Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/An8lbpBfEMhxc1o90w2cXoagFXg.roa
File: An8lbpBfEMhxc1o90w2cXoagFXg.roa (raw, json)
Hash identifier: KGlN5wRhEe+oLPgUhnIvmPOuqn9Oln3AbzvaTXVzwFY=
Subject key identifier: 02:7F:25:6E:90:5F:10:C8:71:73:5A:3D:D3:0D:9C:5E:86:A0:15:78
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019039EDF685EF999EB71A9EA68CAAB30AFF
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/An8lbpBfEMhxc1o90w2cXoagFXg.roa
Signing time: Fri 21 Jun 2024 08:33:34 +0000
ROA not before: Fri 21 Jun 2024 08:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12381
IP address blocks: 192.71.84.0/24 maxlen: 24
192.121.86.0/24 maxlen: 24
192.121.100.0/24 maxlen: 24
192.121.121.0/24 maxlen: 24
194.14.3.0/24 maxlen: 24
194.68.48.0/24 maxlen: 24
194.68.230.0/24 maxlen: 24
194.71.2.0/24 maxlen: 24
194.71.25.0/24 maxlen: 24
2a01:280:1::/48 maxlen: 48
2a01:280:4::/48 maxlen: 48
2a01:280:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:39:ed:f6:85:ef:99:9e:b7:1a:9e:a6:8c:aa:b3:0a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jun 21 08:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=027f256e905f10c871735a3dd30d9c5e86a01578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c4:f5:74:6f:5d:46:4d:e2:7d:12:cc:62:95:
db:e0:0f:66:2f:58:d0:35:5c:94:df:04:d8:58:db:
23:a0:14:fa:06:58:c4:8f:07:c6:be:a6:d6:74:d6:
b4:d0:90:0e:95:df:9b:5d:6c:90:9b:66:49:61:e2:
f3:7c:ec:77:c8:8b:43:50:c5:3d:46:3d:9a:ca:af:
38:6a:87:d2:57:75:2b:48:91:a6:43:be:12:c7:c8:
98:5b:ee:34:07:28:0d:d5:af:51:50:b3:b3:6a:00:
c8:f8:4c:25:dd:66:47:f7:fb:45:75:93:81:f7:a7:
67:cb:5c:e1:13:f7:94:fa:27:42:b1:60:b5:3f:fc:
72:0f:54:f2:95:2d:8c:98:98:af:46:65:64:f9:9b:
6f:e2:e9:cb:d2:1b:d1:0f:ac:cd:c7:b7:85:b3:95:
7e:37:1b:b6:4a:a7:a5:ac:17:d9:06:b6:4b:9e:50:
a5:a5:5f:24:de:18:fe:8c:bd:68:6d:8f:3a:72:c8:
f0:c9:f2:92:0e:7e:a0:ea:7d:2b:41:f9:49:e4:e4:
7d:e7:e5:f9:50:36:88:9b:90:51:13:09:e1:ea:27:
63:bf:e9:da:24:f0:b3:4d:f8:79:cd:53:2c:fa:12:
4c:7a:5a:b0:dd:a4:50:93:c7:01:79:3a:22:4b:d9:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:7F:25:6E:90:5F:10:C8:71:73:5A:3D:D3:0D:9C:5E:86:A0:15:78
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/An8lbpBfEMhxc1o90w2cXoagFXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.84.0/24
192.121.86.0/24
192.121.100.0/24
192.121.121.0/24
194.14.3.0/24
194.68.48.0/24
194.68.230.0/24
194.71.2.0/24
194.71.25.0/24
IPv6:
2a01:280:1::/48
2a01:280:4::/47
Signature Algorithm: sha256WithRSAEncryption
c2:61:38:c3:75:6f:06:fc:14:15:47:a3:b9:c1:7f:fb:3e:4f:
7d:9a:87:b7:29:5d:20:72:a1:32:7b:b1:a8:ca:58:39:68:f6:
b1:74:11:e6:9b:0d:3e:6d:39:22:5e:4e:9a:c6:07:5f:d3:16:
02:5a:a9:69:d9:d0:63:0b:13:fb:45:7b:c1:ff:93:8b:a5:9e:
f0:31:fc:ed:aa:e0:18:84:da:47:f1:27:c3:10:b1:f9:5e:b7:
38:0e:27:80:84:b6:fd:56:5e:ce:23:9b:c5:3b:a3:70:65:5c:
d1:d7:a2:35:48:e8:6e:1b:6a:13:c8:46:31:a0:e1:00:74:3e:
0b:dc:92:3b:ec:a1:da:28:e8:8f:41:19:fd:f7:a0:35:a9:3b:
9e:b5:6c:80:9a:1a:76:6a:f8:53:a1:1d:f9:e1:9b:37:84:7e:
9c:81:4c:4e:b7:e5:71:4d:2b:d3:53:e5:8e:6a:25:0e:1a:e8:
5e:b0:88:4e:83:63:95:d1:d6:8c:f3:7d:92:27:ed:74:3e:13:
fe:60:98:06:f5:10:4a:34:1b:64:f1:57:3f:9f:1f:14:b3:d7:
6e:22:c0:33:5a:d9:5d:de:a6:45:4d:87:79:b6:85:1a:b7:e0:
86:2e:32:ff:63:33:69:ed:11:21:43:2a:db:b5:8b:6d:f9:ed:
04:f9:06:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:04:53 2024 by rpki-client on console-ams.rpki-client.org