Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/hJzxZIcE4KUglYl-a_TOdTmIYWE.roa
File: hJzxZIcE4KUglYl-a_TOdTmIYWE.roa (raw, json)
Hash identifier: R4w4J0kG0kMKV/Ot4NtEgDZyj0TEkCGuMa5bggFbGf8=
Subject key identifier: 84:9C:F1:64:87:04:E0:A5:20:95:89:7E:6B:F4:CE:75:39:88:61:61
Certificate issuer: /CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Certificate serial: 018CC64B1C7B1C8781BB62F00A1A0D11D173
Authority key identifier: 9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/hJzxZIcE4KUglYl-a_TOdTmIYWE.roa
Signing time: Mon 01 Jan 2024 18:30:59 +0000
ROA not before: Mon 01 Jan 2024 18:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201633
IP address blocks: 206.225.17.0/24 maxlen: 24
193.33.156.0/24 maxlen: 24
2a12:d4c0:b00b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:1c:7b:1c:87:81:bb:62:f0:0a:1a:0d:11:d1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eda096dbc8d59a442721cc169d6aeb649f5fd3f
Validity
Not Before: Jan 1 18:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=849cf1648704e0a52095897e6bf4ce7539886161
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:35:54:df:87:35:f9:d3:47:36:70:71:5b:3b:
0a:a2:66:f8:85:0b:ef:ec:af:11:fc:5f:15:80:51:
fd:1d:b8:a3:f6:c3:5c:23:75:ea:b5:c9:3d:5e:8e:
83:62:e1:d8:9f:8a:e6:7b:67:13:65:82:07:69:e1:
db:8d:b5:b9:f2:b9:a0:96:f5:e5:16:aa:67:b7:e3:
05:74:11:af:62:2f:4b:e5:fa:8d:b8:8e:53:e0:4f:
0e:9d:f9:f9:37:31:2f:82:10:63:d6:2f:05:43:0f:
42:bc:24:fc:45:2b:3b:f1:cf:3c:7b:b1:11:72:b6:
43:41:a1:90:83:d9:cf:1d:9a:ed:f0:81:d8:11:eb:
e7:44:5f:dc:82:2f:1a:bc:19:e3:2b:c6:18:9f:e3:
b8:c8:ca:af:43:62:c0:9a:49:17:8d:27:ce:3a:86:
33:33:b3:d0:3d:d9:b5:ca:46:ca:a6:fa:b2:7d:07:
92:ac:93:61:33:c5:8a:ae:ca:55:ae:a7:34:91:43:
ce:2d:cf:f3:73:5e:86:d6:f5:23:97:23:ac:3f:4a:
bd:fc:2a:80:1a:0c:be:66:83:2a:c6:00:9f:20:37:
97:0d:9a:f8:6d:f5:3a:88:1e:42:bd:d8:95:30:50:
16:20:03:2d:2a:54:4e:7b:ba:61:7e:52:44:35:9a:
e4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9C:F1:64:87:04:E0:A5:20:95:89:7E:6B:F4:CE:75:39:88:61:61
X509v3 Authority Key Identifier:
keyid:9E:DA:09:6D:BC:8D:59:A4:42:72:1C:C1:69:D6:AE:B6:49:F5:FD:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntoJbbyNWaRCchzBadautkn1_T8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/hJzxZIcE4KUglYl-a_TOdTmIYWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/981b50-03ab-414b-a310-bdc5d6cb2141/1/ntoJbbyNWaRCchzBadautkn1_T8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.33.156.0/24
206.225.17.0/24
IPv6:
2a12:d4c0:b00b::/48
Signature Algorithm: sha256WithRSAEncryption
65:ac:86:07:32:af:96:a9:b8:87:91:94:e8:ec:ab:d0:ca:bd:
63:e7:85:2c:83:5f:95:67:a7:66:dd:86:29:cd:a6:b2:31:a6:
1e:9c:35:30:06:4d:90:3d:1e:dc:3c:7e:0f:44:70:09:51:72:
7c:0c:ae:fb:dd:09:d8:68:63:cf:f8:cf:0a:bf:99:0e:4f:61:
13:f6:b9:7b:c0:a8:49:fa:a4:11:f7:0b:bd:90:55:61:23:5a:
fd:3e:f9:36:f5:85:31:3f:c1:bb:24:82:d5:06:48:75:26:82:
fa:85:47:9b:a7:78:ba:e2:fd:7a:a4:53:8e:30:8a:6e:f0:9a:
f1:5d:7e:84:18:5f:07:6f:05:c8:2c:05:78:59:be:ad:ee:4c:
7c:05:5f:af:78:0b:17:29:d6:68:ce:02:52:56:3a:c7:7f:27:
87:5e:c6:ce:25:16:9c:17:d0:5f:f1:48:29:37:ac:5c:9d:dd:
34:78:7c:41:e9:5e:04:23:32:2b:92:dc:20:bd:d9:bf:7c:4b:
d1:58:b0:97:f4:f7:70:27:9f:0c:54:16:0b:d5:a2:af:d1:20:
85:78:74:b7:b4:f8:aa:77:9f:1e:8b:a4:4c:06:0d:e6:a9:82:
34:5c:ea:9f:8d:3d:33:b0:ce:86:30:8a:2d:e0:4f:fe:2a:4a:
f8:f0:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:13:44 2024 by rpki-client on console-fra.rpki-client.org