Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1yvIZ9HPmi3_wWhGqXHlOAQaBH0.roa
File: 1yvIZ9HPmi3_wWhGqXHlOAQaBH0.roa (raw, json)
Hash identifier: P+CV0rpxWodmDTCB6ALOe+cdZseqjN5BJ9w/Y2fPQ3c=
Subject key identifier: D7:2B:C8:67:D1:CF:9A:2D:FF:C1:68:46:A9:71:E5:38:04:1A:04:7D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802F0BF3AFDA19AF68971EAF760ED5C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1yvIZ9HPmi3_wWhGqXHlOAQaBH0.roa
Signing time: Tue 02 Jan 2024 02:31:24 +0000
ROA not before: Tue 02 Jan 2024 02:31:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48894
IP address blocks: 192.71.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f0:bf:3a:fd:a1:9a:f6:89:71:ea:f7:60:ed:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d72bc867d1cf9a2dffc16846a971e538041a047d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:14:41:df:f8:06:81:9f:5f:3b:46:ca:80:1c:
55:35:d3:c0:36:cd:ea:b5:3e:3d:73:54:d2:21:b5:
ac:97:4b:24:6b:8a:2c:7b:ca:2f:d8:35:c2:62:c7:
73:7f:30:74:c5:11:22:d3:f0:b6:95:cc:ad:47:f5:
01:82:ae:e0:04:e8:12:54:a0:ed:42:5c:56:d5:58:
c4:f2:e6:61:7f:db:2e:66:ed:ff:02:94:54:9b:07:
98:70:4a:4c:c2:a1:7b:0c:59:82:43:7b:ca:78:f4:
66:a2:3a:89:3b:33:b7:01:52:bb:69:b9:84:91:00:
36:e7:59:f0:91:cb:03:82:1f:af:06:e8:76:06:5e:
12:32:04:a3:03:91:d1:e6:dd:d6:2d:b4:06:74:59:
99:78:e3:44:ef:ec:3e:d2:03:20:27:9f:4a:61:0c:
a3:42:5b:ea:ea:27:b3:a0:cf:9b:19:f2:d3:b3:42:
ad:01:57:78:fb:80:c1:da:91:3a:81:14:c7:3e:3d:
d9:75:e1:06:f0:e5:c3:66:b2:12:c2:f1:66:6e:50:
d9:33:a6:42:05:7e:15:b8:bf:42:d9:96:af:fe:c0:
18:44:0b:0a:01:a6:42:92:1b:eb:25:28:94:df:00:
73:20:2b:3a:37:b7:49:3d:22:df:c8:30:d7:31:d1:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2B:C8:67:D1:CF:9A:2D:FF:C1:68:46:A9:71:E5:38:04:1A:04:7D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/1yvIZ9HPmi3_wWhGqXHlOAQaBH0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.244.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:4d:40:92:ac:c0:a2:ea:cb:31:55:33:00:b3:70:d0:15:72:
53:84:9e:99:da:cb:98:57:1e:e5:06:26:24:5c:6f:fa:38:2e:
97:b9:3a:6c:71:d9:c8:41:ac:74:8c:15:06:7d:fd:b9:d9:99:
ce:29:41:6b:52:07:de:75:e1:85:98:96:61:71:54:64:7c:10:
b2:ac:dc:66:5b:f8:9c:c4:9e:5a:4a:25:4c:17:c5:2f:74:75:
77:fa:55:13:92:e8:bc:b3:fd:f9:ca:25:0e:9c:e0:7a:8e:d8:
1a:2c:58:7b:44:36:a4:7b:3c:ba:00:4c:d0:98:5e:8c:30:01:
f1:5b:90:51:31:2a:0d:fb:fc:17:ac:87:37:7c:00:a1:88:bd:
18:64:6c:67:a7:fb:6e:c9:aa:cb:1b:b0:9e:20:8a:13:3f:42:
18:6b:e1:3f:7d:59:8a:f5:b1:c8:57:3a:00:a1:02:e8:b8:84:
e3:9a:1e:d4:85:f6:05:69:84:f7:3b:81:74:e3:a8:ad:05:05:
90:85:8c:71:3e:86:1f:85:bf:bb:7a:c7:42:3e:bf:b0:ec:ed:
02:64:7a:2e:52:b8:3f:aa:0a:4c:68:e3:af:8a:a8:c9:d8:9d:
ac:4c:2f:83:2d:7b:46:78:3e:3e:6b:e4:dd:ad:69:9b:fe:b9:
8c:f7:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:29 2024 by rpki-client on console-fra.rpki-client.org