Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hkW6uiU1lIlSe__6eL8tlFuUA44.roa
File: hkW6uiU1lIlSe__6eL8tlFuUA44.roa (raw, json)
Hash identifier: 3CAAt4uDbDDZSUSpk/iP/EHwMo6wII6GbDpLRRGmZl8=
Subject key identifier: 86:45:BA:BA:25:35:94:89:52:7B:FF:FA:78:BF:2D:94:5B:94:03:8E
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019353BC9D590484C1A317C6E2CE7009DA05
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hkW6uiU1lIlSe__6eL8tlFuUA44.roa
Signing time: Fri 22 Nov 2024 11:58:10 +0000
ROA not before: Fri 22 Nov 2024 11:58:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197942
IP address blocks: 192.36.180.0/24 maxlen: 24
192.121.9.0/24 maxlen: 24
192.121.242.0/24 maxlen: 24
193.180.81.0/24 maxlen: 24
193.180.160.0/23 maxlen: 23
193.182.121.0/24 maxlen: 24
193.183.182.0/24 maxlen: 24
193.183.188.0/24 maxlen: 24
193.234.70.0/24 maxlen: 24
193.234.81.0/24 maxlen: 24
193.234.93.0/24 maxlen: 24
193.234.198.0/24 maxlen: 24
193.234.203.0/24 maxlen: 24
194.14.187.0/24 maxlen: 24
194.14.218.0/24 maxlen: 24
194.71.64.0/22 maxlen: 22
194.71.68.0/22 maxlen: 22
194.71.72.0/21 maxlen: 24
194.71.80.0/24 maxlen: 24
194.71.81.0/24 maxlen: 24
194.71.82.0/24 maxlen: 24
194.103.18.0/24 maxlen: 24
194.132.133.0/24 maxlen: 24
2a01:280:3a8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:53:bc:9d:59:04:84:c1:a3:17:c6:e2:ce:70:09:da:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Nov 22 11:58:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8645baba25359489527bfffa78bf2d945b94038e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1c:04:3f:29:28:f9:7b:04:e0:6c:be:a0:78:
c3:da:da:63:8d:0f:2c:83:19:7d:44:06:a3:e4:6f:
01:07:c0:96:02:dc:7b:09:42:71:ef:eb:d2:05:ab:
37:23:1f:10:72:68:cf:e8:34:1f:09:d5:bb:64:9d:
db:96:a9:c0:3c:e9:e8:ca:2c:47:89:96:b4:f0:d3:
be:a5:c1:cc:69:96:f4:83:01:49:60:97:99:6d:ca:
a2:1a:42:6b:a6:98:f3:6f:fe:fb:35:2b:d3:0f:1f:
58:b1:14:41:39:ce:cc:26:87:91:4a:8f:4e:0c:28:
c9:a5:d1:79:6b:d4:0b:4e:32:4f:b2:87:8f:07:e0:
29:0b:8f:2a:e6:6a:c7:4c:d8:60:9c:cc:a4:0e:8d:
59:af:5d:27:19:c0:a4:dc:72:21:b9:dc:f3:26:c6:
09:7d:c4:db:f8:61:a1:53:c4:ed:ac:f3:ed:51:95:
30:8f:ff:7a:7c:c9:1d:c3:66:67:19:3e:40:6b:5b:
fc:5f:62:d0:9b:36:50:83:71:1c:9b:47:f9:79:97:
14:9c:bd:81:08:d5:ad:91:9c:bb:29:2d:a3:d4:50:
e2:3a:1b:ef:5c:f1:70:cb:db:4f:3c:da:ae:61:79:
73:9b:e1:c8:b8:75:2c:4f:b7:f0:72:50:ea:d9:6c:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:45:BA:BA:25:35:94:89:52:7B:FF:FA:78:BF:2D:94:5B:94:03:8E
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hkW6uiU1lIlSe__6eL8tlFuUA44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.180.0/24
192.121.9.0/24
192.121.242.0/24
193.180.81.0/24
193.180.160.0/23
193.182.121.0/24
193.183.182.0/24
193.183.188.0/24
193.234.70.0/24
193.234.81.0/24
193.234.93.0/24
193.234.198.0/24
193.234.203.0/24
194.14.187.0/24
194.14.218.0/24
194.71.64.0-194.71.82.255
194.103.18.0/24
194.132.133.0/24
IPv6:
2a01:280:3a8::/48
Signature Algorithm: sha256WithRSAEncryption
11:18:a7:b6:0b:c0:c0:70:49:92:37:11:8a:42:ad:a1:28:b3:
1e:90:0c:b5:85:d4:64:07:a8:ef:f7:f6:d7:e9:10:98:8d:92:
f6:99:99:1e:62:86:19:02:fa:db:5c:84:b2:89:15:ac:06:c7:
ef:ac:e5:3a:68:b3:4b:40:a9:54:06:41:50:78:83:86:fb:32:
1e:54:d7:00:d3:e0:85:74:b1:c9:1c:b9:b9:5f:1c:c6:e6:61:
e6:01:e8:09:43:80:7e:fc:61:3c:96:97:70:24:6a:3f:26:4d:
8c:5d:30:9d:9b:65:36:4b:fe:48:95:47:7d:8f:77:cf:47:5f:
d7:c1:5c:03:b8:cb:7e:a3:b9:7c:c1:01:0a:58:1b:a4:bc:91:
33:61:2b:d1:87:9f:26:93:c0:d8:09:c3:b7:7c:0d:d3:b8:86:
b6:92:82:99:54:52:30:28:cd:38:e1:9e:fd:51:0b:4c:00:9d:
09:fe:b1:e6:bf:38:02:c3:82:e9:1c:73:78:c8:14:bf:31:c6:
0c:6c:ae:10:8b:63:4b:59:09:b5:40:37:5b:cf:fa:1f:9a:99:
e1:67:82:78:ad:fa:b0:26:db:c6:34:25:fb:ae:c3:01:ba:81:
68:0b:c8:a6:1c:ec:36:b4:be:55:66:a8:1e:60:e8:f8:53:cd:
5d:f1:76:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 22:37:47 2024 by rpki-client on console-ams.rpki-client.org