Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/2TJ90Z4gKLCA8Xy9neRhcJUBKw0.roa
File: 2TJ90Z4gKLCA8Xy9neRhcJUBKw0.roa (raw, json)
Hash identifier: AFj4xsVH/PnZKlY6EhbcHVLWl4XYTlvlz4eC5w3X/BI=
Subject key identifier: D9:32:7D:D1:9E:20:28:B0:80:F1:7C:BD:9D:E4:61:70:95:01:2B:0D
Certificate issuer: /CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Certificate serial: 0191EA88F108A383DABA5F4658F6DC43C0F9
Authority key identifier: 90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/2TJ90Z4gKLCA8Xy9neRhcJUBKw0.roa
Signing time: Fri 13 Sep 2024 08:38:48 +0000
ROA not before: Fri 13 Sep 2024 08:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212911
IP address blocks: 185.220.119.0/24 maxlen: 24
2a0b:f6c0:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ea:88:f1:08:a3:83:da:ba:5f:46:58:f6:dc:43:c0:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90f273a63c51eaf3f9e5ae7b9faafdb2931340df
Validity
Not Before: Sep 13 08:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d9327dd19e2028b080f17cbd9de4617095012b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d2:c0:04:39:57:58:53:dd:c6:bd:5a:37:8f:
fe:2b:c8:c5:b0:5a:72:df:ce:3f:44:1f:aa:71:10:
61:c7:d7:69:e3:8b:53:13:7b:65:11:e5:fa:56:c8:
41:48:4d:16:33:e0:c0:fa:f1:c0:0b:d4:70:ec:0c:
ed:19:c4:0f:58:41:34:0f:8b:35:15:5c:41:30:ec:
cc:4e:86:aa:23:d6:e4:11:c1:2c:86:a9:71:a0:c1:
f9:b3:63:bc:33:68:8b:ed:bb:69:66:ff:bb:e2:e7:
45:95:e6:0c:02:d5:25:ca:75:d0:60:f9:9b:37:3a:
b0:ed:43:c5:63:80:ea:d7:ff:79:04:03:2c:92:69:
dd:86:b1:09:09:f0:82:8d:34:bf:23:92:3e:96:5a:
99:7b:d4:41:c4:7c:7e:2e:4d:0f:05:43:2c:8b:76:
4c:ba:ed:21:e2:4e:aa:f0:8d:32:18:f3:83:06:7d:
38:95:e7:dc:5f:8a:93:8d:99:7e:58:8f:a5:d8:1b:
8c:60:c3:43:b7:89:82:47:e7:cd:4b:76:c4:52:08:
9e:35:fe:01:1f:25:d8:9f:61:28:e5:89:ff:c2:9f:
c1:00:17:7a:6b:be:ee:f1:b8:73:8a:27:d2:b6:40:
3f:e8:5b:e6:14:88:5e:a5:f7:88:4e:34:7e:48:53:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:32:7D:D1:9E:20:28:B0:80:F1:7C:BD:9D:E4:61:70:95:01:2B:0D
X509v3 Authority Key Identifier:
keyid:90:F2:73:A6:3C:51:EA:F3:F9:E5:AE:7B:9F:AA:FD:B2:93:13:40:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kPJzpjxR6vP55a57n6r9spMTQN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/2TJ90Z4gKLCA8Xy9neRhcJUBKw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bc676b-c0b6-4fbb-933f-5082c28b715f/1/kPJzpjxR6vP55a57n6r9spMTQN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.119.0/24
IPv6:
2a0b:f6c0:1::/48
Signature Algorithm: sha256WithRSAEncryption
6a:28:51:10:8d:9a:51:09:9b:4e:f4:cd:e6:b5:d0:4a:3d:3a:
2c:1e:0e:5d:37:b0:15:ab:ef:ac:9b:b5:de:2b:5b:da:62:fb:
58:10:35:78:e6:e4:e8:5a:b9:71:5e:91:57:93:00:15:08:15:
a7:03:f5:c5:e5:5f:0c:97:83:57:9a:ed:18:eb:0e:81:a5:12:
9e:92:cc:c4:93:cc:b5:02:af:1b:eb:67:a5:ab:bd:5d:8e:41:
62:fe:30:4a:24:15:dd:88:bd:bf:1d:cb:5b:70:e3:54:ed:bd:
d1:32:72:50:23:24:59:fb:88:4f:77:f8:7b:bc:07:98:3f:ef:
ae:11:d8:5c:25:f4:c3:fe:53:2d:6f:72:bf:05:8a:e4:0d:fd:
8a:88:5a:df:2d:21:3f:a9:a4:6c:2a:ee:7a:0b:ca:d8:45:45:
48:5a:de:af:75:c3:3c:e0:60:71:0e:07:e1:64:54:68:2f:5b:
2f:e3:be:0a:35:5f:1f:cf:8d:d2:06:55:21:3b:ef:26:e8:26:
f0:b8:99:03:5e:b4:6d:f1:3f:0b:f9:cf:59:1a:99:9e:c8:91:
ba:20:ad:fc:4a:ce:b3:2a:bd:0f:a3:69:7c:8b:85:75:5b:90:
db:1c:de:22:66:e6:e4:6e:6d:95:b1:af:a0:be:50:d3:68:09:
78:34:69:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:15:52 2024 by rpki-client on console-fra.rpki-client.org