Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YD0aaLmZV1yE_p92Dlh8pfvh26k.roa
File: YD0aaLmZV1yE_p92Dlh8pfvh26k.roa (raw, json)
Hash identifier: 4r8b+EDR/+TvXxLU9qc/qPe7J+LklJ5s95+hJsC8W14=
Subject key identifier: 60:3D:1A:68:B9:99:57:5C:84:FE:9F:76:0E:58:7C:A5:FB:E1:DB:A9
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018F808624654E46A7FF9680238F41286968
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YD0aaLmZV1yE_p92Dlh8pfvh26k.roa
Signing time: Thu 16 May 2024 08:30:25 +0000
ROA not before: Thu 16 May 2024 08:30:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 396982
IP address blocks: 192.121.90.0/24 maxlen: 24
2a01:280:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:86:24:65:4e:46:a7:ff:96:80:23:8f:41:28:69:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: May 16 08:30:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=603d1a68b999575c84fe9f760e587ca5fbe1dba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:48:b1:44:a0:f1:2c:e5:b6:d9:0a:d5:89:d0:
bc:38:b0:4a:9e:d4:eb:b7:ab:45:d5:24:c6:dc:a7:
ba:23:dd:89:f0:00:19:e5:80:bd:4e:b8:4c:0a:90:
da:1b:3b:2a:42:a5:4a:d7:ba:0c:8e:68:f5:aa:08:
5a:06:e0:19:a0:3c:74:9e:23:9f:6f:9b:99:79:6b:
f8:f4:32:48:08:a6:dc:d4:ac:ce:85:b5:3d:5e:ec:
17:1d:39:c9:d3:e9:67:a8:04:36:c7:ef:6b:b8:d7:
8c:67:88:45:ca:35:89:2a:5c:ed:ed:46:59:45:82:
6b:15:a8:f6:27:2f:2b:2e:1a:f2:6b:34:b5:d9:8e:
57:c9:a3:ca:68:c7:4a:b6:8e:1b:8e:aa:d9:fb:c2:
44:cb:a4:17:35:3f:da:eb:57:37:8b:0a:04:c6:49:
6e:44:84:2a:ec:aa:c4:14:71:82:f3:bf:80:44:cf:
d9:36:9f:bf:2e:a2:b1:bf:cd:51:34:7a:ac:64:cb:
be:65:bb:53:af:ab:36:1a:51:16:16:14:d1:ed:6b:
55:0e:23:23:c9:bf:e1:60:49:f6:26:2a:18:a7:60:
68:5a:b1:be:4d:62:08:24:de:f9:ce:d8:60:f8:c7:
1d:fb:9a:63:d4:35:60:f6:7d:a6:f3:4b:02:60:7e:
76:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3D:1A:68:B9:99:57:5C:84:FE:9F:76:0E:58:7C:A5:FB:E1:DB:A9
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/YD0aaLmZV1yE_p92Dlh8pfvh26k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.90.0/24
IPv6:
2a01:280:200::/40
Signature Algorithm: sha256WithRSAEncryption
5d:02:87:58:87:a6:28:ef:42:c4:5e:b8:8d:c5:87:7e:af:e1:
d0:52:2b:26:15:1d:19:de:9e:a3:bf:55:94:84:6c:c9:76:27:
a4:46:82:88:fd:76:05:e7:6a:4e:e3:66:e5:42:4b:c9:8a:7b:
87:d3:60:41:75:93:06:e7:eb:6f:ce:f8:61:1b:c2:fe:1c:69:
1f:56:86:09:f7:d4:a0:90:c6:a6:67:45:69:fc:42:8c:5f:5e:
88:f6:30:61:20:f4:5f:cb:44:68:c6:02:2e:07:d8:60:e1:f8:
61:15:06:41:36:21:1c:36:2e:97:2e:1a:cf:14:77:c9:84:83:
93:fb:a1:aa:c0:90:46:b5:67:8e:45:df:74:46:a8:70:78:86:
55:2e:e7:8a:45:4c:6e:f8:98:d4:0f:b5:14:7a:2d:49:47:4d:
01:12:92:0e:3b:ed:aa:30:7c:a3:3a:cc:1c:85:54:f6:88:c1:
0e:98:ae:df:27:af:4a:5e:20:ad:d6:1d:dd:53:d0:dc:2f:57:
b0:1e:09:00:17:bc:13:6c:54:c6:34:58:0c:8e:ba:b7:4a:2d:
e0:79:f7:89:9c:fc:76:5d:76:de:6d:98:d8:cf:b3:dd:cf:53:
5e:f3:ca:20:5b:d4:88:47:8a:31:15:33:a9:de:8c:97:f1:0c:
40:88:22:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:31:58 2024 by rpki-client on console-ams.rpki-client.org