Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dT5mzLfU0noOOHbV-rTt9tQt2po.roa
File: dT5mzLfU0noOOHbV-rTt9tQt2po.roa (raw, json)
Hash identifier: RjOyrY8npkFwhklVJ5di4RZr3z1MLSMgZGpoG54Sj7g=
Subject key identifier: 75:3E:66:CC:B7:D4:D2:7A:0E:38:76:D5:FA:B4:ED:F6:D4:2D:DA:9A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018DC5E11C9E0A5CBDDB760F9044B1A58099
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dT5mzLfU0noOOHbV-rTt9tQt2po.roa
Signing time: Tue 20 Feb 2024 09:38:00 +0000
ROA not before: Tue 20 Feb 2024 09:38:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8473
IP address blocks: 192.71.5.0/24 maxlen: 24
192.121.101.0/24 maxlen: 24
193.181.65.0/24 maxlen: 24
194.71.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c5:e1:1c:9e:0a:5c:bd:db:76:0f:90:44:b1:a5:80:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 20 09:38:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=753e66ccb7d4d27a0e3876d5fab4edf6d42dda9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:df:36:cc:44:5d:fc:82:d6:24:8e:1a:19:35:
b6:59:ce:f7:47:fe:16:c6:26:cf:c7:36:f7:ad:e9:
6c:e1:83:64:53:ac:6a:c0:44:e4:b2:38:47:80:3b:
8b:25:e5:6c:2e:cd:13:1a:6f:a5:7d:25:db:40:9b:
81:63:02:27:d9:50:f0:d2:65:11:b4:a1:79:9d:a6:
62:6d:12:b0:da:f8:7c:94:36:4b:0b:d2:bb:6a:e1:
c1:ac:52:85:6b:76:ef:44:e2:5d:56:9c:7e:67:a1:
a0:76:13:85:f3:e9:09:bd:6e:7d:0a:59:07:fc:bc:
92:53:3f:b8:b4:fc:96:02:81:6f:46:c8:e5:73:e7:
7c:04:3f:f3:31:17:f4:ac:51:bc:b7:14:73:7a:93:
f9:06:d5:0f:ff:97:c7:74:f4:1b:d4:53:50:7c:0f:
54:db:e2:29:f2:b6:d4:3e:82:36:16:3c:0b:98:34:
6e:f7:2d:a6:45:0a:e3:27:a8:33:73:3c:3c:0b:39:
cc:17:37:99:63:9e:c6:8b:2d:73:ab:75:4f:d1:e0:
09:60:be:f3:76:1b:a5:0e:ad:51:ec:7a:a7:b8:fa:
2e:a1:48:27:12:fe:d7:95:df:e8:0f:ce:68:88:14:
66:48:bb:ed:fe:75:e3:dd:c2:ae:fe:82:9d:4d:35:
dc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:3E:66:CC:B7:D4:D2:7A:0E:38:76:D5:FA:B4:ED:F6:D4:2D:DA:9A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/dT5mzLfU0noOOHbV-rTt9tQt2po.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.5.0/24
192.121.101.0/24
193.181.65.0/24
194.71.215.0/24
Signature Algorithm: sha256WithRSAEncryption
12:d3:fd:f2:61:ed:92:8b:f3:10:d5:5e:a9:91:22:a1:d9:a5:
9d:16:d3:f8:b4:df:13:e7:34:0c:ae:94:41:65:64:99:7e:d8:
17:21:57:b3:b7:bd:92:45:4d:bb:ae:ac:28:8f:45:83:8b:03:
14:6c:ef:9e:9e:2c:35:c3:0b:10:6b:d2:95:0b:26:42:ac:8b:
56:22:76:26:56:72:24:43:ad:7a:f4:58:3e:35:bb:a9:9b:8c:
c8:60:3c:00:03:52:da:b4:1a:83:3d:9e:5f:36:70:47:50:78:
62:2e:e7:ce:7a:72:0b:89:a1:8d:86:cf:11:cb:18:4b:e9:30:
3a:9d:23:b1:22:05:d5:21:2f:b0:94:9e:4c:e9:87:2a:9a:23:
72:5e:fd:a4:05:59:92:f3:91:d2:46:8a:94:c5:77:fa:bb:94:
b6:28:e0:5d:30:67:3a:07:35:ff:f8:fd:40:58:8b:a1:3f:8d:
9c:fe:2b:cb:e5:c5:0e:b3:c4:5c:7e:2d:39:3e:72:65:fd:04:
bf:c6:ad:9c:a7:e3:a2:3c:3e:0e:c1:a6:f1:ca:11:84:23:c6:
e9:7d:74:94:67:e7:c9:eb:12:bb:bb:ba:5e:b8:33:0f:06:ec:
4f:df:ad:fd:d0:e9:89:f8:dc:b5:34:4c:1d:36:0c:8e:e9:3d:
ef:83:d0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:25:40 2024 by rpki-client on console-ams.rpki-client.org