Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/U648g83LLHL3EkL1zMmq8_cWIi0.roa
File: U648g83LLHL3EkL1zMmq8_cWIi0.roa (raw, json)
Hash identifier: MKVITtNSAXYpYjgYGZ8XJm3JcD2/cFqihGoEcC8RopY=
Subject key identifier: 53:AE:3C:83:CD:CB:2C:72:F7:12:42:F5:CC:C9:AA:F3:F7:16:22:2D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC8030B081E82186B0DCD3338A63A2E55
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/U648g83LLHL3EkL1zMmq8_cWIi0.roa
Signing time: Tue 02 Jan 2024 02:31:31 +0000
ROA not before: Tue 02 Jan 2024 02:31:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 192.121.247.0/24 maxlen: 24
192.121.82.0/24 maxlen: 24
193.234.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 20:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:0b:08:1e:82:18:6b:0d:cd:33:38:a6:3a:2e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53ae3c83cdcb2c72f71242f5ccc9aaf3f716222d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:32:49:9a:da:4b:3b:ca:78:e1:80:e3:06:e9:
f4:a6:d2:96:7d:86:92:40:5e:ba:07:2e:49:10:ef:
25:aa:5c:df:d7:53:64:2f:70:f3:25:01:de:fd:3c:
7a:c7:bb:7b:6a:b9:33:40:98:c3:1b:7b:6d:f7:4b:
5d:40:cd:7d:ed:75:b2:f5:d0:09:91:c8:74:b8:c3:
26:c6:18:4a:69:0b:b2:29:4f:c6:5b:b4:e1:03:dc:
21:4e:35:c1:41:fe:35:dc:da:b0:ad:98:f4:6b:ab:
b3:b2:6a:ad:d1:e6:b8:cd:7e:8b:0e:e9:e5:63:76:
71:41:89:c2:fa:8a:7d:e1:62:ae:cb:63:55:3e:c6:
fd:87:9b:4b:a3:a5:51:40:fa:8b:8a:ee:a7:c7:52:
1c:4e:51:11:b6:c1:16:ee:7a:5b:96:4a:2f:64:5d:
4a:e5:e9:8f:e2:3e:4b:9a:5e:0e:a9:43:30:c7:22:
0f:bf:c4:1e:9d:42:37:c6:c0:ed:9c:e4:52:9b:b2:
09:04:e3:68:c2:8d:8b:23:85:60:47:36:60:2f:6c:
c5:9b:c0:75:fe:44:73:df:ac:8c:4a:d6:51:08:30:
41:71:e2:53:5c:7d:50:83:2c:2e:a6:9d:dc:91:c6:
69:56:6e:7a:f0:4e:4e:51:e1:ad:53:7b:c2:25:a4:
38:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AE:3C:83:CD:CB:2C:72:F7:12:42:F5:CC:C9:AA:F3:F7:16:22:2D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/U648g83LLHL3EkL1zMmq8_cWIi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.82.0/24
192.121.247.0/24
193.234.55.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:25:f6:93:ff:43:4d:e0:69:e8:07:ba:9f:29:16:76:d4:d5:
4c:45:a7:e0:6e:10:24:4d:e9:fc:0c:68:8c:16:e2:98:2e:fc:
fb:9b:16:15:13:b1:58:d2:c9:e1:c9:62:a0:99:35:ce:bb:15:
e3:6b:15:ed:a6:83:fe:74:6c:40:07:14:25:0a:07:2a:dc:44:
aa:ec:e1:80:a4:52:fa:fe:12:4c:c0:bd:67:d6:ed:7e:51:08:
4c:82:eb:6d:6b:9d:5f:4a:df:ec:cf:c1:d2:c5:dd:61:48:aa:
ce:7b:40:b8:81:6c:f3:25:40:28:fe:25:09:b8:ac:5e:71:2a:
0b:5d:89:05:e4:dc:b4:64:99:e6:c1:07:bf:bd:3c:de:18:52:
75:10:d6:d2:35:10:4e:e8:e1:49:88:df:60:02:fd:87:ea:4e:
a0:ad:54:71:4f:ee:46:b7:19:8e:f7:ac:6f:68:31:aa:6f:25:
6f:20:8f:78:a6:82:2d:2c:45:69:22:68:21:19:91:71:2b:e1:
c9:80:0e:47:4b:4c:57:62:b1:9e:7c:95:13:c2:94:bd:f6:2d:
b3:f0:0c:b0:af:0a:bd:57:d8:9b:3e:36:1f:39:ed:e0:4c:2a:
3e:ad:bc:98:a2:72:af:d6:99:f2:b2:83:64:e7:0a:a9:f0:20:
92:4e:5e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 02:04:37 2024 by rpki-client on console-ams.rpki-client.org