Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/hTNK2icVxU-8_PmpqPhWd2E06UI.roa
File: hTNK2icVxU-8_PmpqPhWd2E06UI.roa (raw, json)
Hash identifier: OCStp8XsHHd6WpEuw1np1vOjzNgXUeLV/VUsKHUQ2GE=
Subject key identifier: 85:33:4A:DA:27:15:C5:4F:BC:FC:F9:A9:A8:F8:56:77:61:34:E9:42
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 018CC4255EE1122A656C94D06A8A42E13374
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/hTNK2icVxU-8_PmpqPhWd2E06UI.roa
Signing time: Mon 01 Jan 2024 08:30:32 +0000
ROA not before: Mon 01 Jan 2024 08:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198965
IP address blocks: 185.116.120.0/22 maxlen: 22
37.221.224.0/21 maxlen: 21
2a13:ea40::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:03:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:5e:e1:12:2a:65:6c:94:d0:6a:8a:42:e1:33:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Jan 1 08:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85334ada2715c54fbcfcf9a9a8f856776134e942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:91:77:c4:d3:33:31:81:83:b1:27:5a:ba:56:
ea:60:b1:e6:df:a8:0e:5b:06:ea:d1:bf:6e:e4:06:
fc:b5:3b:ca:87:da:2a:bf:e5:63:e7:37:7c:8b:53:
d8:08:40:f4:9e:54:bc:c7:ed:1c:0f:f5:e4:12:e5:
97:17:ab:e5:37:c7:8d:33:8a:ef:fb:40:36:b1:2b:
7e:b8:90:5b:22:89:43:20:7c:bf:15:af:f5:ba:23:
4f:98:c7:a8:54:57:22:a3:f9:a6:f1:d0:96:b5:68:
28:3c:e1:ce:17:51:58:0b:eb:52:16:2f:e9:94:e6:
a8:8d:d8:fa:56:26:f3:92:92:9d:dc:4f:d2:dd:cc:
10:9e:6e:c2:cf:d0:b2:20:ac:de:6d:e5:9e:78:24:
cd:c7:6a:f1:92:38:33:02:c9:ef:52:6e:d6:f4:df:
95:fd:8a:7f:7a:b4:c2:a7:ed:3d:f2:1a:73:02:49:
aa:f9:9f:5e:2c:ec:0c:64:4d:c6:3d:59:6d:a5:57:
3c:35:f8:d4:54:53:bc:11:ca:fa:ba:1f:55:ee:31:
27:ea:0a:f3:15:78:41:3b:60:00:a8:c3:6f:79:ab:
d1:c5:7d:84:cf:bb:61:72:83:df:af:dc:ab:76:a1:
2c:dd:e5:a2:82:7a:52:8c:e2:07:36:fa:ca:97:2d:
7a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:33:4A:DA:27:15:C5:4F:BC:FC:F9:A9:A8:F8:56:77:61:34:E9:42
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/hTNK2icVxU-8_PmpqPhWd2E06UI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.221.224.0/21
185.116.120.0/22
IPv6:
2a13:ea40::/29
Signature Algorithm: sha256WithRSAEncryption
30:c0:51:f9:28:32:87:af:7f:78:9b:4c:b9:14:09:e9:16:6f:
5a:e3:94:96:9a:ec:fc:c9:1f:08:73:a8:4e:c8:b1:ad:bb:93:
fe:57:ce:a3:8f:31:f6:36:00:84:af:ea:7c:ff:1b:65:a2:5a:
6b:ae:05:73:a5:b7:ea:48:85:0d:fa:6a:ff:d9:38:b8:48:74:
8b:64:83:4f:3a:18:72:b4:df:0c:fa:41:ac:82:3f:08:6e:33:
21:54:d0:28:cd:2d:b9:1e:d7:e8:44:ea:8d:d3:61:17:eb:0d:
8c:97:7f:6a:63:5a:7d:b0:08:b7:37:a3:ac:35:90:df:2f:07:
02:d1:b7:e3:fa:6d:60:4d:a4:fd:95:63:82:2d:d0:e7:1e:d8:
e4:ec:21:a2:a7:7e:6f:61:8e:3c:a5:0d:77:3f:86:ed:1e:68:
d0:0f:f7:3b:75:88:e4:51:a6:03:a4:f3:ed:da:3e:c8:ec:01:
53:6f:01:5b:29:97:a6:ff:1a:a8:b7:f0:8a:6e:f1:64:4d:33:
ce:d6:54:1f:61:bd:34:a2:c8:67:7d:00:c2:f6:1c:b9:de:34:
2d:67:aa:38:66:bb:32:df:af:a5:d2:70:26:f4:27:7d:d1:32:
39:16:fb:b9:84:b2:a4:02:15:48:ab:72:50:9b:13:c0:24:d4:
cd:34:89:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:13:15 2024 by rpki-client on console-ams.rpki-client.org