Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/HteJ8WLhsrk2muByJ9_YfKmBFMM.roa
File: HteJ8WLhsrk2muByJ9_YfKmBFMM.roa (raw, json)
Hash identifier: g247A0Y0gcdeo02+gzaKcGISGZfap4lOs60RoHfcWbE=
Subject key identifier: 1E:D7:89:F1:62:E1:B2:B9:36:9A:E0:72:27:DF:D8:7C:A9:81:14:C3
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 0191E1E99AFA93258034A46C6A6F3934C71F
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/HteJ8WLhsrk2muByJ9_YfKmBFMM.roa
Signing time: Wed 11 Sep 2024 16:27:48 +0000
ROA not before: Wed 11 Sep 2024 16:27:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205303
IP address blocks: 147.185.237.0/24 maxlen: 24
167.94.110.0/24 maxlen: 24
167.94.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e1:e9:9a:fa:93:25:80:34:a4:6c:6a:6f:39:34:c7:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Sep 11 16:27:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ed789f162e1b2b9369ae07227dfd87ca98114c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ef:51:0a:6c:e6:af:56:4d:a3:f7:e7:c4:54:
f9:30:97:50:56:a9:ae:a8:69:fc:28:99:b3:ea:1c:
89:fe:7e:59:b4:46:6c:d5:b9:f9:cf:fa:ff:53:4f:
40:88:1f:c7:25:9f:3c:cc:29:f3:e8:39:72:7c:9e:
a6:52:5c:7c:9d:63:f7:b6:d0:4e:76:0e:27:ad:fa:
e8:ff:ba:b4:a5:47:64:ea:51:e5:fd:0e:f6:0d:83:
73:78:4a:59:ff:ca:de:20:61:71:5e:b3:49:70:c4:
5f:67:0a:aa:48:65:da:ab:1a:59:91:1b:01:7f:b6:
5a:e9:dd:23:c5:0a:9a:3b:9f:67:50:10:62:2d:b3:
bb:04:f9:07:44:45:20:ad:f8:3a:bd:ae:6d:e5:fa:
0a:20:91:86:71:58:f1:36:e7:96:a6:89:7c:82:99:
29:3b:32:10:82:32:5c:77:08:6c:f4:56:3b:f7:56:
9e:1a:ea:29:86:e2:3e:40:15:e6:da:5c:8e:97:21:
8b:4c:88:1e:ce:ed:01:f3:26:bc:4e:03:af:f4:e2:
05:22:ae:e4:21:3f:54:e7:a6:60:36:a8:8f:62:ef:
17:a8:60:cd:41:a3:ca:22:42:de:6c:9c:3c:a4:eb:
5a:8a:a9:a2:03:5b:93:bf:12:c3:03:c7:79:f8:2c:
0a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D7:89:F1:62:E1:B2:B9:36:9A:E0:72:27:DF:D8:7C:A9:81:14:C3
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/HteJ8WLhsrk2muByJ9_YfKmBFMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.237.0/24
167.94.110.0/24
167.94.174.0/24
Signature Algorithm: sha256WithRSAEncryption
76:85:12:53:75:8d:76:cc:b8:17:51:be:93:0d:70:ed:81:78:
e5:10:75:2a:b1:74:27:7e:20:99:bc:0a:b4:0d:2e:93:26:24:
48:2b:a5:70:07:fc:a3:a3:b3:63:c3:58:a7:b6:9d:73:2c:c6:
ac:c6:bb:87:33:41:7a:8c:6a:45:8c:d7:40:75:57:e2:8f:b3:
ec:ce:3a:08:c6:ff:a6:32:cb:e4:f1:bf:56:61:ae:61:bc:5d:
6b:ab:1b:47:c8:6b:23:0f:82:e1:01:2d:fc:9e:07:42:0f:97:
34:69:ee:6b:cd:e2:43:50:90:4a:13:f0:b8:7d:ce:9d:99:31:
29:c5:09:28:9b:80:ce:43:5f:3f:7b:bc:c7:48:04:b5:45:92:
5c:f7:a4:1d:b6:6b:6a:82:6f:82:c5:68:90:da:7c:2b:6c:38:
cf:3a:62:69:26:8d:3b:14:67:88:f4:8b:e7:cc:e7:67:5a:2a:
a3:0e:8d:51:8c:ab:92:e3:86:cc:4f:cf:88:a8:ba:53:63:f0:
52:1b:61:31:bf:48:44:5a:0b:69:ac:d9:dc:c6:d9:c4:dd:d2:
a6:28:46:be:bd:6a:72:41:4e:ef:86:71:66:8d:53:a8:8d:07:
8c:9a:1e:19:b9:e8:7b:9b:21:61:c4:88:33:0d:70:8a:72:89:
d5:7d:c6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 14:35:43 2024 by rpki-client on console-ams.rpki-client.org