Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/L10eNrz2olzWRzz4oFuVzRHLrOc.roa
File: L10eNrz2olzWRzz4oFuVzRHLrOc.roa (raw, json)
Hash identifier: WHYQ7p0hhfxc3ORk0uHZsofbsZB6PLXoMPa1BKhOj7w=
Subject key identifier: 2F:5D:1E:36:BC:F6:A2:5C:D6:47:3C:F8:A0:5B:95:CD:11:CB:AC:E7
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802EC687C502E6AE96646E80B316AA2
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/L10eNrz2olzWRzz4oFuVzRHLrOc.roa
Signing time: Tue 02 Jan 2024 02:31:23 +0000
ROA not before: Tue 02 Jan 2024 02:31:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43065
IP address blocks: 192.71.21.0/24 maxlen: 24
193.183.196.0/22 maxlen: 22
194.14.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:ec:68:7c:50:2e:6a:e9:66:46:e8:0b:31:6a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2f5d1e36bcf6a25cd6473cf8a05b95cd11cbace7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:38:b8:2d:d1:de:fd:d3:d1:26:4b:26:c8:
de:f5:be:2e:26:d0:09:39:20:2f:f0:d7:2e:de:ff:
4c:f8:90:c4:c3:13:55:94:6e:69:99:11:56:0b:05:
53:e3:e2:fc:f2:3e:39:4a:4f:b7:0e:c9:11:72:4d:
40:ce:63:1d:05:8b:fc:83:26:23:a5:71:a7:1d:af:
b6:ba:d4:cb:25:7f:d0:b2:d7:e7:57:04:c3:2b:51:
a4:f1:9b:46:05:98:1e:2b:d8:07:fa:5d:92:f5:c6:
b1:cb:d3:0b:23:de:a6:8a:eb:86:5c:d2:ba:9c:f0:
8b:4e:57:9f:4a:62:55:44:6b:35:f7:a9:fb:23:97:
68:70:d8:3a:29:41:b1:77:fc:71:c4:85:c0:ef:d1:
6c:fb:ae:e8:c5:12:9d:4b:70:10:81:6e:f0:74:1e:
d7:ef:05:6d:b0:66:71:78:d1:f0:0d:00:b4:2f:f7:
ac:10:3a:9a:be:37:28:04:78:26:65:2e:25:4f:37:
fd:f7:23:7f:0f:1d:11:50:9b:7f:a2:ae:fc:cd:f3:
80:f7:69:00:5f:42:f1:dd:fe:c8:ab:a4:a6:f6:e1:
5e:0e:75:68:1e:bd:f4:eb:44:d9:29:15:e5:40:fd:
80:f5:e2:94:89:18:80:81:1f:9d:93:39:90:e2:d3:
9c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:5D:1E:36:BC:F6:A2:5C:D6:47:3C:F8:A0:5B:95:CD:11:CB:AC:E7
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/L10eNrz2olzWRzz4oFuVzRHLrOc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.21.0/24
193.183.196.0/22
194.14.132.0/24
Signature Algorithm: sha256WithRSAEncryption
17:96:b3:1d:3a:de:17:12:e2:25:63:52:bc:cf:f8:d3:05:5c:
24:bb:9d:30:30:7a:5d:aa:e4:95:d7:2a:36:44:5a:ae:68:fa:
02:79:15:b2:7e:97:a7:46:7a:2f:32:14:c5:cf:09:e4:97:07:
5a:2a:65:91:73:18:58:ca:c0:b4:b9:44:c7:f7:49:d2:ca:8c:
ac:e4:8d:e9:0c:55:f4:d2:30:aa:c7:10:2d:e2:32:df:fc:ae:
2d:d8:03:a0:a8:ee:fa:7a:02:84:72:b6:e8:0f:ee:d3:55:93:
4a:1d:9f:f4:b6:54:7f:98:6f:13:0c:c2:11:c9:1f:8e:31:ce:
fc:1d:77:56:48:c7:29:07:70:94:08:e8:ad:f0:a4:6e:eb:2a:
bd:a6:cd:54:0a:ec:ed:57:38:eb:8f:52:e8:0c:44:22:f9:d1:
c2:f0:14:3a:7c:6f:8d:6d:46:5e:57:08:b7:6b:c3:96:8f:97:
8b:85:ab:21:0f:8d:84:63:58:fc:39:02:0e:61:35:dd:e7:ad:
b9:87:12:99:32:59:c2:f8:8d:1d:34:4c:fc:5f:df:fd:64:69:
f1:dd:a8:f5:b8:d7:f1:9a:b4:30:16:ad:20:4f:95:5e:60:39:
96:16:50:82:76:dd:da:3e:26:8c:16:b3:32:4d:18:e5:ee:d1:
5f:e9:42:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 22:32:25 2024 by rpki-client on console-ams.rpki-client.org