Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tHno4rlCl0vYg37RG8E8Dw943II.roa
File: tHno4rlCl0vYg37RG8E8Dw943II.roa (raw, json)
Hash identifier: NuTIhOJMrs5bkUn26Ri1rfavCGdDnA8W37xtL7bU4Tc=
Subject key identifier: B4:79:E8:E2:B9:42:97:4B:D8:83:7E:D1:1B:C1:3C:0F:0F:78:DC:82
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802DDEF5ADCDB3C83C634A64F2EF91C
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tHno4rlCl0vYg37RG8E8Dw943II.roa
Signing time: Tue 02 Jan 2024 02:31:20 +0000
ROA not before: Tue 02 Jan 2024 02:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12381
IP address blocks: 192.121.121.0/24 maxlen: 24
192.121.86.0/24 maxlen: 24
192.71.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:dd:ef:5a:dc:db:3c:83:c6:34:a6:4f:2e:f9:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b479e8e2b942974bd8837ed11bc13c0f0f78dc82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5e:c0:f8:25:1a:0d:82:61:e4:30:8b:e2:0b:
77:20:41:ab:0c:8e:a0:62:40:e4:db:d0:a7:a5:ca:
bd:7f:7d:d8:07:d6:8b:ac:3a:15:b2:ed:f3:d6:e4:
03:b8:66:65:4c:ee:9a:42:26:88:50:d6:ec:69:23:
d6:69:06:45:16:a8:78:95:a8:c3:10:db:80:01:ca:
99:43:5d:39:72:20:66:ee:d0:aa:76:65:a6:58:d2:
0b:4f:82:64:80:f1:3c:28:65:1e:3a:ff:32:ba:b8:
8d:5a:3a:cd:76:59:96:a5:59:ce:91:e6:65:ca:cb:
81:fe:1f:30:4d:e2:22:4f:9f:bd:17:ff:e7:26:bf:
bc:f2:4d:93:99:34:48:03:d2:22:d2:a6:1b:a0:9d:
8f:ef:5e:ea:76:51:56:b1:a7:ad:16:78:f9:16:5f:
a1:f0:7b:b7:8f:5c:40:0f:6c:a6:c5:76:ab:20:fd:
c6:23:e3:cd:c5:3d:14:b3:47:92:6d:94:00:1c:4a:
0c:66:94:8b:08:6b:29:03:3f:6c:6f:26:21:b8:e5:
62:21:23:fd:13:c5:5e:b4:c7:63:ed:1f:86:98:e2:
0b:55:7b:46:db:3d:16:e2:54:b9:bd:69:d9:76:b8:
88:53:65:78:b2:96:c8:18:f4:43:45:29:43:7a:58:
7d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:79:E8:E2:B9:42:97:4B:D8:83:7E:D1:1B:C1:3C:0F:0F:78:DC:82
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/tHno4rlCl0vYg37RG8E8Dw943II.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.71.84.0/24
192.121.86.0/24
192.121.121.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d1:c0:1f:11:60:16:7d:5c:f2:19:95:23:9e:5d:70:09:b9:
a4:24:ac:31:5d:0d:0c:60:10:77:e4:a9:d9:89:88:11:91:62:
e2:82:66:1f:ac:52:b6:d2:5c:21:fa:9b:8a:69:a7:b4:7d:87:
7b:ef:43:1d:d6:ca:62:36:64:98:fb:72:06:02:f0:66:51:48:
cd:c9:86:32:b6:fc:9e:99:42:bc:00:0f:85:2a:05:94:f2:8e:
95:73:ee:f7:58:ca:b7:9f:29:bc:22:0b:a3:7d:71:e4:22:fb:
64:ea:d1:b4:03:4e:ce:66:be:c6:a6:bb:7a:c1:53:5b:38:f7:
46:5e:02:a0:17:15:89:f2:56:a7:60:12:f8:e7:aa:38:63:03:
ea:aa:42:98:62:56:0e:08:80:0c:cb:3c:61:08:d8:b6:74:ed:
bd:ad:97:e6:53:dd:55:9c:09:33:e9:d1:07:8c:2f:31:70:10:
3d:25:eb:ff:78:2f:8d:6d:89:23:28:dd:ec:46:23:62:1a:0e:
8b:41:2d:5a:db:53:79:e3:9f:6c:04:2f:b6:f0:24:38:23:2e:
35:6d:08:ad:70:a8:06:e0:3c:41:20:49:cb:cb:67:ca:f9:50:
1e:b6:46:8e:f6:86:6b:b8:ec:9a:54:f1:69:81:b3:6c:c6:32:
6d:41:8c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:25:40 2024 by rpki-client on console-ams.rpki-client.org