Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8BPKKlITwXdH4YDwKNfyKjvC8zw.roa
File: 8BPKKlITwXdH4YDwKNfyKjvC8zw.roa (raw, json)
Hash identifier: ZPicO6lMme9nPRdecoDsMeQ/eiNxffV0L4KRrG/HwnE=
Subject key identifier: F0:13:CA:2A:52:13:C1:77:47:E1:80:F0:28:D7:F2:2A:3B:C2:F3:3C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802EA208ECA769291A0D2BA41A5F863
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8BPKKlITwXdH4YDwKNfyKjvC8zw.roa
Signing time: Tue 02 Jan 2024 02:31:23 +0000
ROA not before: Tue 02 Jan 2024 02:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39870
IP address blocks: 192.36.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:ea:20:8e:ca:76:92:91:a0:d2:ba:41:a5:f8:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f013ca2a5213c17747e180f028d7f22a3bc2f33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a3:0d:84:58:64:fd:4b:08:98:6e:6c:d4:9b:
ce:ef:29:e6:19:96:65:81:b3:b9:40:c6:3b:d7:c6:
08:17:02:ab:d2:ee:8c:ab:13:b4:2b:7c:8a:e0:3e:
a3:0d:7b:a2:ad:c6:3a:60:dd:ea:37:16:87:fb:34:
4a:d8:d3:ef:bd:de:32:03:dd:16:57:df:b1:27:03:
57:33:45:08:b6:90:dd:77:2a:4a:c5:3e:06:bd:7c:
83:8e:3e:be:03:48:d7:66:19:01:1a:91:ac:33:61:
fa:c0:8a:af:70:ab:b1:66:9b:60:50:b7:5b:66:98:
4d:b5:f2:c5:4e:d4:e0:1a:1d:f9:39:10:0f:6e:5f:
54:31:5b:63:1c:9c:dd:8b:f9:0f:45:93:22:89:6b:
d4:98:11:36:ab:e5:6c:24:41:d5:7d:2e:eb:3b:56:
e3:ea:dd:8e:ff:e8:8c:15:87:d4:e4:eb:a4:cc:a1:
3b:aa:a0:20:2b:72:6e:6b:b5:5f:16:d5:da:b1:62:
79:76:40:c3:fb:ed:62:3a:82:48:57:4b:6c:15:88:
35:51:78:34:97:45:e8:7d:3a:24:d2:99:b3:39:5c:
f4:ed:00:ab:8a:29:e5:31:f5:3e:d4:c9:ed:74:84:
a7:6f:d8:3c:31:a3:0b:de:98:aa:c6:d6:c8:98:bd:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:13:CA:2A:52:13:C1:77:47:E1:80:F0:28:D7:F2:2A:3B:C2:F3:3C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/8BPKKlITwXdH4YDwKNfyKjvC8zw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.134.0/24
Signature Algorithm: sha256WithRSAEncryption
37:38:96:51:a3:6f:69:f4:88:6d:08:ae:e4:14:16:3d:37:be:
68:64:15:d3:2e:3d:40:b3:93:0f:4b:cd:b5:57:63:67:bc:75:
7e:c0:ac:57:59:fb:9e:4f:8c:ec:20:50:dd:65:5c:b5:b2:60:
f5:4b:28:ba:e9:ca:da:5e:97:08:92:03:f5:39:a0:89:06:5b:
66:f5:f1:97:3d:6a:69:4c:64:16:fd:cd:35:ac:81:62:83:3a:
49:f6:8d:36:84:3a:ad:bf:1b:7b:14:e9:3b:fa:23:e9:35:fb:
a5:41:ca:e9:7c:13:ca:63:a2:9e:bf:ce:07:77:7a:93:2a:89:
69:ab:5d:aa:8f:81:55:79:77:ff:70:89:16:c8:39:19:0a:aa:
e5:df:53:40:49:24:2a:df:6a:4e:2d:b0:a3:04:ec:df:57:76:
5d:12:2a:10:a7:d6:85:1f:52:96:df:1d:ac:44:bc:90:44:42:
02:53:6c:28:89:b6:54:e2:de:8c:4e:cd:ca:4d:f4:bb:1b:77:
9a:6e:e6:d3:45:ec:df:2b:ec:c0:61:3d:f6:da:d6:75:64:e0:
87:70:37:27:bb:b2:c2:9f:bc:b5:bc:2c:30:4f:3a:4b:e2:6f:
24:39:24:2f:1a:4c:35:ae:42:39:53:1e:0c:02:53:bc:0f:6a:
f4:90:3d:f1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAuogjsp2kpGg0rpBpfhjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMDEzY2EyYTUyMTNjMTc3NDdlMTgwZjAyOGQ3ZjIyYTNiYzJmMzNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqMNhFhk/UsImG5s1JvO7ynmGZZl
gbO5QMY718YIFwKr0u6MqxO0K3yK4D6jDXuircY6YN3qNxaH+zRK2NPvvd4yA90W
V9+xJwNXM0UItpDddypKxT4GvXyDjj6+A0jXZhkBGpGsM2H6wIqvcKuxZptgULdb
ZphNtfLFTtTgGh35ORAPbl9UMVtjHJzdi/kPRZMiiWvUmBE2q+VsJEHVfS7rO1bj
6t2O/+iMFYfU5OukzKE7qqAgK3Jua7VfFtXasWJ5dkDD++1iOoJIV0tsFYg1UXg0
l0XofTok0pmzOVz07QCriinlMfU+1MntdISnb9g8MaML3piqxtbImL0nOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPATyipSE8F3R+GA8CjX8io7wvM8MB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvOEJQS0tsSVR3WGRINFlEd0tOZnlLanZDOHp3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwCSGMA0G
CSqGSIb3DQEBCwUAA4IBAQA3OJZRo29p9IhtCK7kFBY9N75oZBXTLj1As5MPS821
V2NnvHV+wKxXWfueT4zsIFDdZVy1smD1Syi66craXpcIkgP1OaCJBltm9fGXPWpp
TGQW/c01rIFigzpJ9o02hDqtvxt7FOk7+iPpNfulQcrpfBPKY6Kev84Hd3qTKolp
q12qj4FVeXf/cIkWyDkZCqrl31NASSQq32pOLbCjBOzfV3ZdEioQp9aFH1KW3x2s
RLyQREICU2woibZU4t6MTs3KTfS7G3eabubTRezfK+zAYT322tZ1ZOCHcDcnu7LC
n7y1vCwwTzpL4m8kOSQvGkw1rkI5Ux4MAlO8D2r0kD3x
-----END CERTIFICATE-----
Generated at Sat May 18 17:02:14 2024 by rpki-client on console-fra.rpki-client.org