Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/hqjIdHcSOvPPtZlaKZSZkowQTNI.roa
File: hqjIdHcSOvPPtZlaKZSZkowQTNI.roa (raw, json)
Hash identifier: r+V7jUZ11kzHEIqwGvVhMWD50C/YNDlvr3n4GGhcvu8=
Subject key identifier: 86:A8:C8:74:77:12:3A:F3:CF:B5:99:5A:29:94:99:92:8C:10:4C:D2
Certificate issuer: /CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Certificate serial: 0191087B9E0F16F44C94BF3F1DC16AB8BE3A
Authority key identifier: 99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/hqjIdHcSOvPPtZlaKZSZkowQTNI.roa
Signing time: Wed 31 Jul 2024 11:10:04 +0000
ROA not before: Wed 31 Jul 2024 11:10:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199912
IP address blocks: 45.95.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:08:7b:9e:0f:16:f4:4c:94:bf:3f:1d:c1:6a:b8:be:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fee7cbd8e78d1f14a453a04b916f7c1581d204
Validity
Not Before: Jul 31 11:10:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86a8c87477123af3cfb5995a299499928c104cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:a2:2f:d5:8d:9e:83:ec:8b:00:35:ea:a8:
dc:fc:d6:1a:de:bd:03:cd:f3:bd:0a:9c:71:59:ca:
7e:e8:23:cc:1d:6c:bb:89:78:d7:4d:ed:0b:a6:f0:
92:af:e7:b0:bc:3d:00:7d:aa:4e:2d:c2:f8:64:55:
3f:18:56:d4:25:cd:50:f0:33:a5:ce:cb:52:a4:cc:
d8:fa:1e:d0:08:0e:70:a0:cd:d4:d4:66:60:56:a2:
60:d5:50:e6:ad:fc:f5:18:04:47:cf:d6:16:e0:42:
d1:ef:18:1d:39:54:d5:c9:da:6a:21:86:b1:3a:b9:
e1:72:62:ee:80:97:d7:3c:e5:9c:ca:72:cf:bc:5b:
2a:55:16:bc:2e:3c:9d:62:e2:e1:9f:15:ce:44:c5:
22:9b:4d:c0:d9:29:c3:d6:e1:fb:70:0a:63:f7:3e:
65:22:41:d2:04:7a:35:6e:78:0a:6a:d7:67:60:08:
dd:78:2b:6b:e9:7d:c9:62:e9:17:8e:9a:b8:83:98:
fe:0c:52:e1:87:43:63:e2:67:81:c7:b5:3a:55:8a:
9f:ec:7e:98:34:4b:17:b6:b6:23:f8:06:77:c6:6a:
86:99:cd:36:61:2e:6f:6a:88:90:e6:0b:21:cf:ea:
07:6d:16:a0:45:20:29:b3:38:9c:df:99:f6:ac:c7:
89:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A8:C8:74:77:12:3A:F3:CF:B5:99:5A:29:94:99:92:8C:10:4C:D2
X509v3 Authority Key Identifier:
keyid:99:FE:E7:CB:D8:E7:8D:1F:14:A4:53:A0:4B:91:6F:7C:15:81:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/hqjIdHcSOvPPtZlaKZSZkowQTNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/0dd4cb-1f72-40ed-a657-1c22eff72818/1/mf7ny9jnjR8UpFOgS5FvfBWB0gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.95.114.0/24
Signature Algorithm: sha256WithRSAEncryption
12:11:79:4b:71:1c:ff:a0:e0:ad:82:60:e5:32:20:39:8e:0b:
23:67:99:27:9a:a4:76:34:fd:3c:53:f1:b6:75:86:22:a7:64:
3c:f1:b6:68:06:7d:60:5f:ed:fc:2c:2e:8b:63:15:92:2d:22:
57:6d:ec:d3:e1:a6:a4:fd:5d:7c:b8:4a:13:f7:08:fd:c5:67:
d9:0a:17:0e:d7:6b:ef:b9:5a:09:9f:e4:c2:0f:a1:7a:73:9a:
22:51:73:c4:bb:dc:8e:7d:03:83:34:e5:39:e4:d1:a3:72:d9:
b6:b5:7e:f7:9c:c3:a3:17:aa:f1:e7:a6:1b:3b:e8:95:12:2d:
c4:b3:e1:d1:ab:e9:d2:59:04:c2:16:c4:ac:33:78:bb:cf:26:
5a:21:08:f7:db:1f:6c:23:7a:43:04:74:9d:98:1f:bc:92:fe:
e0:f7:02:50:8f:61:ea:8b:68:99:8e:d6:ec:d7:f1:3b:51:93:
d1:61:47:69:f4:d9:cb:77:6e:e1:8c:df:79:5e:bc:db:57:e1:
e1:72:86:4c:eb:0a:e1:48:18:68:89:f7:95:48:d0:64:7c:52:
f2:82:b9:69:f7:e4:4b:c5:b8:70:2c:f5:a8:05:ba:d4:3f:f3:
42:6f:8c:6c:23:59:c0:9f:3b:28:e2:5e:9f:f2:db:2b:d5:b4:
bf:1f:57:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:01:13 2024 by rpki-client on console-ams.rpki-client.org