Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/C3hlQ2Frg8rgJ1aqL_lohZ-AgbE.roa
File: C3hlQ2Frg8rgJ1aqL_lohZ-AgbE.roa (raw, json)
Hash identifier: rEZD7xsw/fZGpqA2KDPBMliaoUVEtV7YiutR15Y9CGA=
Subject key identifier: 0B:78:65:43:61:6B:83:CA:E0:27:56:AA:2F:F9:68:85:9F:80:81:B1
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC803084DC1C5FAF2E688627A52D99426
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/C3hlQ2Frg8rgJ1aqL_lohZ-AgbE.roa
Signing time: Tue 02 Jan 2024 02:31:31 +0000
ROA not before: Tue 02 Jan 2024 02:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210140
IP address blocks: 193.235.160.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:08:4d:c1:c5:fa:f2:e6:88:62:7a:52:d9:94:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0b786543616b83cae02756aa2ff968859f8081b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:e8:24:5c:05:f7:93:11:13:39:2f:a2:74:
50:17:3c:2a:b1:7e:5a:fc:c8:c3:b2:dd:9a:21:21:
47:f0:71:28:b7:2c:e2:1a:e3:5f:08:bd:9a:b6:19:
e4:66:ae:e0:1d:c2:d9:32:73:47:81:87:3f:42:56:
74:cd:0c:6f:4b:3a:a7:26:ef:25:86:4d:8e:22:69:
d0:d3:78:7b:06:5e:66:e8:8d:48:b1:c3:31:43:ce:
f3:8a:b9:fb:6a:4a:3d:5d:3d:49:e8:96:39:d0:fb:
33:f1:c3:08:2d:e5:17:a6:54:19:63:31:fb:ec:1f:
0c:0a:1b:2f:18:62:40:dc:ce:c5:b5:99:75:ae:ec:
f4:43:29:02:d9:72:46:65:78:2c:f1:8c:bc:76:b0:
21:c6:5d:7b:5b:69:80:d3:fe:2f:41:6f:43:59:53:
63:f5:98:09:e6:6c:31:6b:27:b7:d0:13:d4:d3:5b:
2a:d9:4c:32:30:75:e1:e2:01:1b:a8:2c:34:1b:1b:
23:d7:94:fd:b4:c5:8a:19:ab:fb:29:c9:00:c9:be:
cf:b6:84:c3:e0:7a:a5:8e:c7:75:4a:0e:ff:ba:61:
56:4f:f7:25:fb:7e:04:98:bd:f3:74:45:2d:07:b2:
b7:47:ef:d3:a8:c5:bd:64:ff:20:22:76:7a:d1:1e:
00:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:78:65:43:61:6B:83:CA:E0:27:56:AA:2F:F9:68:85:9F:80:81:B1
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/C3hlQ2Frg8rgJ1aqL_lohZ-AgbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.160.0/19
Signature Algorithm: sha256WithRSAEncryption
0d:04:cd:92:8e:8b:58:d4:73:93:8c:20:d1:ea:67:94:9e:4d:
0c:7e:37:8f:a9:f9:b8:1e:9c:28:2b:82:8d:0b:8c:09:08:64:
81:52:15:a8:a4:14:ee:ff:8b:1c:53:c1:f1:54:c8:a1:a4:21:
40:5c:bf:03:aa:2a:7d:d0:7b:c3:9d:17:61:bc:a3:db:fd:df:
3f:5b:ea:b6:2b:c6:95:7d:c2:1a:4e:66:b9:59:0f:22:a3:3b:
3a:53:e4:14:d9:78:da:d7:35:b7:e4:ea:ad:7f:52:85:c1:21:
e9:04:37:39:dc:6b:8d:fc:ea:85:6d:bf:b7:e0:e9:71:21:b3:
11:8e:69:43:69:94:76:92:14:8b:58:f7:0b:2f:05:12:55:36:
06:65:46:68:6c:23:18:86:2a:7b:d1:ef:4a:f9:2c:8f:83:55:
b3:a3:02:cb:5e:17:03:0f:9d:1c:d7:e9:ba:40:f1:43:a1:f1:
56:e4:2a:4e:7a:e9:f8:09:20:0c:0a:a4:62:10:24:3f:53:bd:
c3:1a:83:65:23:92:b4:5d:ab:e7:4a:dd:dc:87:d9:72:0e:a7:
53:19:96:6c:a4:c7:15:d9:5a:fb:a7:2b:b6:f8:f2:1c:9c:55:
ca:7b:bb:1b:42:42:89:77:08:8d:92:26:6b:c5:f1:4b:4a:94:
70:2f:2c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 10:39:48 2024 by rpki-client on console-ams.rpki-client.org