Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/69Hz_mbJByVYX9yr1dcf6jd75a8.roa
File: 69Hz_mbJByVYX9yr1dcf6jd75a8.roa (raw, json)
Hash identifier: /bOTPFwebIcnR9YQQwN8rKiw98gVAlfaSopRSnJoJKQ=
Subject key identifier: EB:D1:F3:FE:66:C9:07:25:58:5F:DC:AB:D5:D7:1F:EA:37:7B:E5:AF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802E80E0F369ED45D3C6D18085F253E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/69Hz_mbJByVYX9yr1dcf6jd75a8.roa
Signing time: Tue 02 Jan 2024 02:31:22 +0000
ROA not before: Tue 02 Jan 2024 02:31:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34950
IP address blocks: 192.165.101.0/24 maxlen: 24
194.68.50.0/24 maxlen: 24
192.176.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:e8:0e:0f:36:9e:d4:5d:3c:6d:18:08:5f:25:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ebd1f3fe66c90725585fdcabd5d71fea377be5af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c6:b3:5b:03:d4:24:5d:14:53:d7:a7:89:60:
07:1d:e4:6a:ee:3c:6e:06:3a:9f:d5:4b:ba:e4:a4:
98:00:b6:8f:9d:ac:31:93:16:bd:3d:d3:51:9c:70:
f4:06:2c:0a:59:4c:9f:eb:95:1a:11:56:5e:62:6a:
aa:f4:be:0d:ea:4f:fa:22:28:4e:64:fc:d2:b0:2c:
64:8b:f5:72:da:47:da:32:2f:de:02:f1:0e:26:cf:
9e:0a:14:34:5e:d9:8d:21:66:77:ef:3e:e4:fe:d2:
07:7f:d3:ea:e0:56:46:7c:6b:c8:56:65:83:b3:5f:
12:6d:3b:ea:28:5f:98:ef:0d:45:23:4f:1e:0e:4a:
58:60:df:60:b9:81:0d:55:67:17:01:c9:5d:ba:80:
99:4f:78:50:18:01:d1:b2:27:ee:4d:a5:11:81:fd:
50:f9:88:3c:3c:a6:c9:8c:66:89:aa:b5:d6:97:9c:
40:77:a6:b8:7f:36:5d:20:5e:8e:da:54:d9:20:ae:
50:f1:c3:bf:ff:18:b6:85:d9:bd:ee:21:3f:bb:15:
9d:59:d8:97:07:91:77:67:df:33:b7:e8:7e:ad:90:
8f:ef:d1:a7:03:12:bb:de:03:51:af:7a:0e:45:21:
e3:bf:eb:c4:d0:2d:c2:e8:5e:00:9a:80:8a:59:a7:
50:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:D1:F3:FE:66:C9:07:25:58:5F:DC:AB:D5:D7:1F:EA:37:7B:E5:AF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/69Hz_mbJByVYX9yr1dcf6jd75a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.101.0/24
192.176.2.0/24
194.68.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:18:7b:98:ce:67:22:10:34:05:7d:4b:8c:98:9c:3b:f3:93:
52:c0:64:5d:91:e0:e0:f6:bb:df:76:01:81:29:50:70:0b:d8:
36:85:ff:b1:ad:be:0e:e7:52:d0:af:6b:53:25:68:e5:a1:18:
49:ac:b5:02:82:ee:4e:11:1c:81:19:3a:b3:25:be:e8:20:15:
91:c8:93:79:c5:b3:e2:92:68:67:03:bb:7e:08:9e:63:c1:23:
07:49:f6:fa:d2:86:fe:5a:14:87:97:01:cf:f4:48:87:9c:9d:
76:9e:5c:d6:bb:f8:56:c9:0d:cf:52:f8:74:37:d9:1b:3f:32:
23:a9:a9:a7:f9:c9:3a:20:6b:24:d9:8c:e8:8f:ee:aa:e9:13:
8c:61:5c:b8:6f:3a:b2:c2:63:ef:1f:07:3c:11:4e:45:91:2d:
c4:a3:89:9e:27:b2:10:b3:ce:73:67:49:ff:52:86:74:d4:dd:
f4:c6:20:1e:a5:4d:64:98:59:49:ab:27:bf:66:8c:99:ad:a5:
16:1b:d6:7d:34:23:cd:ed:04:6e:6e:c3:ab:4b:84:f5:56:b6:
ac:20:41:f6:eb:ac:d0:c7:c5:5b:f9:12:13:1f:06:54:49:b9:
20:7c:8e:35:62:7c:2e:60:a7:13:48:0f:4e:5f:bb:1c:48:0c:
86:ab:f3:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 19:45:09 2024 by rpki-client on console-fra.rpki-client.org