Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Iacxd6dT8HnEMuJJBHMI0dgWQwQ.roa
File: Iacxd6dT8HnEMuJJBHMI0dgWQwQ.roa (raw, json)
Hash identifier: 409yU3ImJ9kDO1JauVYvDFrBVD+iOw8gBItVK3DvC/E=
Subject key identifier: 21:A7:31:77:A7:53:F0:79:C4:32:E2:49:04:73:08:D1:D8:16:43:04
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802EB58D75B17F90A1BF50CDF103145
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Iacxd6dT8HnEMuJJBHMI0dgWQwQ.roa
Signing time: Tue 02 Jan 2024 02:31:23 +0000
ROA not before: Tue 02 Jan 2024 02:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42201
IP address blocks: 192.121.245.0/24 maxlen: 24
194.132.123.0/24 maxlen: 24
192.121.246.0/24 maxlen: 24
193.181.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:eb:58:d7:5b:17:f9:0a:1b:f5:0c:df:10:31:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=21a73177a753f079c432e249047308d1d8164304
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:62:a9:59:5d:a0:b5:74:76:fc:7f:4a:75:a8:
7f:98:cf:34:4e:29:fd:c3:03:15:a4:56:49:a8:07:
9e:5c:aa:90:aa:62:fa:ea:b9:ec:05:68:2f:90:19:
25:e4:36:70:2b:55:a8:c9:ad:c7:79:d0:a4:1d:d5:
f4:ed:fa:91:7d:5d:0c:ad:12:47:4f:00:46:c5:cd:
af:d9:12:26:74:0c:40:c7:1c:ba:9d:88:16:77:33:
db:85:85:ae:13:a7:b3:d9:0b:00:64:92:89:22:b9:
af:21:4f:f3:bb:2b:c8:30:d1:98:49:bd:7e:76:e8:
e4:06:05:a1:74:e2:f8:1d:81:bf:03:92:83:a2:84:
c5:22:24:a6:2e:30:56:80:65:8a:e7:2e:f6:16:3c:
76:ba:54:28:93:ba:62:82:fc:4f:36:b9:8c:69:ed:
0c:c5:b6:70:a3:a1:f2:c9:04:3b:e2:de:b0:df:55:
2c:25:2f:7d:48:b2:1c:1a:c1:86:8b:e6:42:72:85:
a7:5a:12:4c:24:77:09:db:c4:2f:8f:53:a9:ea:38:
ab:8a:3a:cd:95:b8:51:ad:13:10:e6:36:b1:2c:e3:
17:3f:2f:1a:d4:40:34:70:b7:3a:e4:a0:eb:98:eb:
94:33:f1:66:56:10:95:e3:d1:35:0f:fe:22:53:b1:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:A7:31:77:A7:53:F0:79:C4:32:E2:49:04:73:08:D1:D8:16:43:04
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/Iacxd6dT8HnEMuJJBHMI0dgWQwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.245.0-192.121.246.255
193.181.35.0/24
194.132.123.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:50:f8:cb:c4:01:17:84:71:9a:ba:c7:9a:20:1f:05:9c:92:
42:85:01:91:ae:17:d4:e5:66:85:98:21:69:63:b4:99:e1:10:
86:5e:da:34:16:d0:95:5a:dc:09:1d:a1:bc:25:fc:fd:f9:31:
5c:b9:3a:04:46:f0:97:6c:1c:46:a2:6d:8f:c5:fc:33:49:7b:
b0:e0:1c:84:56:4c:b3:3b:47:86:eb:e5:08:43:f6:db:ab:44:
b0:eb:5e:5a:95:e6:06:59:66:83:37:97:65:5e:d5:e8:39:af:
e5:fe:d8:57:e5:27:42:fd:e2:13:ac:1c:b0:a5:6a:39:27:b6:
75:a5:40:96:f3:7a:4c:85:3e:eb:0c:a0:95:05:3a:27:47:75:
03:86:6d:22:f8:51:24:df:dc:86:54:47:fe:bc:5e:3d:c8:4c:
7e:6d:a1:74:99:bc:d3:e1:08:56:b1:80:53:40:12:80:fa:8a:
ad:08:eb:c8:d4:bc:2a:7a:23:81:26:fe:e4:38:e9:c5:5e:85:
7b:37:14:d9:12:5b:ec:ee:21:95:79:d1:1b:ef:bc:2e:36:7d:
d4:a2:0e:8a:67:f3:c8:49:11:67:f2:21:ed:89:ed:a6:d3:40:
50:03:33:45:71:c2:fa:a3:21:f1:e0:44:0a:37:cf:e2:8d:1b:
5d:bb:02:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 10:39:48 2024 by rpki-client on console-ams.rpki-client.org