Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qHKX1ZYWSkT2GovmNwvUoz828ug.roa
File: qHKX1ZYWSkT2GovmNwvUoz828ug.roa (raw, json)
Hash identifier: AKYg3XmNXxGLl09RUub8e3LVtObpB1b75MPuN8+vuvo=
Subject key identifier: A8:72:97:D5:96:16:4A:44:F6:1A:8B:E6:37:0B:D4:A3:3F:36:F2:E8
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC80301F5BC27FA94273ADB5B22E8942C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qHKX1ZYWSkT2GovmNwvUoz828ug.roa
Signing time: Tue 02 Jan 2024 02:31:29 +0000
ROA not before: Tue 02 Jan 2024 02:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205078
IP address blocks: 193.180.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:01:f5:bc:27:fa:94:27:3a:db:5b:22:e8:94:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a87297d596164a44f61a8be6370bd4a33f36f2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b4:23:d8:d8:02:a0:ea:69:fd:86:13:50:6e:
b1:99:59:00:09:c5:cd:30:0d:ef:1f:0c:6f:ed:97:
53:b0:f3:3d:e0:05:e6:9a:8d:2a:83:45:63:48:b0:
92:13:72:1e:8d:b6:18:be:c7:02:f2:1a:dc:c8:71:
7d:1d:dd:47:56:36:5b:d8:d9:04:e6:50:80:f0:d3:
c4:1a:13:47:96:a2:23:48:65:b4:fd:b2:ea:98:67:
d2:b3:f6:6d:8a:cc:4f:dd:f1:b0:cb:79:3a:40:3a:
d2:da:f1:69:f4:fa:37:53:9f:7d:24:20:88:fb:fb:
03:70:3c:87:60:32:8c:3b:8f:59:ad:0f:a6:2c:b0:
d5:a4:f9:3d:72:4a:9b:17:29:0c:36:b7:2e:43:e6:
45:04:3d:37:b7:7e:6b:09:d6:d0:22:9d:50:e2:f6:
b7:b7:2c:db:93:30:6f:45:33:21:45:2a:0e:6c:06:
1b:49:4d:e3:3b:83:5f:1b:74:c0:72:45:89:a8:53:
96:ce:e7:bf:dd:47:b4:f0:6c:11:3a:5b:82:14:23:
ef:c4:a5:b0:a5:83:40:ed:7e:9f:55:2b:e3:cb:df:
53:5b:74:ed:8a:23:c9:07:69:91:ec:81:c7:59:cd:
e7:4b:ce:1a:fa:36:47:6f:ab:2e:3d:c5:7c:20:4d:
ab:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:72:97:D5:96:16:4A:44:F6:1A:8B:E6:37:0B:D4:A3:3F:36:F2:E8
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/qHKX1ZYWSkT2GovmNwvUoz828ug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.63.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:6c:64:d4:98:e8:8d:89:06:7a:04:10:72:97:15:a7:6c:7a:
01:32:b9:5d:82:cc:11:7b:c4:4a:7f:0f:fd:e4:4d:2a:e7:f3:
d4:2c:0d:c6:27:43:9c:9a:5e:87:5f:37:c2:c5:ac:29:be:c4:
0b:72:72:47:47:f0:18:91:75:6a:0a:56:11:36:44:1a:b4:6f:
26:5f:32:1b:c6:d4:0f:89:59:18:52:c2:51:73:09:93:32:51:
64:b4:4a:eb:ab:c7:7e:ff:2d:6a:25:e3:06:46:7b:bd:18:fe:
d2:57:f9:a4:43:40:7c:5a:b5:11:bf:0d:45:67:1b:f1:88:20:
96:35:54:d0:dc:ed:c8:bc:05:63:e1:b9:45:15:c4:c4:83:ed:
af:47:11:f0:fe:78:a9:2b:1f:64:bf:6d:16:15:6d:c1:88:66:
96:bd:0e:33:43:65:0f:3b:82:62:71:ae:15:c8:17:69:c2:e6:
93:0d:52:69:1f:0e:a6:46:42:71:a5:41:07:0b:94:e1:1d:5a:
bb:4b:61:4c:f4:bc:f9:46:3b:cf:91:8d:86:46:97:66:5f:8e:
48:4a:d5:80:ea:25:1d:0b:ec:f7:33:43:45:81:88:8a:a4:72:
a2:2a:d2:e2:9c:ac:7b:75:35:c7:f2:09:d4:be:26:72:a7:5c:
c1:45:4d:fa
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzIAwH1vCf6lCc621si6JQsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxMzVjN2Y1NzFlZWZlYjY3NDA0YWI2YzQ1ZmQ0NzU1NTFh
ZGFmMWIwHhcNMjQwMTAyMDIzMTI5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODcyOTdkNTk2MTY0YTQ0ZjYxYThiZTYzNzBiZDRhMzNmMzZmMmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rQj2NgCoOpp/YYTUG6xmVkACcXN
MA3vHwxv7ZdTsPM94AXmmo0qg0VjSLCSE3IejbYYvscC8hrcyHF9Hd1HVjZb2NkE
5lCA8NPEGhNHlqIjSGW0/bLqmGfSs/ZtisxP3fGwy3k6QDrS2vFp9Po3U599JCCI
+/sDcDyHYDKMO49ZrQ+mLLDVpPk9ckqbFykMNrcuQ+ZFBD03t35rCdbQIp1Q4va3
tyzbkzBvRTMhRSoObAYbSU3jO4NfG3TAckWJqFOWzue/3Ue08GwROluCFCPvxKWw
pYNA7X6fVSvjy99TW3TtiiPJB2mR7IHHWc3nS84a+jZHb6suPcV8IE2r9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKhyl9WWFkpE9hqL5jcL1KM/NvLoMB8GA1UdIwQY
MBaAFCE1x/Vx7v62dASrbEX9R1VRra8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDIt
OTQzZDAzMzIxMzI2LzEvcUhLWDFaWVdTa1QyR292bU53dlVvejgyOHVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS82ODBiNzgtOTZhZi00YTg1LWFjMDItOTQzZDAzMzIxMzI2
LzEvSVRYSDlYSHVfclowQkt0c1JmMUhWVkd0cnhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwbQ/MA0G
CSqGSIb3DQEBCwUAA4IBAQCwbGTUmOiNiQZ6BBBylxWnbHoBMrldgswRe8RKfw/9
5E0q5/PULA3GJ0Ocml6HXzfCxawpvsQLcnJHR/AYkXVqClYRNkQatG8mXzIbxtQP
iVkYUsJRcwmTMlFktErrq8d+/y1qJeMGRnu9GP7SV/mkQ0B8WrURvw1FZxvxiCCW
NVTQ3O3IvAVj4blFFcTEg+2vRxHw/nipKx9kv20WFW3BiGaWvQ4zQ2UPO4Jica4V
yBdpwuaTDVJpHw6mRkJxpUEHC5ThHVq7S2FM9Lz5RjvPkY2GRpdmX45IStWA6iUd
C+z3M0NFgYiKpHKiKtLinKx7dTXH8gnUviZyp1zBRU36
-----END CERTIFICATE-----
Generated at Wed Jun 26 07:57:27 2024 by rpki-client on console-fra.rpki-client.org