Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/HUXtQzXs8yfhDeFNvQN9IPgujuY.roa
File: HUXtQzXs8yfhDeFNvQN9IPgujuY.roa (raw, json)
Hash identifier: qGCOOGPeDK1CmV6BjvD2yvA08uMx3IdGtlmwjxb/oVg=
Subject key identifier: 1D:45:ED:43:35:EC:F3:27:E1:0D:E1:4D:BD:03:7D:20:F8:2E:8E:E6
Certificate issuer: /CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Certificate serial: 018F2D9399DAF59B2C56A4C70C64380BE0E1
Authority key identifier: 69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/HUXtQzXs8yfhDeFNvQN9IPgujuY.roa
Signing time: Tue 30 Apr 2024 05:56:38 +0000
ROA not before: Tue 30 Apr 2024 05:56:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49808
IP address blocks: 195.78.46.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:93:99:da:f5:9b:2c:56:a4:c7:0c:64:38:0b:e0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f33e979b43e88d0e5eca7987947db21ef7cab9
Validity
Not Before: Apr 30 05:56:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d45ed4335ecf327e10de14dbd037d20f82e8ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:be:23:a7:99:06:cf:75:b2:f3:04:f0:da:13:
4a:b9:cb:0c:48:17:73:d5:a0:07:33:e6:33:6a:ac:
81:a2:cc:05:09:15:c5:de:dc:07:d8:aa:59:89:2e:
f5:10:27:e6:60:d0:12:00:e4:f5:8f:b2:2c:93:49:
f9:d7:c0:72:f5:8c:2d:ec:e8:07:77:d6:1a:b1:49:
20:ff:4c:97:74:86:45:2a:63:64:85:00:b8:eb:aa:
41:af:84:26:b7:85:1b:2f:32:63:bc:27:04:52:9f:
84:6e:cb:61:1c:98:33:61:dc:2e:86:e4:d9:13:54:
69:ab:d5:a9:b6:bf:ca:ec:b9:25:8b:12:16:ce:6a:
23:10:6c:c7:99:ce:a7:b3:86:12:75:7f:88:2c:14:
77:56:fb:d2:cb:cf:5d:07:8c:54:8f:fa:53:1c:d9:
55:bd:7c:1b:b9:6a:a5:5d:3e:c5:f8:01:7a:0e:64:
9c:88:17:c4:6f:3c:06:74:93:c4:c8:8d:01:e8:5b:
28:83:3e:d4:81:3e:f2:d9:48:11:fd:e6:6d:44:68:
be:0f:21:e4:49:6f:85:77:fb:14:bf:e4:26:72:ff:
93:ee:65:a1:f9:a9:1a:dc:23:87:39:03:5a:f4:5d:
f4:14:45:e1:42:63:77:68:72:2d:17:7d:9f:d0:85:
45:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:ED:43:35:EC:F3:27:E1:0D:E1:4D:BD:03:7D:20:F8:2E:8E:E6
X509v3 Authority Key Identifier:
keyid:69:F3:3E:97:9B:43:E8:8D:0E:5E:CA:79:87:94:7D:B2:1E:F7:CA:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afM-l5tD6I0OXsp5h5R9sh73yrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/HUXtQzXs8yfhDeFNvQN9IPgujuY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/953a61-3349-47bf-a12b-e4c69334142c/1/afM-l5tD6I0OXsp5h5R9sh73yrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.78.46.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:31:53:e5:77:d5:2b:61:ae:95:ff:59:76:ac:0c:76:14:35:
b1:a4:58:96:6f:37:7a:24:14:ef:21:57:b1:07:65:7f:6f:99:
44:ec:b0:5d:12:e4:97:37:1f:22:41:e8:fd:73:8f:45:72:3c:
c1:78:f2:68:00:ee:12:e8:42:76:d1:b4:c1:be:ff:b4:f7:ee:
3e:d5:f2:12:ec:98:9b:45:0c:19:0d:78:f6:f8:aa:4b:89:ae:
b4:47:43:6a:ea:13:1a:15:e4:a4:c9:02:30:31:fd:76:94:5a:
95:aa:8e:ff:50:61:85:46:00:2d:a2:17:85:16:09:0c:b4:78:
60:0b:db:d8:8f:2c:58:88:1a:ef:5e:e1:f7:77:b0:39:05:d4:
7e:aa:91:bd:6e:3a:84:2f:dd:f8:f4:ca:b3:d9:bf:63:43:89:
d0:1f:a3:c9:70:71:66:05:57:3d:0e:f7:2a:72:cb:32:49:da:
f3:69:bd:9a:f8:61:e0:83:d9:0e:91:ff:a8:bc:53:9d:36:bd:
65:92:f1:9a:c5:7c:dd:61:41:78:ae:f4:3b:ca:7a:79:6d:77:
c4:c5:3f:8d:1f:d7:04:d9:96:4d:3f:8c:82:cd:8a:cd:c3:85:
f9:0f:79:b9:79:87:12:f8:ca:4b:26:4e:24:94:93:70:76:77:
dd:d0:e0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 08:36:43 2024 by rpki-client on console-ams.rpki-client.org