Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9Tc9SbA1BYmfvKz-uhST9BSujeY.roa
File: 9Tc9SbA1BYmfvKz-uhST9BSujeY.roa (raw, json)
Hash identifier: t8QegBJduV+f3X3nZ+DnyvjZUWYqB5z0Ij4ADuBHt7c=
Subject key identifier: F5:37:3D:49:B0:35:05:89:9F:BC:AC:FE:BA:14:93:F4:14:AE:8D:E6
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802F2AFBFF54D5B6A809C25A40656C2
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9Tc9SbA1BYmfvKz-uhST9BSujeY.roa
Signing time: Tue 02 Jan 2024 02:31:25 +0000
ROA not before: Tue 02 Jan 2024 02:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51132
IP address blocks: 193.181.43.0/24 maxlen: 24
193.181.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f2:af:bf:f5:4d:5b:6a:80:9c:25:a4:06:56:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5373d49b03505899fbcacfeba1493f414ae8de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d8:59:26:a0:3f:36:89:29:dd:aa:5e:bd:f2:
47:11:40:be:63:7f:fa:bc:ee:19:46:f0:34:dc:b4:
c6:ca:f8:67:1b:95:42:3e:14:27:65:0a:d8:ae:ef:
39:05:2a:3b:7d:05:1a:82:e4:74:15:aa:ca:6c:22:
90:34:48:de:2e:21:50:ac:d5:d8:0b:b1:35:2e:e9:
5d:81:80:38:04:68:49:b6:4a:52:85:72:a5:d8:f0:
31:6f:4c:ac:ca:3a:0b:8d:5f:35:fb:47:af:09:8b:
4e:10:4d:cb:01:93:05:e8:e2:82:6b:34:65:b0:45:
66:5f:e7:15:5f:88:d8:b5:a5:53:04:27:db:c0:13:
48:ce:d0:83:8c:c1:1b:52:c9:6f:d0:00:1b:c8:0a:
50:1b:84:3d:39:90:4f:8c:4e:fe:3e:93:38:78:22:
c6:d7:23:1b:4b:e4:c2:48:ab:84:3d:01:04:5b:ac:
e6:e8:6e:29:b3:4a:c9:dc:bd:0e:e9:5c:b3:20:f6:
8f:e7:0a:dc:da:7e:c4:5a:36:7e:b1:e4:41:30:30:
61:df:0b:63:e4:3b:d1:b5:ea:f6:5d:08:1d:46:f6:
de:f9:7e:81:d6:10:3c:8d:90:94:60:ec:67:b6:02:
5d:e8:46:3f:f5:c1:b1:69:80:55:b0:a5:fc:7e:d2:
54:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:37:3D:49:B0:35:05:89:9F:BC:AC:FE:BA:14:93:F4:14:AE:8D:E6
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/9Tc9SbA1BYmfvKz-uhST9BSujeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.43.0/24
193.181.48.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:3b:48:51:7c:5c:c1:81:70:03:e8:66:4b:7b:ae:a5:e3:a1:
d5:20:cd:39:2f:bd:6d:0f:db:8c:7b:06:b2:0e:f6:e4:5f:59:
f6:ad:59:c5:6d:60:c1:4f:9f:cc:a9:99:a8:24:90:0f:3e:f5:
dc:25:f5:7d:58:99:ab:de:ca:41:f5:7f:1c:ea:05:3d:f9:07:
ad:76:68:59:2b:8b:cb:fa:45:e1:6a:60:9d:08:51:0b:d7:3e:
71:06:87:ff:ff:fd:f6:45:4a:8a:d7:fd:01:2d:bc:10:77:62:
03:7e:e4:55:9d:36:4f:f7:42:0a:3f:6b:ad:9a:be:62:90:c4:
57:07:60:85:da:88:9e:9c:94:05:38:bf:2d:c8:fe:9e:34:f7:
02:67:cb:1d:08:da:4d:f2:92:a4:c5:ff:ef:d8:e3:b7:24:a1:
19:c5:5b:3c:ee:a8:57:b0:ce:23:5a:cb:cc:83:f3:6a:c8:52:
a5:2d:8f:81:60:37:fa:ac:8e:5c:07:dc:7e:c3:b5:13:b9:9e:
06:08:a2:a6:86:95:f2:fc:d4:6f:f3:d5:94:52:31:fb:05:e1:
d5:ff:50:59:57:0b:01:2d:8b:23:31:5e:3e:b7:9a:6a:43:d3:
6f:76:55:a8:16:63:7b:4c:dc:e2:61:b7:77:c2:dc:58:3c:55:
42:dd:f4:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 17:30:49 2024 by rpki-client on console-fra.rpki-client.org