Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-1usxv3TO-GJLaTF0vquqIFbKGs.roa
File: 1-1usxv3TO-GJLaTF0vquqIFbKGs.roa (raw, json)
Hash identifier: qq+Cu5ILdqPZlM9oxC+ODGaKiOBCKj+2gta2X2Vd1NY=
Subject key identifier: FB:5B:AC:C6:FD:D3:3B:E1:89:2D:A4:C5:D2:FA:AE:A8:81:5B:28:6B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018EE1326851420F7582C3B0D406543CA75D
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-1usxv3TO-GJLaTF0vquqIFbKGs.roa
Signing time: Mon 15 Apr 2024 09:59:20 +0000
ROA not before: Mon 15 Apr 2024 09:59:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12552
IP address blocks: 192.71.200.0/24 maxlen: 24
193.181.71.0/24 maxlen: 24
193.182.6.0/24 maxlen: 24
193.182.156.0/24 maxlen: 24
193.182.159.0/24 maxlen: 24
194.14.242.0/24 maxlen: 24
194.103.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e1:32:68:51:42:0f:75:82:c3:b0:d4:06:54:3c:a7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 15 09:59:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb5bacc6fdd33be1892da4c5d2faaea8815b286b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5e:14:3b:b2:08:b6:04:fe:ce:67:31:0a:95:
d2:29:a4:d2:24:b3:17:eb:fc:5f:9a:e9:e8:5a:47:
87:1e:a9:27:4b:fe:7e:be:45:b7:98:b5:2d:be:d8:
1e:74:44:63:51:5a:6a:6f:43:9b:87:b2:f9:42:2e:
e0:13:13:ee:b4:20:60:45:b3:b4:0f:68:85:a9:c8:
09:2d:a3:f2:fb:af:b7:a6:4b:86:ed:1a:72:8d:7a:
13:23:72:6d:6f:2e:56:4a:8e:66:22:f4:e7:e9:56:
3a:94:81:37:88:0c:7e:06:72:af:0a:fd:b7:13:75:
d5:7b:80:95:7a:26:13:d0:a3:2b:ac:18:da:55:67:
bd:9c:91:24:e5:f0:1f:32:e5:81:83:44:d6:15:8d:
d1:da:cf:f9:dd:ef:68:80:15:ad:95:0f:f2:00:8f:
4d:e4:12:a5:9e:44:e9:fd:f5:ba:1b:b6:66:2f:58:
ad:10:94:9d:29:bf:3f:4f:f9:61:df:26:5f:f7:1d:
fb:16:8f:15:c0:7e:ec:77:eb:1d:e1:6a:ff:59:b4:
c6:bf:02:6f:7f:34:7a:87:e2:77:1a:77:dc:34:32:
bc:39:69:6a:47:7c:c6:e8:54:8e:bd:0a:b2:82:4f:
ef:00:71:9b:17:95:8b:30:7c:07:22:c5:55:ad:8d:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:5B:AC:C6:FD:D3:3B:E1:89:2D:A4:C5:D2:FA:AE:A8:81:5B:28:6B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-1usxv3TO-GJLaTF0vquqIFbKGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.200.0/24
193.181.71.0/24
193.182.6.0/24
193.182.156.0/24
193.182.159.0/24
194.14.242.0/24
194.103.248.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a0:a5:72:8e:d5:7a:49:2b:3d:b0:8e:fc:79:13:e0:6a:67:
96:17:bf:f7:6b:ff:c0:99:fc:97:b0:50:51:3e:7e:c3:23:b5:
17:55:7c:7d:85:55:c7:93:10:c9:12:4c:a8:fe:4a:63:75:1c:
8c:3f:71:d0:44:bf:58:67:f0:35:e1:f4:6d:09:02:81:42:cc:
7b:2c:3f:26:f4:d8:7d:40:4e:e0:3c:86:54:8e:bd:d9:9f:6a:
74:67:66:30:bd:2f:2c:0d:49:ac:25:c8:b3:83:11:07:25:e4:
4b:98:fa:10:cc:1b:42:17:80:f6:0a:c8:96:ef:b9:54:44:3b:
76:d5:d1:f5:26:12:69:20:93:bb:72:9a:28:7c:f0:00:6f:36:
31:e2:96:c2:2a:fa:33:45:89:eb:78:4b:54:65:ff:26:92:6b:
56:47:d8:22:5f:5e:28:2e:37:e3:bb:97:6d:91:93:c5:fb:e2:
df:bd:7c:17:f2:d8:42:22:1e:65:9b:d2:df:85:58:09:c9:ab:
7b:46:24:ff:ec:b2:1d:70:10:8e:bb:41:a6:b1:ee:2b:56:92:
ad:8c:25:2c:c2:2f:4b:76:63:97:80:98:39:da:ea:fe:74:62:
c9:f1:89:e2:00:20:26:42:e1:1d:34:c7:e2:14:e5:84:61:ff:
ed:a9:e2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:44:00 2024 by rpki-client on console-ams.rpki-client.org