Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ITxYJ3rGkXov2FlxVZSWzuR2CuU.roa
File: ITxYJ3rGkXov2FlxVZSWzuR2CuU.roa (raw, json)
Hash identifier: 89FlbDmslpVm64J2Y9BperN3pd9I1JvJvFQgj+SGwi4=
Subject key identifier: 21:3C:58:27:7A:C6:91:7A:2F:D8:59:71:55:94:96:CE:E4:76:0A:E5
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018FBF6474955BD17AC8DAA1ED42A2E4C55D
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ITxYJ3rGkXov2FlxVZSWzuR2CuU.roa
Signing time: Tue 28 May 2024 13:29:42 +0000
ROA not before: Tue 28 May 2024 13:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215088
IP address blocks: 145.102.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:bf:64:74:95:5b:d1:7a:c8:da:a1:ed:42:a2:e4:c5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: May 28 13:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=213c58277ac6917a2fd85971559496cee4760ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:32:40:89:a4:b2:e3:70:5a:59:f2:ce:4f:cf:
4e:94:c3:36:7c:e4:27:7f:4c:0a:82:a1:44:57:5e:
82:29:9b:67:38:27:ac:b4:c7:4b:96:9b:ea:61:3f:
54:81:63:44:38:5f:0c:8e:7a:a8:fc:a3:34:23:0e:
3f:f6:5a:e5:8d:96:08:08:f7:6f:89:87:db:ad:e9:
9a:bd:66:47:0d:a3:48:06:23:76:06:41:17:d6:3f:
d8:72:8c:2f:e6:04:d5:7f:a1:a3:30:7c:64:1b:d8:
3b:10:1f:70:1f:96:41:0a:f9:d8:bb:af:3d:70:5c:
7a:7e:cd:d5:b8:a4:c1:5f:d3:39:df:cd:38:14:21:
5b:e1:05:30:04:aa:d1:95:e4:59:b2:ce:5a:2b:a8:
a6:b0:cd:56:a5:44:e7:cd:e5:8f:10:0d:1a:c7:07:
ec:f2:23:5b:e2:1a:03:9b:8f:7f:c3:6f:da:f1:ce:
ce:5a:c2:ac:fc:51:72:e7:18:b8:3e:f8:53:fb:2c:
80:ab:e2:6b:c9:a6:2d:a9:a6:b5:66:1e:a8:64:4e:
da:2c:67:4d:b5:62:1a:a7:60:82:9d:56:bb:81:bb:
69:24:7c:d3:cd:56:ba:4a:37:3d:ce:64:63:64:82:
59:15:78:1c:20:df:8c:6b:c4:1c:67:52:c8:79:b8:
59:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3C:58:27:7A:C6:91:7A:2F:D8:59:71:55:94:96:CE:E4:76:0A:E5
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/ITxYJ3rGkXov2FlxVZSWzuR2CuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.102.0.0/23
Signature Algorithm: sha256WithRSAEncryption
88:f5:c8:3a:64:e4:c0:f4:88:46:3b:bd:66:dd:29:76:1d:87:
fc:80:80:59:f0:e7:85:1a:82:ea:71:96:e1:a1:74:c4:c9:5a:
d5:77:6d:86:0d:d1:2a:5c:b7:cc:0b:ae:6f:6e:fb:64:01:ac:
36:5b:aa:bc:4c:67:99:38:5e:70:2a:00:30:7b:6f:98:aa:3d:
b7:8b:e8:a4:5c:8e:3d:b3:60:24:2c:ce:d3:1f:13:d6:8c:95:
e7:3f:8a:bc:3b:58:72:cf:c5:29:76:e0:77:11:3f:8d:92:0e:
6b:1e:6c:67:f4:60:85:50:7a:9f:7e:5e:20:6f:91:8d:13:8b:
7a:f8:2b:6d:95:01:fe:ff:77:f8:5c:d8:c1:a3:9b:d1:c8:1a:
72:0a:a2:83:a1:71:3c:7a:62:f5:2f:79:ee:84:25:1d:1e:32:
6e:d6:37:12:7f:41:a9:38:00:22:0e:14:76:4a:fa:90:65:84:
0c:ca:08:94:e5:cd:1b:d8:76:6c:5f:dd:86:25:a4:cd:e2:c5:
a2:1a:74:70:12:40:07:81:4f:24:fd:d2:3c:f4:5a:56:6a:c8:
5d:4d:28:15:01:a1:c9:1b:af:61:99:5b:42:10:e7:06:ec:2a:
6e:47:75:12:55:76:e9:cd:24:51:e6:d5:5d:02:77:4e:5e:26:
6e:a0:f1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 29 07:28:25 2024 by rpki-client on console-fra.rpki-client.org