Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sc4HnEj7qFGNJGOtPIK9cUVp9nA.roa
File: sc4HnEj7qFGNJGOtPIK9cUVp9nA.roa (raw, json)
Hash identifier: cbR651mF5G6Sio+ACl6VlBcTAO9hZRsszWoYC1fuGv8=
Subject key identifier: B1:CE:07:9C:48:FB:A8:51:8D:24:63:AD:3C:82:BD:71:45:69:F6:70
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802F3AB57AAB48B377590324DDA578B
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sc4HnEj7qFGNJGOtPIK9cUVp9nA.roa
Signing time: Tue 02 Jan 2024 02:31:25 +0000
ROA not before: Tue 02 Jan 2024 02:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53007
IP address blocks: 194.132.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f3:ab:57:aa:b4:8b:37:75:90:32:4d:da:57:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b1ce079c48fba8518d2463ad3c82bd714569f670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:79:35:12:5f:4a:9d:ad:9e:66:41:d4:35:
66:64:fc:d2:e2:98:f2:86:38:03:6c:cd:e8:0d:63:
03:72:96:15:ce:af:2f:75:20:7f:05:3f:f4:e3:4a:
24:e3:29:7a:38:4e:07:e7:be:c6:f4:cc:fc:3f:9f:
46:77:ed:ec:50:10:f4:b8:3d:75:96:9c:34:23:26:
8f:c5:61:d9:51:e3:1b:c7:2c:1e:7d:84:69:ae:0e:
6c:93:88:2c:32:2a:db:d7:89:55:78:24:2b:1a:ac:
aa:a7:ed:5c:dd:fa:80:74:6a:32:9a:a5:8a:a9:8f:
5d:c9:b1:e7:0d:0d:3e:90:6a:20:19:50:36:65:fa:
94:7d:95:34:41:2f:f2:92:8a:e2:9e:76:fc:13:7a:
d3:89:46:4c:aa:57:f5:bc:84:46:43:6c:92:52:6d:
63:03:8e:d8:84:89:fc:77:5b:09:58:00:03:fe:06:
3c:09:ca:6b:9d:91:48:00:42:4d:ce:c8:91:97:99:
85:9a:48:3d:42:3b:34:81:19:0f:c4:c3:81:b9:59:
65:92:ae:db:df:1a:44:9a:b0:de:7a:6f:2a:13:48:
98:6b:5f:cd:15:30:13:54:7d:e1:0c:0d:5d:71:c1:
66:5e:22:3f:ae:ab:80:b5:e0:39:50:7f:f8:8f:d0:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:CE:07:9C:48:FB:A8:51:8D:24:63:AD:3C:82:BD:71:45:69:F6:70
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/sc4HnEj7qFGNJGOtPIK9cUVp9nA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.132.122.0/24
Signature Algorithm: sha256WithRSAEncryption
93:63:55:82:61:86:cf:2e:2c:2a:1c:1d:e9:9e:9c:f3:c2:4b:
3d:31:8f:fa:ca:aa:e6:ca:f9:16:18:b7:4d:02:51:8e:34:60:
9c:a1:0c:19:8d:e5:75:7b:ad:1b:06:56:ff:c8:21:05:17:f1:
49:17:ae:fc:1d:10:e8:2e:5d:66:99:6e:fb:bd:88:8a:1b:d7:
42:1e:eb:8f:ae:0e:20:cb:70:ba:bd:8b:c0:87:b8:f5:34:fa:
43:ae:90:e9:34:72:d2:5f:29:2f:b6:07:e0:56:31:67:ec:5a:
29:62:eb:4e:e6:8b:b8:35:f9:8c:c4:07:21:f3:c2:0a:54:c2:
60:36:a3:86:07:46:f0:02:45:fe:b7:20:12:c8:37:78:bd:f3:
d7:d1:1b:f5:64:77:af:37:7c:56:ed:55:a5:0d:04:1d:f6:65:
fc:62:91:5d:c1:be:5c:d6:87:31:75:40:95:8c:67:75:f6:86:
2a:2b:71:7a:2a:fe:4f:31:e1:f3:81:5f:59:90:75:9e:5b:cd:
73:04:d4:9f:09:5d:2b:80:40:98:4d:02:21:f2:f5:c5:55:ca:
7b:38:c7:05:94:f7:80:57:15:11:9f:d2:e0:35:f3:4f:05:98:
c4:e2:e1:93:3a:94:de:3b:ad:e7:76:d5:b4:d4:6a:e5:90:a7:
17:75:5c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:02:14 2024 by rpki-client on console-fra.rpki-client.org