Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qAWizPetiQ6cZ0ArpoYQGbvsvn0.roa
File: qAWizPetiQ6cZ0ArpoYQGbvsvn0.roa (raw, json)
Hash identifier: CoyDTk5kMOiiy5mLfNxyX/JdfWbadTTULB2THtpP5No=
Subject key identifier: A8:05:A2:CC:F7:AD:89:0E:9C:67:40:2B:A6:86:10:19:BB:EC:BE:7D
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01934EEA7BE3553A582DAA3C81883B702F7C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qAWizPetiQ6cZ0ArpoYQGbvsvn0.roa
Signing time: Thu 21 Nov 2024 13:30:10 +0000
ROA not before: Thu 21 Nov 2024 13:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51826
IP address blocks: 192.165.158.0/23 maxlen: 23
192.165.164.0/23 maxlen: 23
193.180.196.0/23 maxlen: 23
193.180.198.0/24 maxlen: 24
193.180.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:4e:ea:7b:e3:55:3a:58:2d:aa:3c:81:88:3b:70:2f:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Nov 21 13:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a805a2ccf7ad890e9c67402ba6861019bbecbe7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:44:6a:18:5a:1c:c3:66:7f:86:58:3f:85:
6c:c0:fd:77:5f:e8:e3:e1:e2:2f:68:5f:6a:3f:9a:
d9:1c:9f:34:c1:a9:37:3f:29:30:9b:bc:0a:66:26:
03:04:2f:0c:90:28:27:97:ff:4f:cb:bf:81:5a:e5:
09:2f:10:73:33:2d:af:08:0a:99:6e:88:1a:95:9e:
03:8a:81:57:51:8c:84:a4:bf:92:c7:00:67:1f:8e:
91:2b:cf:d4:91:e9:37:c5:02:dc:bb:f6:eb:f1:79:
11:3a:18:f4:ae:65:9a:48:d6:6b:d2:ae:d9:b4:11:
fb:f4:72:11:68:d0:c3:f2:df:e6:25:82:d4:ab:8e:
c3:69:94:25:e0:36:bd:df:48:17:87:09:d7:4a:f2:
19:f3:ce:fa:63:ad:47:37:c4:15:fe:93:fc:1a:b9:
7b:f2:2c:07:29:36:e4:7c:eb:bd:e1:ad:28:b3:30:
1f:1a:6c:b7:fb:ea:58:12:39:7c:14:42:08:bb:17:
af:92:3a:40:36:be:b6:87:30:09:db:76:f4:1b:1a:
3e:0e:3a:fa:66:0e:92:94:4d:95:e9:b2:51:53:22:
c2:c0:ff:32:52:29:32:64:d6:6e:2b:04:6f:34:81:
76:05:8f:62:2a:95:1a:1d:83:d4:13:71:66:72:c9:
74:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:05:A2:CC:F7:AD:89:0E:9C:67:40:2B:A6:86:10:19:BB:EC:BE:7D
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qAWizPetiQ6cZ0ArpoYQGbvsvn0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.158.0/23
192.165.164.0/23
193.180.196.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:f1:f2:45:bd:9d:4a:df:3e:d1:69:9b:d2:fd:db:a8:f1:1f:
48:9c:c7:8c:66:eb:13:7d:fc:75:19:25:57:55:42:d0:10:63:
a4:e7:be:1d:b0:53:61:5a:65:1e:96:0e:17:25:d8:14:b2:e0:
03:ed:2a:8a:b3:c9:78:bd:d6:18:b6:c0:8c:c5:10:14:05:7d:
1c:35:15:2a:47:42:ab:a9:ec:e2:e5:a1:d4:c0:ff:2c:84:f6:
a3:84:df:ee:35:c0:13:3d:43:b0:d5:3c:8e:51:bf:28:db:ae:
cc:ff:d5:73:92:de:0f:19:4d:61:c2:82:9f:02:53:dc:7b:c5:
cd:eb:90:f4:9a:20:85:d8:9c:de:cf:c0:0e:ab:81:ab:14:97:
9b:ab:89:1d:ae:11:32:da:c5:02:6e:09:9a:e1:c5:fc:eb:ba:
8a:b8:dd:52:d2:6e:69:88:7e:46:16:89:74:73:d5:6d:b5:b2:
5b:ca:8b:54:da:23:36:02:af:cb:8e:16:4d:8a:16:72:0a:86:
45:0c:1f:0a:ea:4e:e0:09:4b:bc:85:f9:80:b7:67:77:46:61:
0b:85:e8:ea:38:15:5c:16:a2:06:5f:40:d0:30:7d:b3:7e:d0:
e4:b9:32:2c:fc:de:3c:5b:da:b8:b5:df:53:46:b0:6e:a9:47:
7c:43:fa:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:04:54 2024 by rpki-client on console-ams.rpki-client.org