Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vN04CThJ8qkppDv5T6-MdBbH2iE.roa
File: vN04CThJ8qkppDv5T6-MdBbH2iE.roa (raw, json)
Hash identifier: tTM9j2OpT3BrxOn7rru+CDAHPk4UAUNYwVr6XRgDlv4=
Subject key identifier: BC:DD:38:09:38:49:F2:A9:29:A4:3B:F9:4F:AF:8C:74:16:C7:DA:21
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC80307580EB660FEA37527638AD5B857
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vN04CThJ8qkppDv5T6-MdBbH2iE.roa
Signing time: Tue 02 Jan 2024 02:31:30 +0000
ROA not before: Tue 02 Jan 2024 02:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209454
IP address blocks: 194.132.58.0/24 maxlen: 24
193.181.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:07:58:0e:b6:60:fe:a3:75:27:63:8a:d5:b8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bcdd38093849f2a929a43bf94faf8c7416c7da21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ca:2f:d3:8f:98:b2:fd:a7:72:4c:fa:c0:7b:
47:52:26:bf:7d:12:54:ca:db:83:e0:94:12:74:28:
97:61:10:da:05:e3:ae:43:65:8a:d8:d4:dd:cb:98:
b3:19:40:67:1f:47:14:e7:df:19:ab:4b:1c:c6:f8:
e5:33:9b:29:69:ef:8e:1c:91:01:df:54:aa:44:d1:
87:8c:4a:55:d8:7b:97:03:c0:3d:53:b0:de:8b:35:
64:bd:1a:aa:56:b8:2b:0c:94:ab:e9:aa:16:a7:1f:
a3:3d:cb:87:9d:de:35:4e:02:77:0d:0a:a8:1e:d2:
d4:a1:d8:23:92:46:fe:33:a7:85:b8:d7:03:ff:d0:
bc:47:c8:3a:2e:34:52:e0:e1:61:ab:37:2f:cb:5a:
0c:d3:8f:62:61:f0:3f:0c:de:cc:b7:be:7a:07:53:
e8:0a:fb:53:52:9c:7e:50:58:67:87:a6:62:2b:51:
24:86:27:55:3a:0f:91:01:09:a8:17:5e:34:c5:0b:
82:4d:9d:82:35:1e:19:1e:02:f8:57:87:72:84:ad:
00:14:b1:67:29:03:44:ca:87:95:d6:35:8a:1a:4f:
49:8c:8c:04:9e:9e:4e:4e:ed:5e:24:30:63:25:7b:
f1:f1:c2:af:e0:df:b3:07:07:1a:cc:2f:01:c9:de:
ee:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:DD:38:09:38:49:F2:A9:29:A4:3B:F9:4F:AF:8C:74:16:C7:DA:21
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/vN04CThJ8qkppDv5T6-MdBbH2iE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.181.26.0/24
194.132.58.0/24
Signature Algorithm: sha256WithRSAEncryption
99:53:4d:8e:8c:45:a9:50:d7:92:40:89:b6:34:92:1c:4d:be:
e5:2d:ce:a3:78:19:e9:95:bc:9c:34:c9:6b:f5:87:79:3b:3e:
a6:77:40:8a:f6:bd:37:89:dc:6a:f1:3e:73:15:75:3c:c5:67:
90:5a:a9:d7:37:a6:b0:70:8e:42:40:83:fd:f0:c4:16:b2:0a:
df:a8:db:b9:21:30:74:53:e3:e9:43:9a:00:0b:73:4e:e6:1a:
03:33:19:d1:8a:9f:4f:8c:1f:db:c2:51:b5:f5:79:83:13:5a:
10:2b:89:14:d9:b3:5f:85:a2:71:8a:54:43:62:99:24:59:34:
89:8b:70:b4:29:f8:91:fa:78:08:30:40:42:a1:da:02:f8:a2:
01:40:2a:0e:53:e1:29:e7:88:bf:97:c7:c7:6a:9f:69:3d:ca:
a7:0d:47:65:bf:63:59:de:b4:58:32:01:16:2a:d3:b9:45:b8:
eb:94:1d:c5:3c:8f:60:d6:d3:78:bf:16:fb:e4:49:1e:59:e5:
a2:e6:dc:a3:6b:6c:d3:1d:5d:75:a5:26:29:f8:b2:20:f1:4a:
e9:41:69:10:ec:f0:06:b3:dc:4b:a0:49:f0:fa:26:a0:d2:6f:
23:c3:a2:41:f7:d4:4e:bf:c3:ce:d9:f3:9b:63:84:f7:f9:48:
69:3f:68:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 22:32:25 2024 by rpki-client on console-ams.rpki-client.org