Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/HJTuQqwAesHMCEj-iYSwqWGCRPI.roa
File: HJTuQqwAesHMCEj-iYSwqWGCRPI.roa (raw, json)
Hash identifier: zWSjqFpvBggs42vghswWyKK7oWWXZQq8jjF/QqwAYNE=
Subject key identifier: 1C:94:EE:42:AC:00:7A:C1:CC:08:48:FE:89:84:B0:A9:61:82:44:F2
Certificate issuer: /CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Certificate serial: 018CC26D12FC8933BEC04C4253A70B0D74E9
Authority key identifier: B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/HJTuQqwAesHMCEj-iYSwqWGCRPI.roa
Signing time: Mon 01 Jan 2024 00:29:37 +0000
ROA not before: Mon 01 Jan 2024 00:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31180
IP address blocks: 217.144.112.0/24 maxlen: 24
217.144.113.0/24 maxlen: 24
217.144.118.0/24 maxlen: 24
217.144.116.0/24 maxlen: 24
217.144.117.0/24 maxlen: 24
217.144.114.0/24 maxlen: 24
217.144.115.0/24 maxlen: 24
217.144.119.0/24 maxlen: 24
217.144.120.0/24 maxlen: 24
217.144.125.0/24 maxlen: 24
217.144.123.0/24 maxlen: 24
217.144.124.0/24 maxlen: 24
217.144.121.0/24 maxlen: 24
217.144.122.0/24 maxlen: 24
217.144.126.0/24 maxlen: 24
217.144.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 22:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:12:fc:89:33:be:c0:4c:42:53:a7:0b:0d:74:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1d2e681ff23dddf3d517858e1c64a1dad298729
Validity
Not Before: Jan 1 00:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c94ee42ac007ac1cc0848fe8984b0a9618244f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:3c:fb:f4:6a:ea:0b:c8:f3:70:1c:f0:0f:
3f:6b:95:a8:77:03:53:d7:05:05:7d:73:ba:41:cf:
d2:e1:bd:0b:cd:cc:fc:05:09:5d:9b:f5:2f:50:47:
c9:14:9f:73:87:f6:de:ca:c0:11:7b:ea:8a:43:2f:
e6:84:d9:76:38:79:8b:42:ec:f1:af:62:5e:e0:4a:
92:01:e7:12:42:69:ec:3a:95:a8:3a:01:fe:76:7b:
af:c0:8f:74:e1:b9:c9:cb:4b:5d:f4:72:ca:48:12:
17:aa:70:3f:57:e5:6e:c2:18:16:b1:5a:4a:fa:9d:
f9:c8:64:b6:f3:9a:6a:4f:7f:73:5a:64:d9:75:cf:
ef:5b:a3:39:65:5a:4b:2b:53:03:da:ee:da:6c:a4:
46:dc:d0:e6:6a:22:74:f0:7c:61:05:19:88:70:93:
09:52:6a:5d:a1:77:d3:e2:9a:2b:dd:d7:97:90:36:
29:df:48:0d:fd:68:83:4f:da:8c:ef:d4:8f:a1:39:
9d:76:d3:f8:3a:86:66:26:99:39:71:fc:fe:31:04:
ba:93:41:ab:b5:1c:16:e3:cc:33:cc:e1:cb:52:be:
47:1d:da:f8:6e:d4:17:41:d0:2f:a6:65:61:be:f5:
e7:3c:9c:16:6a:e1:6f:90:d9:7e:3c:c3:3d:66:d2:
d3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:94:EE:42:AC:00:7A:C1:CC:08:48:FE:89:84:B0:A9:61:82:44:F2
X509v3 Authority Key Identifier:
keyid:B1:D2:E6:81:FF:23:DD:DF:3D:51:78:58:E1:C6:4A:1D:AD:29:87:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sdLmgf8j3d89UXhY4cZKHa0phyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/HJTuQqwAesHMCEj-iYSwqWGCRPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/d568ed-1780-4d60-a6f7-5a8360dea3a3/1/sdLmgf8j3d89UXhY4cZKHa0phyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.144.112.0/20
Signature Algorithm: sha256WithRSAEncryption
81:1f:e6:f7:32:02:d1:ba:28:f7:68:b9:08:ca:c5:d5:27:c5:
49:9b:99:a8:0d:18:9c:85:28:2d:e7:c1:94:e6:ba:25:9e:04:
64:1f:61:8d:44:31:01:9f:3a:42:c8:59:99:9b:3a:3f:98:26:
1b:ea:49:a3:b1:d2:9c:87:79:f5:95:73:d7:d7:d2:0b:84:2e:
aa:17:05:5b:87:57:16:d0:ea:aa:15:6d:ec:00:3c:2e:8a:4f:
87:64:b3:21:de:42:9b:d2:a1:8f:0d:f6:02:1b:6d:61:4c:b7:
be:04:90:2c:88:8f:81:1a:23:6c:a6:b3:4b:bc:d2:bc:5a:0b:
73:6e:cf:5d:52:d2:23:24:b4:0e:dc:d6:b1:30:46:f8:09:a5:
aa:19:57:76:0c:db:78:5f:8c:de:0d:29:12:47:21:1d:58:6b:
67:90:23:8a:17:74:ca:2b:a3:34:8f:29:66:ee:bf:bc:56:65:
b8:75:69:68:3d:32:af:66:cf:f6:83:93:46:c8:7f:d5:09:5e:
e9:1a:b8:c0:26:23:99:95:46:af:81:d6:3f:1b:52:3e:5e:7b:
2e:f4:42:38:74:9c:fe:4f:3e:a4:25:2d:a1:05:12:14:3d:14:
11:f7:41:fa:1b:e7:15:5b:a0:f5:5a:78:0c:f9:ce:11:ac:8d:
1a:45:96:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 01:05:17 2024 by rpki-client on console-ams.rpki-client.org