Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ey9LYUlXS0IeYDMPwsk1woALfyo.roa
File: ey9LYUlXS0IeYDMPwsk1woALfyo.roa (raw, json)
Hash identifier: J/oG5IC96PbN3mQ/5gl9Tiwr+20JZ99OiUfgFmwgU6Q=
Subject key identifier: 7B:2F:4B:61:49:57:4B:42:1E:60:33:0F:C2:C9:35:C2:80:0B:7F:2A
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC80303736CECAA869B7BD2475A0E4DE4
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ey9LYUlXS0IeYDMPwsk1woALfyo.roa
Signing time: Tue 02 Jan 2024 02:31:29 +0000
ROA not before: Tue 02 Jan 2024 02:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206884
IP address blocks: 194.14.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:03:73:6c:ec:aa:86:9b:7b:d2:47:5a:0e:4d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7b2f4b6149574b421e60330fc2c935c2800b7f2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:74:96:f6:79:d7:f0:3c:83:d7:56:c9:38:83:
f6:21:8b:89:6f:c1:e7:49:7a:ad:25:60:2d:5d:5e:
0a:37:f8:fc:6e:bc:5a:4b:8d:be:ec:68:5d:c5:7d:
2b:75:c0:16:33:58:3b:32:08:65:46:f2:2c:1a:38:
11:e6:c7:11:f1:31:c5:c5:00:9a:fc:94:6b:d9:99:
62:fe:db:a0:a4:8e:8d:cc:23:42:93:71:78:34:09:
e1:26:17:2e:12:bb:8c:b6:17:20:f7:9a:cf:44:89:
e0:7f:0c:11:39:22:ab:fd:35:eb:6e:93:88:f3:96:
6b:36:f7:af:46:93:1d:3a:ff:85:c6:3b:51:ed:48:
ba:c7:2e:88:21:23:d8:71:92:3c:dc:33:28:d5:12:
90:0b:8b:29:e1:3d:90:00:74:2b:af:c7:de:19:35:
76:8b:90:b2:7d:6b:30:cd:87:c6:0a:c7:71:01:d4:
a5:b1:e5:be:e3:e0:71:91:48:a6:13:15:d9:4c:6c:
00:12:35:57:84:40:e3:4a:e0:30:c3:5b:82:7f:35:
8d:e6:06:a5:3f:af:34:1e:37:dc:2d:05:49:5c:20:
90:26:bc:b6:27:e6:e6:72:42:76:3c:cc:0d:5a:b9:
39:34:fb:3d:16:1c:11:be:bd:1d:1a:46:f0:41:87:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2F:4B:61:49:57:4B:42:1E:60:33:0F:C2:C9:35:C2:80:0B:7F:2A
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ey9LYUlXS0IeYDMPwsk1woALfyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.14.76.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:60:85:ef:eb:1b:b2:e7:7c:7d:ea:55:a0:ea:a9:f0:c3:5d:
c3:f1:97:c5:ed:06:18:b9:06:fc:17:cc:b5:af:07:6f:97:97:
f1:46:00:78:f7:b0:cf:92:7e:f9:b6:de:77:3f:2f:c6:de:33:
5e:c0:32:0e:ba:55:9a:3b:2d:7a:1b:4b:b0:0d:cb:2c:77:b6:
ac:b0:0c:a4:d5:94:59:f8:09:ef:39:7e:42:55:5c:15:52:69:
a7:49:05:33:11:01:08:67:86:56:6e:7a:85:61:ff:c8:42:9b:
88:e8:25:a5:64:09:e3:dc:51:0d:fe:07:13:89:d8:e0:00:45:
0c:e6:cc:4d:dc:d5:aa:ab:71:14:10:80:34:5e:86:5e:fe:66:
15:93:55:21:b1:8b:3a:89:5c:6f:bd:ba:27:93:66:3a:df:cf:
5c:00:00:d7:5d:d7:d7:f8:e2:c5:f5:7a:0d:88:b9:de:84:d0:
5c:f1:ea:a2:4e:b9:d2:99:97:53:c3:3a:ae:57:0f:05:60:c2:
c7:4a:16:b4:73:62:de:13:4a:88:4f:8b:30:3b:17:d0:39:42:
46:38:3c:44:53:6c:23:50:0a:2e:89:c9:8f:9e:ac:7d:42:36:
f6:d4:6e:48:62:e4:82:c2:54:da:c3:51:4e:e4:50:e8:e5:61:
69:53:c1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:02:14 2024 by rpki-client on console-fra.rpki-client.org