Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x317_w3EfZhO4w1EoOD6HSQ8A3U.roa
File: x317_w3EfZhO4w1EoOD6HSQ8A3U.roa (raw, json)
Hash identifier: 18iZ/yRM2TPZGN2BqSlcUPybOUFgeBm6Kl4hGPMo6iU=
Subject key identifier: C7:7D:7B:FF:0D:C4:7D:98:4E:E3:0D:44:A0:E0:FA:1D:24:3C:03:75
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC802F445E0BC22AFD225D45BB18D36DA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x317_w3EfZhO4w1EoOD6HSQ8A3U.roa
Signing time: Tue 02 Jan 2024 02:31:25 +0000
ROA not before: Tue 02 Jan 2024 02:31:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 53745
IP address blocks: 194.14.248.0/24 maxlen: 24
193.235.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 26 May 2024 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:f4:45:e0:bc:22:af:d2:25:d4:5b:b1:8d:36:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c77d7bff0dc47d984ee30d44a0e0fa1d243c0375
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e0:1b:d2:ca:37:e4:70:d0:0c:ed:49:cc:09:
6c:0e:d3:e8:5d:2d:d1:54:36:eb:5e:75:88:b1:9a:
1a:de:65:a3:09:c7:fe:90:99:62:6d:50:cd:c6:9b:
08:44:0d:88:0d:88:3a:26:3f:a9:48:78:63:99:e1:
c2:35:f5:03:c0:c9:ed:af:a0:2f:45:79:e9:b4:1d:
05:80:9d:8c:ae:d4:da:56:d7:db:92:fb:70:d8:ad:
ed:06:94:ec:ba:4a:20:a5:6c:dd:5a:4d:ab:b0:4a:
13:db:61:14:da:7e:86:56:f4:9f:be:f0:3b:3d:a5:
26:5a:8e:f5:36:49:50:18:ab:be:1d:84:4f:f9:64:
48:97:b0:02:5d:5a:d2:df:a5:a2:ca:50:96:17:38:
ad:43:22:f5:02:a9:a1:89:c7:ad:c7:d6:ee:ac:b4:
ac:9e:49:2c:ef:b5:af:51:8a:78:b1:e4:45:89:c7:
4b:a6:86:1f:ad:17:a6:0d:7a:aa:10:cd:c7:71:21:
29:ee:f7:ec:90:ef:b7:1b:33:f7:4d:f9:09:04:a9:
4c:2b:d2:d5:6c:7b:52:fe:0c:12:ee:c0:49:a6:9e:
32:d9:e5:07:05:fa:3f:b3:93:eb:16:c0:ae:52:cb:
04:49:54:fe:94:5c:61:88:d6:28:a3:7f:19:bb:65:
06:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7D:7B:FF:0D:C4:7D:98:4E:E3:0D:44:A0:E0:FA:1D:24:3C:03:75
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/x317_w3EfZhO4w1EoOD6HSQ8A3U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.66.0/24
194.14.248.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:65:45:34:1e:18:94:3e:b5:df:c6:f5:d4:ec:a6:80:6c:73:
bd:90:2f:f4:4a:16:10:89:f0:ed:5f:35:be:0c:0c:93:0f:46:
7a:d9:d4:45:17:b4:9b:74:9e:46:c6:37:f5:fc:62:19:b6:29:
55:d3:d3:93:ee:d3:e2:bd:1f:86:f8:7d:a3:8e:a0:b4:b8:97:
e4:10:2f:dd:ac:5a:8c:c0:19:23:e0:3a:41:85:cf:d5:4c:13:
e6:66:01:79:e7:25:5d:97:6b:7b:c6:96:b7:18:24:56:80:4c:
18:b1:38:14:34:a0:3b:c9:16:10:91:5a:15:f3:0d:ad:67:8b:
07:56:d6:2b:aa:34:4e:02:08:30:f5:d7:89:9a:18:0f:58:5d:
1f:a8:bf:1f:3a:02:32:34:ac:a3:e8:6f:1b:19:e0:32:23:97:
2f:1c:ce:50:31:10:a6:dc:54:b4:44:d0:60:80:2f:cf:e3:01:
5b:0c:d2:f9:fd:54:e4:72:fa:f9:a2:b7:d7:5e:4b:54:b9:6d:
a6:c2:69:2d:d5:4c:07:1d:45:3c:2c:c4:39:15:b6:eb:55:e2:
06:aa:b0:c8:70:73:bf:2f:10:28:66:db:b3:dd:44:46:88:17:
d4:d4:5d:98:2b:5a:93:21:ae:64:3b:84:03:b5:51:af:9b:7e:
8f:70:29:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 19:45:10 2024 by rpki-client on console-fra.rpki-client.org