Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1X9SGvNKDqAtYyxC1fTguU4VohA.roa
File: 1X9SGvNKDqAtYyxC1fTguU4VohA.roa (raw, json)
Hash identifier: 4WUrqsGlCK1YxHBFITvm7LvUFCrXdoBZ3bAF6Qk95t8=
Subject key identifier: D5:7F:52:1A:F3:4A:0E:A0:2D:63:2C:42:D5:F4:E0:B9:4E:15:A2:10
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018F19BA08894067CEE797B0B2FCAD246BD6
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1X9SGvNKDqAtYyxC1fTguU4VohA.roa
Signing time: Fri 26 Apr 2024 09:26:13 +0000
ROA not before: Fri 26 Apr 2024 09:26:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2119
IP address blocks: 192.36.37.0/24 maxlen: 24
192.71.5.0/24 maxlen: 24
192.71.40.0/24 maxlen: 24
192.71.97.0/24 maxlen: 24
192.71.158.0/24 maxlen: 24
192.121.101.0/24 maxlen: 24
192.121.172.0/24 maxlen: 24
192.121.192.0/24 maxlen: 24
192.165.65.0/24 maxlen: 24
192.165.86.0/24 maxlen: 24
192.176.161.0/24 maxlen: 24
193.180.61.0/24 maxlen: 24
193.181.0.0/24 maxlen: 24
193.181.187.0/24 maxlen: 24
193.183.3.0/24 maxlen: 24
193.183.68.0/23 maxlen: 23
193.183.79.0/24 maxlen: 24
193.183.92.0/24 maxlen: 24
193.183.93.0/24 maxlen: 24
193.183.104.0/24 maxlen: 24
193.183.118.0/24 maxlen: 24
193.234.68.0/23 maxlen: 23
193.234.220.0/23 maxlen: 23
193.234.237.0/24 maxlen: 24
194.14.129.0/24 maxlen: 24
194.14.212.0/24 maxlen: 24
194.68.56.0/23 maxlen: 23
194.68.99.0/24 maxlen: 24
194.68.126.0/24 maxlen: 24
194.68.194.0/23 maxlen: 23
194.71.27.0/24 maxlen: 24
194.71.83.0/24 maxlen: 24
194.71.140.0/23 maxlen: 23
194.71.248.0/21 maxlen: 21
194.103.50.0/24 maxlen: 24
194.132.108.0/23 maxlen: 23
194.132.174.0/24 maxlen: 24
194.132.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:19:ba:08:89:40:67:ce:e7:97:b0:b2:fc:ad:24:6b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Apr 26 09:26:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d57f521af34a0ea02d632c42d5f4e0b94e15a210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:e5:86:f6:d5:b5:19:6b:fd:b2:5c:bd:13:
88:16:75:02:b0:56:36:c5:ee:98:8b:8c:a2:ed:96:
6e:eb:15:53:d0:7e:eb:d6:c2:1f:b4:c5:00:34:ca:
4a:2a:cb:24:1b:17:04:b1:b1:67:5f:89:24:e3:a6:
35:ea:20:fb:8a:a9:11:b4:68:b3:27:0b:e1:3b:be:
21:57:21:9e:78:e1:07:b9:40:e1:31:3a:38:a2:f6:
a2:65:5a:36:1e:6f:47:67:50:f3:28:ac:53:99:08:
b2:2c:e5:a4:23:5c:21:c8:e1:24:b9:00:4a:70:ca:
12:02:24:44:cc:8b:b6:21:9b:f8:40:8e:f6:d1:ff:
68:eb:20:4b:f9:3c:43:93:9b:61:bb:e8:24:33:37:
10:11:d2:bd:ac:af:65:3b:95:77:cb:eb:bd:a3:f9:
6a:82:2e:01:3c:87:4b:2c:02:34:0e:b6:a7:09:38:
9a:1c:bc:ee:cb:86:51:2f:4d:ea:92:5a:36:9a:6f:
ed:cc:a6:37:81:83:0e:80:ae:c1:9d:7a:ef:cc:42:
c9:45:37:c9:61:82:78:17:0f:6d:6a:c6:6a:9c:58:
9a:e5:1e:e0:5d:30:c5:82:80:28:70:43:e6:ed:68:
b1:e3:e4:85:60:58:89:c2:88:6e:a6:03:83:b5:49:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7F:52:1A:F3:4A:0E:A0:2D:63:2C:42:D5:F4:E0:B9:4E:15:A2:10
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1X9SGvNKDqAtYyxC1fTguU4VohA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.37.0/24
192.71.5.0/24
192.71.40.0/24
192.71.97.0/24
192.71.158.0/24
192.121.101.0/24
192.121.172.0/24
192.121.192.0/24
192.165.65.0/24
192.165.86.0/24
192.176.161.0/24
193.180.61.0/24
193.181.0.0/24
193.181.187.0/24
193.183.3.0/24
193.183.68.0/23
193.183.79.0/24
193.183.92.0/23
193.183.104.0/24
193.183.118.0/24
193.234.68.0/23
193.234.220.0/23
193.234.237.0/24
194.14.129.0/24
194.14.212.0/24
194.68.56.0/23
194.68.99.0/24
194.68.126.0/24
194.68.194.0/23
194.71.27.0/24
194.71.83.0/24
194.71.140.0/23
194.71.248.0/21
194.103.50.0/24
194.132.108.0/23
194.132.174.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:98:9e:5f:66:68:b0:4e:c2:e7:4f:2b:9d:eb:3d:9c:f8:1b:
58:d7:c4:c8:20:7e:15:58:a0:e7:88:04:a9:0c:17:71:aa:8d:
cd:7b:49:7d:95:8c:81:78:27:a9:b6:45:a4:0e:b6:a5:8a:4b:
a8:11:35:8a:be:c2:16:8d:a4:6d:e5:9e:58:45:a3:fc:cf:a2:
ed:02:44:46:5c:f6:aa:88:d1:00:6e:fb:1f:b2:70:88:31:f9:
42:22:d3:04:3a:5d:28:57:8f:73:55:8a:7a:02:6b:ae:a6:c4:
66:f0:4e:9d:d9:3f:5d:dc:28:16:ee:5d:1c:c4:ee:f6:7d:e3:
ba:22:8b:31:0a:5f:6d:a2:a5:ec:4d:78:7f:20:da:a0:94:20:
ad:92:c0:42:46:e4:b7:23:ce:66:62:20:d6:b5:c8:95:a2:a6:
d3:46:f5:fa:e2:5f:01:87:bc:d3:1f:5f:6b:29:e9:50:91:81:
bd:f0:6e:f9:14:30:00:27:ae:d6:7f:96:f1:7f:b1:df:fc:c2:
24:a6:10:86:a0:04:e0:38:04:e3:d4:23:86:75:4f:e7:52:e6:
0c:3a:13:c6:3d:7c:df:72:a8:c1:52:bc:6f:2d:40:9b:db:48:
24:f8:62:00:35:98:bd:91:dd:c1:47:1a:03:1e:0a:d8:59:2c:
c0:0f:de:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 09:13:22 2024 by rpki-client on console-fra.rpki-client.org