FD:AC:87:F6:8D:D2:5B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802FECEEA0ED595AB9062729FE46636
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yTmtvS9z6iRlyYoSwf2sh_aN0ls.roa
Signing time: Tue 02 Jan 2024 02:31:28 +0000
ROA not before: Tue 02 Jan 2024 02:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200881
IP address blocks: 194.68.138.0/23 maxlen: 23
194.68.140.0/22 maxlen: 22
194.68.144.0/22 maxlen: 22
194.68.148.0/23 maxlen: 23
193.235.88.0/23 maxlen: 23
193.235.86.0/23 maxlen: 23
193.235.91.0/24 maxlen: 24
193.235.90.0/24 maxlen: 24
193.235.94.0/23 maxlen: 23
193.235.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:fe:ce:ea:0e:d5:95:ab:90:62:72:9f:e4:66:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c939adbd2f73ea2465c98a12c1fdac87f68dd25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:64:f5:4a:a5:9f:49:56:37:41:6d:0c:a3:f5:
46:5c:9b:26:c4:36:2e:eb:cb:14:72:99:23:b2:27:
51:44:cb:c8:dc:c2:93:d1:83:9a:ef:dd:02:8a:99:
91:7a:87:ba:ae:05:c3:64:80:49:43:08:a9:f3:47:
22:8f:b0:7d:00:c7:d8:7d:3a:6a:5c:54:e2:83:32:
16:54:37:9b:5c:4a:05:2c:d1:80:30:7d:7d:75:28:
da:5e:59:46:8c:3d:5f:93:48:f7:5f:a2:64:aa:7f:
9c:12:3f:4d:49:73:90:23:32:0c:cb:b2:1e:41:ee:
3b:47:52:47:2f:f7:50:f1:76:29:81:46:9b:d7:0a:
17:0d:da:4b:2d:b7:0b:f0:05:b7:80:67:3b:7c:2d:
82:11:40:e9:5f:4d:3b:37:11:cb:ba:e6:0f:b1:a4:
20:81:53:40:8f:9d:92:69:7e:e4:a8:b1:1d:9a:c0:
3f:e4:e2:5c:90:53:df:c9:de:ba:ee:eb:b1:d8:89:
4a:38:1a:0f:05:d8:81:0a:c9:d9:85:d8:ac:47:60:
27:8f:9c:09:34:8a:15:1f:f9:c1:6f:b0:d8:4d:ef:
32:24:3b:c4:b5:7f:0f:9a:7c:89:5a:f3:ed:53:bb:
83:d7:29:83:fb:b1:f1:77:b9:b5:56:68:d3:1e:57:
0b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:39:AD:BD:2F:73:EA:24:65:C9:8A:12:C1:FD:AC:87:F6:8D:D2:5B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/yTmtvS9z6iRlyYoSwf2sh_aN0ls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.86.0-193.235.95.255
194.68.138.0-194.68.149.255
Signature Algorithm: sha256WithRSAEncryption
90:b9:0e:0a:c0:a3:49:ae:3c:9c:15:de:48:47:b4:39:01:3e:
bc:5d:eb:a1:80:c1:a8:04:f4:1f:43:8d:1b:45:78:95:22:fd:
a7:65:72:55:56:e0:f2:20:42:20:78:98:07:63:ca:dc:1c:64:
78:f5:01:0a:e5:09:3b:83:e9:a9:04:07:9a:98:1a:ef:9d:ee:
ef:be:3c:3b:14:e0:78:ab:1b:ec:3b:b4:36:fa:6f:62:51:20:
0d:8a:f8:4b:cf:7d:db:e7:62:48:04:79:b6:c8:46:c0:72:83:
3d:6f:99:6a:27:c4:c7:4d:71:8f:bd:d0:98:23:a2:fe:d0:7f:
d8:d6:01:ef:bf:61:be:50:58:f0:75:9a:e1:79:5b:9f:4c:7d:
b5:25:af:cf:eb:c2:8c:87:6d:4c:73:55:f3:20:ff:d4:17:37:
da:e9:0f:95:26:53:01:ae:80:a5:5e:fc:45:b4:4c:b4:b7:7f:
88:46:e1:66:6e:c0:c6:49:0d:39:cb:e9:1f:e0:e2:e3:87:c0:
7b:7d:f7:4b:6b:ff:e3:dc:bd:d5:b4:f6:ed:55:ae:e8:f6:84:
7f:87:2b:d2:ff:08:82:80:3b:42:9e:40:27:8a:3d:98:ed:b0:
c2:91:fe:41:74:82:63:e7:8e:72:a3:31:70:8b:ab:4e:f3:76:
54:ae:33:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 18:19:34 2024 by rpki-client on console-fra.rpki-client.org