Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/hYoEXk29qymZH3IflPywBEOwFHY.roa
File: hYoEXk29qymZH3IflPywBEOwFHY.roa (raw, json)
Hash identifier: hLf2fX1NPyzj2MQLtn8oenJAnsjdJUYXsN8nm2n0B80=
Subject key identifier: 85:8A:04:5E:4D:BD:AB:29:99:1F:72:1F:94:FC:B0:04:43:B0:14:76
Certificate issuer: /CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Certificate serial: 018CC8DF5AF3AAEF822F05DB4C75074DC06A
Authority key identifier: A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/hYoEXk29qymZH3IflPywBEOwFHY.roa
Signing time: Tue 02 Jan 2024 06:32:10 +0000
ROA not before: Tue 02 Jan 2024 06:32:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 193.150.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:5a:f3:aa:ef:82:2f:05:db:4c:75:07:4d:c0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5b0c05731efa4bbe5c2a30ae5189f7785d2d499
Validity
Not Before: Jan 2 06:32:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=858a045e4dbdab29991f721f94fcb00443b01476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:e1:cf:63:b6:57:ca:e6:7b:99:02:32:d1:
69:1c:f5:ae:19:ff:61:ec:bd:5f:5c:fd:1d:a0:1a:
cd:2c:e1:05:8d:30:a8:49:96:4d:9a:fc:ff:59:66:
95:b4:bc:e8:9c:96:c7:9b:5f:df:72:6d:13:6f:45:
d4:2b:a6:4f:d7:ae:5a:e7:35:82:b2:56:a6:68:5f:
88:b5:95:fa:c0:5b:49:9e:ed:93:cc:03:62:5b:32:
03:87:15:ce:93:cc:66:d3:29:50:a5:fc:ce:85:dc:
e3:b0:b2:1f:87:e7:cb:fe:38:f6:3a:48:c3:58:dd:
d8:1f:65:94:14:d5:8e:04:bb:13:c8:5b:b3:60:cc:
36:60:66:89:bb:aa:a7:67:e3:be:4e:fd:b8:f2:f4:
1a:fc:7f:1d:14:1c:90:52:ed:58:c0:a9:4d:a2:f9:
7b:07:92:4d:6c:1c:cc:2d:2c:9d:c9:e2:60:43:be:
f5:6e:59:73:ac:e2:21:4f:e8:73:4f:aa:1c:58:87:
bf:27:e2:b6:06:f6:73:96:d1:19:e7:87:e0:cf:f2:
46:19:34:85:96:27:fe:75:de:fb:8c:12:75:52:f3:
5c:9a:fd:cd:dc:cf:66:d9:86:90:9b:44:e5:c2:01:
47:9f:bc:63:25:1d:89:bd:d4:9a:20:ac:4e:ed:94:
fd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:8A:04:5E:4D:BD:AB:29:99:1F:72:1F:94:FC:B0:04:43:B0:14:76
X509v3 Authority Key Identifier:
keyid:A5:B0:C0:57:31:EF:A4:BB:E5:C2:A3:0A:E5:18:9F:77:85:D2:D4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/hYoEXk29qymZH3IflPywBEOwFHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/25149c-0932-4683-8ab8-d15febdf5ecf/1/pbDAVzHvpLvlwqMK5Rifd4XS1Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.150.188.0/22
Signature Algorithm: sha256WithRSAEncryption
5f:c1:5f:3b:a7:83:00:4f:bf:e7:15:e1:73:23:59:e8:70:5b:
49:7d:1d:17:15:7a:b9:06:eb:27:27:35:14:05:58:2b:4c:bd:
20:25:be:03:59:ca:fd:84:d9:97:3d:b7:68:70:21:51:08:1f:
a6:fa:18:ad:3f:b1:cc:2f:c4:23:c8:37:d6:b5:23:54:57:53:
8b:d5:0b:71:69:bb:ea:bf:60:d8:1b:bd:c9:49:ab:84:0f:88:
8c:fb:56:4f:9a:00:66:61:89:10:fe:7f:d0:37:2a:5e:da:5c:
59:06:61:cd:55:cb:41:e4:13:38:3d:7f:ce:ca:1f:ed:89:7a:
e0:13:33:85:14:c1:9a:b6:42:ea:92:f8:65:5d:f1:29:98:c2:
50:23:35:ea:71:79:a2:14:38:84:fd:a0:ab:35:de:07:8d:00:
0a:5c:46:bf:ee:c5:8b:24:01:0d:6a:26:ac:7c:c4:0d:af:30:
c9:29:9b:fe:5f:1b:78:3d:28:3a:d3:cd:05:44:2f:b1:dc:8f:
dc:db:6a:28:8e:0c:ed:45:83:0e:31:ed:0d:94:f1:2d:c2:7c:
a1:64:27:86:38:4a:2f:8a:47:a2:67:4d:63:d0:bc:09:6e:16:
e0:c7:bf:39:63:29:75:2f:19:79:a3:bf:bc:40:b8:2d:e5:1e:
42:61:2d:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 07:07:37 2024 by rpki-client on console-ams.rpki-client.org