Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6l9VFh8CYSBhnLphoJ5JKLUsUIs.roa
File: 6l9VFh8CYSBhnLphoJ5JKLUsUIs.roa (raw, json)
Hash identifier: YzxgzPBovpj0K+WXE2pAXT9w1DSR/nIl0hCrHQ429ME=
Subject key identifier: EA:5F:55:16:1F:02:61:20:61:9C:BA:61:A0:9E:49:28:B5:2C:50:8B
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC80307B8671F110F2DCC36E3B1726C43
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6l9VFh8CYSBhnLphoJ5JKLUsUIs.roa
Signing time: Tue 02 Jan 2024 02:31:30 +0000
ROA not before: Tue 02 Jan 2024 02:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209659
IP address blocks: 193.180.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:07:b8:67:1f:11:0f:2d:cc:36:e3:b1:72:6c:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ea5f55161f026120619cba61a09e4928b52c508b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:04:69:5a:d3:0c:b7:87:db:7e:7d:c9:34:b7:
a3:8e:a4:ba:3f:1e:b7:06:14:b7:06:9e:28:fc:2d:
5d:89:cc:1d:c4:25:3e:1f:89:da:2a:a6:b5:ca:13:
01:4a:87:66:4e:e4:86:63:d0:60:77:42:58:2c:22:
7c:8e:c0:54:8a:2e:cf:e1:d4:c9:40:2e:ee:8b:22:
8c:5c:57:8a:bb:66:5a:68:10:2d:25:63:a5:04:e4:
e3:fd:0d:c9:9d:b1:20:f1:9c:8e:d2:8a:7d:c1:2c:
f3:1c:4a:6f:37:07:44:18:80:dc:24:15:bd:55:e9:
86:e0:3e:da:62:36:30:3f:92:0c:96:7f:52:b7:c2:
c8:98:8d:97:f4:a3:09:82:6d:12:30:35:54:7b:10:
a9:db:d6:97:1c:26:83:ba:92:b1:a8:86:4e:7a:cf:
b0:38:f7:04:d7:8c:c5:d1:3b:3e:c4:df:48:e2:b2:
88:9c:c6:9e:68:34:42:70:b1:05:dc:c5:c7:b6:61:
bc:52:c9:68:19:10:f2:6b:b5:21:39:59:8c:63:bc:
c8:11:00:08:d3:78:3b:3a:c5:6b:ff:d7:b8:3c:f6:
80:45:0f:54:e5:6a:93:b1:1d:3d:f6:ca:db:a9:01:
f4:41:6f:1e:a1:c1:7c:88:0d:c9:b7:69:f1:d6:79:
3d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:5F:55:16:1F:02:61:20:61:9C:BA:61:A0:9E:49:28:B5:2C:50:8B
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/6l9VFh8CYSBhnLphoJ5JKLUsUIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.173.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:d6:ae:6b:48:d3:63:92:a3:7d:13:ec:04:3b:8a:d7:6e:fd:
71:b2:1b:3b:f5:86:cb:8d:1d:23:0a:ca:84:df:b1:28:ed:75:
c8:f1:bd:c3:a4:04:9b:c1:ee:5d:86:36:59:ad:7d:21:88:c7:
9b:c9:b1:c2:21:db:b6:76:20:c5:9d:40:6a:7a:56:2a:c8:41:
fd:c4:63:8f:75:a2:4b:04:78:61:8d:c5:33:01:d2:a8:fc:bc:
22:a1:1b:a3:e6:f3:a1:14:90:95:61:05:84:b7:40:63:3e:54:
7d:f5:90:6f:ec:1e:10:bf:5d:94:dc:06:5b:1f:7d:51:21:79:
03:c0:a5:df:0a:a2:c5:1a:32:42:6b:f4:d6:bf:ed:1c:ff:14:
31:21:14:de:14:c7:08:c4:47:ee:f0:ff:bd:77:a2:ab:1d:a9:
3f:4f:b8:51:d0:cd:43:65:35:f5:cb:dc:91:d9:cd:16:45:b3:
5e:3c:3d:4e:bc:41:8b:ed:0b:78:ad:56:60:88:aa:95:bf:25:
a6:a1:5d:61:b1:f9:c1:f6:36:b0:ad:aa:a8:a3:96:d2:c1:e5:
96:1e:ef:d1:bf:f6:0f:41:db:be:15:ec:37:84:15:a2:40:34:
0c:88:45:72:c0:13:cd:2e:71:bd:43:58:10:f4:e8:13:e3:1f:
c9:2c:c9:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:10:30 2024 by rpki-client on console-fra.rpki-client.org