Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-8v4KASzxWEZXX90Wxz92BlqPik.roa
File: 1-8v4KASzxWEZXX90Wxz92BlqPik.roa (raw, json)
Hash identifier: xQtQjPnCeaGSmuf0y+jWIH2fZqlzwzHQ0D1FN8sA+8M=
Subject key identifier: FB:CB:F8:28:04:B3:C5:61:19:5D:7F:74:5B:1C:FD:D8:19:6A:3E:29
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CF7C26465C70318F11E37CD6414F066C3
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-8v4KASzxWEZXX90Wxz92BlqPik.roa
Signing time: Thu 11 Jan 2024 09:02:41 +0000
ROA not before: Thu 11 Jan 2024 09:02:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57829
IP address blocks: 193.234.1.0/24 maxlen: 24
193.235.192.0/24 maxlen: 24
194.14.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f7:c2:64:65:c7:03:18:f1:1e:37:cd:64:14:f0:66:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 11 09:02:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbcbf82804b3c561195d7f745b1cfdd8196a3e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:7f:fc:fe:2a:e2:1b:8c:48:8e:0f:9e:53:7b:
b8:05:f9:88:45:0a:62:df:6c:ca:28:44:c0:b9:ef:
94:41:bb:27:5d:82:e5:f1:63:89:be:1b:f9:78:61:
53:33:15:f1:f3:97:4d:80:c3:66:e5:a3:bc:fa:be:
96:fb:05:4d:c2:e1:38:46:cb:b8:24:d5:e7:4f:70:
bf:e7:b1:3b:b3:d3:8f:ac:08:9f:5b:7d:7d:f7:d8:
85:3c:b7:37:ad:18:ad:fd:03:22:13:1e:16:33:6f:
7b:77:b8:28:b2:b5:15:79:95:4e:b0:cd:ce:69:c6:
28:ab:3f:3e:64:fa:a6:f8:13:5a:7c:e0:09:26:04:
12:d5:c3:ab:8e:5e:50:57:56:90:16:2a:a3:1c:fb:
0c:fb:f4:84:df:f2:a8:2f:fe:21:3c:e9:a4:05:cb:
f8:b0:37:94:8a:db:ea:17:27:8b:b5:cc:48:da:29:
46:3d:32:df:08:45:94:a2:d5:2c:4c:30:33:e9:b0:
99:66:1e:81:30:8a:10:a2:62:72:7c:de:69:8f:64:
98:27:c1:18:be:69:8a:fb:10:ca:28:3f:6d:00:ea:
0d:a1:80:19:3a:7b:63:b0:e9:27:5c:b9:dd:92:67:
09:cf:1b:0a:1a:ba:fe:54:f4:a6:50:39:38:b7:f4:
65:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CB:F8:28:04:B3:C5:61:19:5D:7F:74:5B:1C:FD:D8:19:6A:3E:29
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1-8v4KASzxWEZXX90Wxz92BlqPik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.234.1.0/24
193.235.192.0/24
194.14.195.0/24
Signature Algorithm: sha256WithRSAEncryption
92:15:6d:04:cf:64:72:46:d9:0e:6a:d9:40:16:04:5a:03:9b:
cf:2d:cd:d1:94:61:07:cf:10:b4:13:a9:a3:e5:2c:22:02:8f:
10:c0:c4:75:1a:1e:0e:48:92:c4:c9:6e:7f:8c:49:b1:42:53:
6b:54:6d:61:4b:e8:a1:4d:f5:75:5a:0b:a0:e4:16:da:62:26:
56:68:41:fa:ec:7c:94:16:41:5b:66:c7:ee:dc:91:85:a0:a2:
17:75:09:2a:d4:f9:eb:b6:d3:45:05:37:d0:89:39:31:4d:2a:
d7:5e:63:4d:f6:5c:4c:68:0c:ec:6c:30:5d:24:d0:b1:02:6f:
6d:dc:83:48:05:11:6c:aa:6d:c1:49:53:b1:9e:51:5d:b6:b5:
07:6c:66:e4:7a:a0:2d:47:c0:69:2e:2f:ed:47:df:f0:c6:05:
2b:ee:ac:28:7f:dd:10:90:53:fe:71:bb:c4:91:65:ad:3c:c5:
03:a9:10:75:c5:62:89:10:76:c8:9d:12:41:28:cc:c6:19:3d:
ac:5e:c0:bd:a5:d3:9f:43:2b:b7:b6:ca:f8:b9:91:73:56:84:
91:66:f7:8b:fc:b6:81:80:1c:35:bc:9c:9c:66:f6:72:6a:93:
c6:f9:bc:58:fb:09:ec:0d:6c:ea:70:71:cc:b2:d6:fa:e9:35:
57:74:88:3e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat May 25 09:13:22 2024 by rpki-client on console-fra.rpki-client.org