Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/A8yw84ON2h2JR_JhStQcn_gZdUU.roa
File: A8yw84ON2h2JR_JhStQcn_gZdUU.roa (raw, json)
Hash identifier: 1U2ZQQ2y4l+M09mD4w0nQBUpfpCbM4gVpwxgXj4zLMo=
Subject key identifier: 03:CC:B0:F3:83:8D:DA:1D:89:47:F2:61:4A:D4:1C:9F:F8:19:75:45
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019324B1C4F93473218445FD23849FF078B9
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/A8yw84ON2h2JR_JhStQcn_gZdUU.roa
Signing time: Wed 13 Nov 2024 08:44:10 +0000
ROA not before: Wed 13 Nov 2024 08:44:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35790
IP address blocks: 192.176.52.0/22 maxlen: 24
193.180.88.0/22 maxlen: 24
193.234.40.0/22 maxlen: 24
194.103.104.0/22 maxlen: 24
194.103.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:24:b1:c4:f9:34:73:21:84:45:fd:23:84:9f:f0:78:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Nov 13 08:44:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=03ccb0f3838dda1d8947f2614ad41c9ff8197545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:cd:b6:96:dd:f3:eb:6a:0b:78:7f:eb:d0:
d6:ff:e3:56:32:0b:8c:71:d9:4d:2d:82:77:4b:ba:
cf:2e:91:47:d1:ca:d7:cd:b3:1b:bc:d4:02:33:77:
7f:3b:3b:de:3d:ae:1f:a8:29:91:27:9a:eb:8d:be:
fc:a2:2f:59:c8:05:67:1b:7b:15:0c:6e:ef:89:0d:
78:b3:19:f1:51:69:d9:e9:8e:34:29:4d:de:2b:ee:
9c:b2:29:b0:d2:b0:b3:05:c5:b0:ef:c8:bd:ea:0b:
26:bc:13:23:d7:f0:e3:69:59:eb:22:b5:08:af:4a:
a9:e0:91:a0:30:eb:9a:18:d4:24:e7:31:06:b8:87:
62:0f:02:71:13:6f:d0:bb:3f:71:a6:c1:a2:93:a7:
1c:aa:36:2a:b9:b8:0c:e3:12:ba:0e:20:7c:36:2c:
e1:df:de:36:57:ba:1b:36:a1:d6:b0:52:de:6a:b0:
76:43:4f:ae:58:67:00:b8:83:b0:ef:f1:bd:e1:39:
72:87:56:15:da:ea:3d:bf:5d:10:14:e9:1d:e2:e8:
40:e4:c7:42:87:2b:f5:4d:b4:ed:41:da:7e:91:9f:
e8:8e:1e:c3:ba:99:33:4a:e2:d9:d5:0c:0c:b3:9f:
25:82:41:63:54:d0:4e:74:72:be:9c:cf:a8:f7:10:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:CC:B0:F3:83:8D:DA:1D:89:47:F2:61:4A:D4:1C:9F:F8:19:75:45
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/A8yw84ON2h2JR_JhStQcn_gZdUU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.176.52.0/22
193.180.88.0/22
193.234.40.0/22
194.103.104.0/21
Signature Algorithm: sha256WithRSAEncryption
84:47:ca:bb:0b:55:e3:30:9a:58:34:09:93:1a:8d:b5:2c:7c:
0c:9a:37:32:19:4f:a0:c5:d2:55:e1:eb:94:3d:cd:40:71:ca:
0f:a1:ec:16:25:9a:cb:e9:7d:90:7f:f0:c1:96:cb:18:8c:bc:
ff:c9:6e:74:ee:f7:56:88:9f:fb:d2:b5:fe:b6:9e:c8:75:11:
46:db:16:42:95:8f:23:d5:ba:33:b8:64:75:bb:ac:90:76:ad:
90:79:a0:54:44:a7:59:b6:30:fb:2c:97:6e:cb:a4:2e:2c:58:
90:65:51:ff:6e:ee:7b:5c:9f:c8:c6:90:0b:60:5d:80:92:48:
f1:b0:11:40:56:84:e3:37:ba:4b:26:13:17:4b:69:59:09:09:
0f:72:c0:a6:58:19:6c:f4:94:cb:27:c7:95:8f:e6:b7:d4:af:
97:85:cb:5c:33:fb:7b:ea:aa:b7:32:86:23:b8:3e:58:80:f2:
01:2d:5a:75:c3:9c:a8:ca:fe:36:3b:0a:09:58:ea:71:30:16:
21:24:78:8c:00:31:25:76:21:6c:ca:b2:e5:5e:87:ea:a4:1f:
52:93:c6:30:08:d8:e5:9b:52:64:2c:f6:47:34:d3:b0:bd:04:
66:8a:d7:07:98:1c:88:c9:76:ff:2c:33:96:53:bf:29:38:61:
70:90:47:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:44:00 2024 by rpki-client on console-ams.rpki-client.org