Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/i5Ho6ekEadDXwzqaoBsg3cvz2ds.roa
File: i5Ho6ekEadDXwzqaoBsg3cvz2ds.roa (raw, json)
Hash identifier: 0SODgTeAtyhVifDRuA9/clD6HEAEF54xwEtEvcT7cxc=
Subject key identifier: 8B:91:E8:E9:E9:04:69:D0:D7:C3:3A:9A:A0:1B:20:DD:CB:F3:D9:DB
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802D86715D32111FC816DE5F7C6C3EC
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/i5Ho6ekEadDXwzqaoBsg3cvz2ds.roa
Signing time: Tue 02 Jan 2024 02:31:18 +0000
ROA not before: Tue 02 Jan 2024 02:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2856
IP address blocks: 194.132.24.0/24 maxlen: 24
194.132.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 06:53:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:d8:67:15:d3:21:11:fc:81:6d:e5:f7:c6:c3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8b91e8e9e90469d0d7c33a9aa01b20ddcbf3d9db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:c0:85:30:79:06:87:87:cd:b1:2b:57:1a:3b:
e6:a7:d3:5b:43:d2:d9:76:6e:89:7b:32:36:3c:b4:
b4:e5:c9:ce:e6:e0:dc:54:d4:c7:f6:db:6c:0d:ee:
fc:a9:7f:9c:79:fd:a7:30:1b:19:4a:a1:cc:0c:0c:
d2:2d:24:df:b7:bc:38:fd:7b:70:8b:ed:9c:2f:86:
f9:a0:fe:66:ac:40:d9:7b:f7:8d:b3:93:32:de:48:
7d:75:00:b6:09:8e:5e:3b:2c:9c:92:a2:4d:17:c3:
e5:9d:e6:5d:17:fd:96:7e:6e:16:26:1a:99:6f:d8:
81:cf:ef:ef:72:cc:fa:63:4c:3d:3c:1b:dc:9e:68:
9c:1b:ea:0d:4b:16:4b:55:21:65:35:dd:f2:7f:7e:
e2:43:13:6c:67:07:10:11:2c:da:3e:9a:83:bb:dd:
70:24:c7:5e:47:f3:54:6a:08:2c:19:f8:44:2e:af:
fa:cb:a5:1d:3f:5d:62:9d:80:82:ab:cb:43:aa:68:
db:e1:9f:67:62:03:4c:5c:92:a7:14:ed:5e:4b:f7:
b0:1b:61:a4:62:0b:ac:1f:9c:ea:88:f0:d6:2b:67:
89:ec:11:4e:74:bf:80:ef:f1:8a:57:38:44:18:93:
89:a2:74:55:8d:87:03:94:58:87:8d:f9:e5:02:d8:
d6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:91:E8:E9:E9:04:69:D0:D7:C3:3A:9A:A0:1B:20:DD:CB:F3:D9:DB
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/i5Ho6ekEadDXwzqaoBsg3cvz2ds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.24.0/23
Signature Algorithm: sha256WithRSAEncryption
1b:93:cb:2c:98:74:73:84:67:70:26:4b:64:ae:bd:ce:d2:2a:
4f:0e:c9:e4:ce:6e:e5:d3:f3:80:6a:d6:7a:5b:77:9d:81:93:
ec:df:6b:cd:4a:03:ed:23:fc:f8:77:68:ec:68:51:eb:b1:39:
fc:59:43:11:fb:07:03:81:22:1a:4d:de:94:7f:8b:d3:6f:84:
02:0e:cc:1e:1b:f5:2e:0a:76:c0:7c:28:95:75:4e:8e:c0:02:
cd:0f:d2:81:53:b8:ed:f5:1c:87:11:52:14:05:33:f9:22:69:
9b:86:e7:4c:c6:05:40:a0:d0:ce:f0:76:0a:b3:9f:fd:b4:b9:
e4:52:2b:1e:fb:f8:62:fe:d4:89:07:32:ed:b9:01:4b:49:90:
31:57:55:f0:fb:7b:e7:81:19:c4:45:e5:16:f5:be:e9:ae:4f:
07:b1:72:19:55:91:02:de:50:ad:2e:64:02:29:d2:ab:10:3a:
5f:ee:a1:ed:f0:e3:68:95:a5:4c:c6:f3:ad:48:5f:fb:25:2d:
f0:dd:7e:a0:35:b9:8f:ce:6c:44:c4:5b:e8:db:0e:de:49:7a:
f4:96:15:9c:c0:99:a9:46:57:19:6d:5b:d7:3a:05:9d:8b:6e:
83:c0:3b:6b:62:01:90:e7:d5:86:cc:8a:a1:67:1f:15:2b:e8:
a3:24:c3:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:41:46 2024 by rpki-client on console-fra.rpki-client.org