Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/iipv1ZozF475i9JrLH6FRm3Jnjw.roa
File: iipv1ZozF475i9JrLH6FRm3Jnjw.roa (raw, json)
Hash identifier: kdVB27CX3EW4lAqOY2bXjIxhM64PwHtL5L6R9OIBAMA=
Subject key identifier: 8A:2A:6F:D5:9A:33:17:8E:F9:8B:D2:6B:2C:7E:85:46:6D:C9:9E:3C
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802DC2A02E29186D9E485EC9DE9B241
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/iipv1ZozF475i9JrLH6FRm3Jnjw.roa
Signing time: Tue 02 Jan 2024 02:31:19 +0000
ROA not before: Tue 02 Jan 2024 02:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8674
IP address blocks: 192.165.72.0/24 maxlen: 24
194.68.132.0/24 maxlen: 24
192.36.144.0/24 maxlen: 24
192.71.53.0/24 maxlen: 24
192.71.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:dc:2a:02:e2:91:86:d9:e4:85:ec:9d:e9:b2:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a2a6fd59a33178ef98bd26b2c7e85466dc99e3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:80:62:c5:94:cd:5a:c7:62:da:0d:33:aa:39:
9c:2b:a1:73:38:26:e4:56:b5:95:84:ee:81:5d:02:
ee:1c:f0:da:7b:41:58:1e:95:f0:45:4b:e7:80:38:
94:87:12:69:64:9a:fc:d7:58:af:9c:1f:29:c0:ee:
75:ea:c9:11:ec:08:6f:e7:08:33:42:3b:a0:5f:88:
95:31:e6:88:48:93:52:a3:2d:09:42:40:26:47:16:
00:71:30:09:bd:73:d8:ac:02:c6:7a:8f:d4:47:05:
77:24:1b:e6:ff:e8:f8:89:61:ff:80:49:03:a8:77:
1e:3e:bd:69:0a:13:8e:4f:1f:6d:c5:1f:4e:06:28:
dc:7e:d4:67:47:4d:f2:cd:c9:f7:ee:18:28:ce:f4:
91:71:bc:ed:e1:57:19:10:3c:cb:6f:84:fc:a0:e3:
89:fb:ae:16:dc:28:d4:ef:48:c7:60:73:99:8b:a7:
e7:ad:bf:1b:37:a1:86:3c:95:98:c9:aa:44:c4:bb:
88:74:61:de:fa:21:79:5a:47:6c:ae:7a:48:02:85:
ec:75:70:0b:eb:9c:0c:9b:b4:cf:c0:ff:ca:b9:1a:
97:46:e2:15:35:d1:18:2a:ad:19:88:2f:41:02:d7:
19:7e:03:01:66:9f:e7:c0:d2:8b:8b:aa:28:f1:85:
dc:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2A:6F:D5:9A:33:17:8E:F9:8B:D2:6B:2C:7E:85:46:6D:C9:9E:3C
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/iipv1ZozF475i9JrLH6FRm3Jnjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.36.144.0/24
192.71.53.0/24
192.71.80.0/24
192.165.72.0/24
194.68.132.0/24
Signature Algorithm: sha256WithRSAEncryption
07:61:13:eb:bd:5e:7f:06:2c:4b:43:fc:ce:23:bf:b2:1c:04:
dd:9b:3e:61:9e:70:7b:57:eb:95:b6:2e:e4:67:13:4d:54:76:
6f:81:f0:14:44:43:8a:8c:99:2c:7c:4a:45:16:c0:34:51:2f:
13:dc:63:db:61:cb:2e:b0:0a:55:39:e4:9a:f5:b0:d7:ec:5a:
18:65:77:35:a4:08:b6:ee:82:ed:c5:f0:cc:d3:43:39:f9:fe:
af:d5:3e:58:68:be:c2:32:13:b0:65:b0:2e:5c:67:41:0b:ae:
5b:76:58:1e:37:06:4e:df:61:26:05:d8:c0:52:dd:3b:29:ac:
ad:d5:28:dd:d7:77:d4:92:d4:86:d9:68:a7:72:df:e7:5d:9e:
39:41:da:20:4e:46:67:a7:10:92:cd:94:49:4b:ec:28:38:16:
4d:29:58:45:1e:5e:1e:3a:eb:b4:c9:69:ac:b7:67:55:d1:a9:
6c:07:ed:e7:8e:f1:ca:f8:32:b7:f9:ae:97:8d:be:06:2a:35:
a7:f6:f9:8b:6b:4a:bd:e8:f9:6a:a3:16:90:8b:6a:a2:45:df:
34:85:6d:bc:aa:d8:c5:c9:12:bd:a1:60:57:91:11:e8:b6:31:
58:3d:fe:21:59:81:0b:76:9f:fc:c6:54:bb:c3:d0:4c:8b:e3:
f7:f8:21:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 10:39:48 2024 by rpki-client on console-ams.rpki-client.org