Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0CtvbxbTup_gM3PhP-zumkciifQ.roa
File: 0CtvbxbTup_gM3PhP-zumkciifQ.roa (raw, json)
Hash identifier: oAutX0btLcrxYUzTUQ5MfH5QjzGkw+aFKuns1XPw15E=
Subject key identifier: D0:2B:6F:6F:16:D3:BA:9F:E0:33:73:E1:3F:EC:EE:9A:47:22:89:F4
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802DDBB8887C8974DE601733D325C2C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0CtvbxbTup_gM3PhP-zumkciifQ.roa
Signing time: Tue 02 Jan 2024 02:31:20 +0000
ROA not before: Tue 02 Jan 2024 02:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 9201
IP address blocks: 193.182.30.0/23 maxlen: 23
193.182.28.0/23 maxlen: 23
193.182.26.0/23 maxlen: 23
193.182.36.0/23 maxlen: 23
193.182.34.0/23 maxlen: 23
193.182.32.0/23 maxlen: 23
193.182.38.0/23 maxlen: 23
193.182.42.0/23 maxlen: 23
193.182.40.0/23 maxlen: 23
192.36.55.0/24 maxlen: 24
193.182.24.0/23 maxlen: 23
192.36.7.0/24 maxlen: 24
192.165.184.0/24 maxlen: 24
192.121.27.0/24 maxlen: 24
192.36.251.0/24 maxlen: 24
192.71.136.0/24 maxlen: 24
192.165.141.0/24 maxlen: 24
192.165.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:dd:bb:88:87:c8:97:4d:e6:01:73:3d:32:5c:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d02b6f6f16d3ba9fe03373e13fecee9a472289f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cd:80:a0:98:c0:0e:68:14:29:ad:a0:ee:42:
3e:7f:5b:fd:db:7d:9b:68:83:10:06:6f:2d:bf:86:
6c:ac:f7:41:a7:fe:10:83:f2:26:b5:70:81:fc:f2:
b7:21:06:cd:97:6b:df:a1:f4:10:5a:ef:c1:39:b0:
26:98:4c:51:92:05:fc:2a:fa:d1:72:16:60:15:a0:
66:d0:08:af:35:32:ca:0b:4a:94:3f:97:fc:c1:a1:
78:49:68:65:16:c7:bb:c5:15:a9:05:4f:c2:6e:31:
23:b3:30:4a:7e:2c:8d:15:b4:af:41:3d:4a:80:18:
eb:24:92:e6:18:d3:3b:54:ec:0b:58:be:7e:8d:d3:
3b:66:1a:bc:a7:5d:9a:50:0c:30:8c:51:b8:28:3a:
45:6c:e4:23:1a:31:9c:04:bc:ad:ae:a1:95:9c:eb:
94:09:9e:cd:30:17:be:6b:a5:ad:2d:72:d4:a2:c8:
e0:c5:3e:36:31:12:fd:74:7e:da:32:58:a3:22:49:
fd:b4:4b:a1:e5:50:3d:a0:6a:5e:e0:2c:c8:f1:14:
c3:71:e4:7a:c9:b7:33:85:ec:9f:0d:96:be:69:0f:
00:56:0e:67:8b:04:52:73:51:ab:4f:9c:81:18:d1:
b4:e6:41:17:7d:48:ea:28:59:64:dc:5a:90:e1:2b:
b9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2B:6F:6F:16:D3:BA:9F:E0:33:73:E1:3F:EC:EE:9A:47:22:89:F4
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/0CtvbxbTup_gM3PhP-zumkciifQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.7.0/24
192.36.55.0/24
192.36.251.0/24
192.71.136.0/24
192.121.27.0/24
192.165.140.0/23
192.165.184.0/24
193.182.24.0-193.182.43.255
Signature Algorithm: sha256WithRSAEncryption
3e:ad:c9:ff:aa:67:b0:0d:40:bb:4a:c7:7b:6f:65:7c:d5:50:
10:ff:a7:64:03:e7:10:4e:80:2c:c8:c6:6f:f3:53:c5:d8:f4:
d7:f5:51:88:78:07:92:2f:12:6d:82:7e:84:ef:df:50:63:bf:
a7:bd:b6:8c:94:02:a6:0c:59:f5:1e:51:ed:ff:41:65:a8:ad:
4b:c2:dd:00:c3:89:d1:db:45:46:d1:5a:ad:55:11:3b:0d:8a:
08:4c:d6:50:d4:cf:83:2a:70:e5:46:4c:7b:40:75:82:50:75:
e2:9b:27:d8:0e:fd:64:85:8a:04:b2:fa:fe:83:02:ec:90:5e:
44:07:7d:18:a0:71:b8:72:6e:9c:f0:fc:91:d5:62:41:2c:1a:
47:d1:36:2a:49:32:d7:48:9a:0e:c8:20:55:9e:f9:9b:fd:19:
70:c8:04:7d:23:65:b6:10:f1:ce:f6:75:c2:76:e5:d9:b2:07:
52:c7:ff:4b:dd:e3:1e:ec:a8:aa:bc:ea:7e:a3:40:1b:54:6e:
c6:c2:02:b1:7b:d8:b8:18:89:8c:3f:b5:a0:01:3f:cc:b6:a2:
b1:92:c2:01:a0:73:ec:99:56:d5:00:37:0a:80:f9:b2:0d:5d:
1d:18:40:81:cc:90:22:37:76:ee:1d:92:4c:75:3b:21:53:e1:
80:dc:c5:74
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAYzIAt27iIfIl03mAXM9MlwsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTIwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDJiNmY2ZjE2ZDNiYTlmZTAzMzczZTEzZmVjZWU5YTQ3MjI4OWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAws2AoJjADmgUKa2g7kI+f1v9232b
aIMQBm8tv4ZsrPdBp/4Qg/ImtXCB/PK3IQbNl2vfofQQWu/BObAmmExRkgX8KvrR
chZgFaBm0AivNTLKC0qUP5f8waF4SWhlFse7xRWpBU/CbjEjszBKfiyNFbSvQT1K
gBjrJJLmGNM7VOwLWL5+jdM7Zhq8p12aUAwwjFG4KDpFbOQjGjGcBLytrqGVnOuU
CZ7NMBe+a6WtLXLUosjgxT42MRL9dH7aMlijIkn9tEuh5VA9oGpe4CzI8RTDceR6
ybczheyfDZa+aQ8AVg5niwRSc1GrT5yBGNG05kEXfUjqKFlk3FqQ4Su5nQIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFNArb28W07qf4DNz4T/s7ppHIon0MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvMEN0dmJ4YlR1cF9nTTNQaFAtenVta2NpaWZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAwCQHAwQA
wCQ3AwQAwCT7AwQAwEeIAwQAwHkbAwQBwKWMAwQAwKW4MAwDBAPBthgDBALBtigw
DQYJKoZIhvcNAQELBQADggEBAD6tyf+qZ7ANQLtKx3tvZXzVUBD/p2QD5xBOgCzI
xm/zU8XY9Nf1UYh4B5IvEm2CfoTv31Bjv6e9toyUAqYMWfUeUe3/QWWorUvC3QDD
idHbRUbRWq1VETsNighM1lDUz4MqcOVGTHtAdYJQdeKbJ9gO/WSFigSy+v6DAuyQ
XkQHfRigcbhybpzw/JHVYkEsGkfRNipJMtdImg7IIFWe+Zv9GXDIBH0jZbYQ8c72
dcJ25dmyB1LH/0vd4x7sqKq86n6jQBtUbsbCArF72LgYiYw/taABP8y2orGSwgGg
c+yZVtUANwqA+bINXR0YQIHMkCI3du4dkkx1OyFT4YDcxXQ=
-----END CERTIFICATE-----
Generated at Fri Nov 22 12:44:00 2024 by rpki-client on console-ams.rpki-client.org