Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zXCUCcTsVliGrziIrEOQTP3njLE.roa
File: zXCUCcTsVliGrziIrEOQTP3njLE.roa (raw, json)
Hash identifier: gT524lxU//WJ2a16VeXHIozX0Nq2LXfPca4W4HDR1Zk=
Subject key identifier: CD:70:94:09:C4:EC:56:58:86:AF:38:88:AC:43:90:4C:FD:E7:8C:B1
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018CC8030197B65C9FA65F1D2438811854DA
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zXCUCcTsVliGrziIrEOQTP3njLE.roa
Signing time: Tue 02 Jan 2024 02:31:29 +0000
ROA not before: Tue 02 Jan 2024 02:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204334
IP address blocks: 193.180.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:01:97:b6:5c:9f:a6:5f:1d:24:38:81:18:54:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 2 02:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cd709409c4ec565886af3888ac43904cfde78cb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f0:99:94:18:d5:dd:1b:55:d9:7e:56:a0:e4:
bf:b7:b6:ec:e7:66:f7:c1:bb:0c:72:05:d3:47:0b:
9a:cb:b7:98:cd:e9:79:6a:6a:3d:fd:46:20:f1:a5:
30:d4:97:88:97:c7:de:bb:26:8a:04:b8:e7:5a:39:
0b:f1:34:80:d0:8b:f9:d6:b1:83:3d:0a:ae:83:96:
d6:13:0d:16:13:b3:23:25:8b:5b:e4:c6:fd:09:6c:
b2:fe:47:dc:34:97:a7:fd:a3:80:0b:09:be:29:8f:
ec:1f:31:a2:90:12:f5:83:cc:e2:88:36:10:90:03:
83:3e:72:7c:47:5c:33:3e:54:44:3e:19:60:42:29:
1c:60:ca:5e:77:07:21:10:1d:bf:76:d7:a5:24:df:
a2:ea:35:ff:d5:e0:9e:44:36:b9:d6:49:93:ae:9d:
2c:d2:4a:cb:91:2a:f9:2e:00:d3:3d:92:b6:eb:4e:
46:56:2a:ba:22:d3:e9:3a:a2:8f:20:56:a6:97:f6:
84:e4:aa:6a:3f:37:75:6f:de:5a:3d:5e:2c:8a:3c:
5f:6e:33:73:e9:77:80:09:b4:45:f7:65:17:e1:52:
30:91:a3:af:d6:50:9f:c0:3d:b7:fa:80:c1:d9:3d:
9c:e4:24:3e:51:0d:70:fc:7c:da:1c:66:f8:03:32:
6b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:70:94:09:C4:EC:56:58:86:AF:38:88:AC:43:90:4C:FD:E7:8C:B1
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/zXCUCcTsVliGrziIrEOQTP3njLE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.180.188.0/23
Signature Algorithm: sha256WithRSAEncryption
bd:f7:d6:13:c5:c7:b3:52:20:e6:cf:10:57:cb:6b:1e:98:5c:
54:e5:dd:13:70:89:02:ea:a8:72:ae:94:70:6e:2b:a6:ec:d3:
0a:25:ec:b0:ad:87:61:41:ef:08:f5:29:9d:08:19:40:40:a2:
f2:6f:cb:5f:d1:a3:a1:04:7c:8d:7f:9c:5c:43:31:1f:db:e3:
f3:b4:d4:93:b8:0f:9b:69:88:33:ec:a1:d0:af:7d:f1:4d:88:
0c:03:9f:c5:bc:a0:43:80:75:5e:80:5d:e6:d5:33:cc:5b:c7:
6d:ae:f7:a1:48:53:8f:78:78:f7:f4:eb:9c:0e:e1:90:e8:35:
2b:5d:8f:ae:e7:0c:36:07:4b:f8:0b:08:fa:7c:af:41:c3:5a:
d4:2c:dd:a8:8f:80:ac:04:5b:d8:b0:6c:40:10:66:17:0c:b2:
6d:43:99:ee:e9:e3:4a:11:c2:7b:6a:4a:49:7d:5c:2f:9d:69:
e0:00:c1:93:38:55:b4:82:e7:9b:ea:32:75:fd:28:e6:d7:2b:
34:1b:8f:87:89:a5:35:8f:fb:86:72:37:a4:82:98:69:0f:e2:
ec:8b:05:b4:0d:40:fb:60:d7:cc:89:7f:7b:d9:b1:cc:59:af:
8a:33:11:86:6a:fd:e7:3c:dd:58:68:02:0c:6c:7a:9d:99:ed:
e7:0d:e7:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 17:02:14 2024 by rpki-client on console-fra.rpki-client.org