Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QozfZ5zRVhUJQYK3ztDP38HVOkE.roa
File: QozfZ5zRVhUJQYK3ztDP38HVOkE.roa (raw, json)
Hash identifier: nDFYIX8bm8kfeq4l5GHcWgeXQnGn2RcHvcHhhKnZtpI=
Subject key identifier: 42:8C:DF:67:9C:D1:56:15:09:41:82:B7:CE:D0:CF:DF:C1:D5:3A:41
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802DB5531153B02309AA8A32567AC51
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QozfZ5zRVhUJQYK3ztDP38HVOkE.roa
Signing time: Tue 02 Jan 2024 02:31:19 +0000
ROA not before: Tue 02 Jan 2024 02:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8280
IP address blocks: 192.71.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:db:55:31:15:3b:02:30:9a:a8:a3:25:67:ac:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=428cdf679cd15615094182b7ced0cfdfc1d53a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:83:b0:bb:bb:2d:d8:17:82:bc:65:f5:1d:e0:
e9:72:8a:15:46:e6:b8:be:fd:0f:ce:d0:be:dd:fd:
20:70:98:40:5e:d2:b1:f5:6f:50:6a:3d:4a:37:11:
f9:82:57:8a:0d:7f:9e:4d:1d:4a:8c:d0:c5:9d:cb:
2e:f6:e3:03:39:90:b3:cd:b8:dc:b4:ce:46:28:e6:
4d:b0:7c:d1:28:8c:7f:d1:83:94:f2:03:0b:41:d8:
c1:af:98:24:56:8d:47:c4:c9:94:76:d0:04:9d:82:
d5:e7:1d:23:f4:52:db:fc:d8:89:6e:06:ba:45:64:
ad:b5:54:ba:92:81:e0:61:7c:49:6a:67:16:bf:ab:
d5:93:37:a1:fc:1a:65:70:ca:f9:98:a0:f3:bd:cf:
23:bf:d9:f1:87:1b:9c:98:da:f0:c0:8a:55:ef:a4:
21:7f:06:cf:04:aa:58:6e:37:23:76:d2:38:1e:95:
a6:6b:05:aa:e3:69:dd:97:4f:ae:f1:21:43:b5:a6:
a3:63:b4:2d:97:cf:7f:a4:a6:16:3e:61:d5:7d:f0:
2a:07:82:19:66:c7:37:eb:92:74:c0:2d:9a:c8:08:
1f:04:31:de:be:ce:1d:4a:76:ce:68:d2:29:ba:0a:
a1:fd:fd:f0:f1:f2:15:3e:85:8e:d5:3e:90:dd:c4:
62:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8C:DF:67:9C:D1:56:15:09:41:82:B7:CE:D0:CF:DF:C1:D5:3A:41
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/QozfZ5zRVhUJQYK3ztDP38HVOkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.166.0/24
Signature Algorithm: sha256WithRSAEncryption
52:12:4d:59:f7:67:4e:74:be:36:d9:cc:42:1b:dd:37:9a:ff:
b3:9a:6e:e4:c5:bc:cb:7c:bb:27:f0:2d:6e:70:9d:f9:70:7b:
56:c8:2d:6d:9b:d7:9e:6d:53:dc:a2:98:ab:3f:c1:a8:90:1a:
9f:db:73:21:e9:26:5d:7c:16:2b:64:f4:df:41:a3:49:3f:31:
fb:4b:1e:bd:55:36:a9:9f:01:5e:9a:ee:2e:c1:0e:eb:bb:dd:
8b:29:4c:ca:92:7f:c7:ee:af:c3:ed:ce:ee:fd:6b:7f:4e:e6:
77:24:b2:98:1f:83:1f:60:2e:07:ee:77:f5:7d:8e:74:1b:b7:
3c:c6:4c:1b:c2:50:94:0c:42:b9:4d:b6:25:94:01:2f:2c:37:
c3:8a:3e:af:9a:04:20:92:aa:3c:55:25:a8:97:48:ce:f3:39:
76:9e:5d:34:12:6c:b7:e4:c2:dc:39:80:ff:e7:58:ef:86:27:
89:9e:81:0f:3a:6f:73:93:6b:ee:d7:fc:ad:a8:a0:50:57:52:
03:bc:e5:8f:b7:05:90:9e:87:cb:f4:54:ca:68:35:4b:73:d3:
33:58:10:12:7c:fc:6b:89:96:2e:16:70:bf:8b:cc:a7:ce:e9:
a6:28:85:e6:60:c4:6d:8f:95:74:ae:4a:5e:c7:c9:3f:42:6e:
40:20:d7:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:02:14 2024 by rpki-client on console-fra.rpki-client.org