Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/rhkNFQG4W-UrHLRCEpILEDJ6FWc.roa
File: rhkNFQG4W-UrHLRCEpILEDJ6FWc.roa (raw, json)
Hash identifier: qe+x4jFl5wRc7y+bE6alH9lju8CTM4r3HjwWWc5R2c8=
Subject key identifier: AE:19:0D:15:01:B8:5B:E5:2B:1C:B4:42:12:92:0B:10:32:7A:15:67
Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Certificate serial: 018CC2DAE6F60AD39A31A1C9B5F2B7F05506
Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/rhkNFQG4W-UrHLRCEpILEDJ6FWc.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204804
IP address blocks: 91.231.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e6:f6:0a:d3:9a:31:a1:c9:b5:f2:b7:f0:55:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ae190d1501b85be52b1cb44212920b10327a1567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:77:93:7e:c3:2b:4a:20:03:69:0e:d5:2a:ba:
a0:01:a4:74:46:ec:21:2f:be:1c:39:80:05:7c:f8:
d3:05:d9:e4:1a:ed:d7:6c:00:b9:02:47:44:ed:6f:
62:9c:83:c2:8c:f7:78:71:a9:c2:34:51:23:28:7e:
54:14:d2:7f:92:6e:f8:fd:3d:c6:2f:47:a6:69:56:
1b:c6:02:58:94:66:a6:80:f5:9c:f3:76:e4:b6:77:
5f:9e:be:40:f3:25:76:5b:ee:05:80:4f:b6:2e:e4:
27:ba:a7:c7:fb:95:de:7c:33:46:50:cd:ed:79:7a:
66:8c:8a:92:86:de:20:b4:1e:fd:3d:82:83:3e:bb:
16:e8:d6:42:c1:04:31:e0:64:ec:ce:c6:21:b5:2f:
9a:6e:a8:88:8e:a3:18:ba:2b:6d:8d:92:a3:dd:6f:
a9:95:bf:08:f8:d4:50:98:e9:d4:de:f6:1a:8f:88:
41:79:9f:7d:98:26:0d:ce:81:5d:ea:2e:16:03:28:
6e:93:d2:82:82:77:bf:44:d3:bc:8b:6c:60:fb:25:
61:51:e9:66:26:48:53:0a:ce:6d:d9:78:01:bb:e6:
1e:8e:c6:32:7d:67:2d:ec:c5:39:e1:7f:a8:31:8a:
72:43:02:ae:ab:7b:43:d5:0a:7d:cc:e9:d1:fa:f8:
26:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:19:0D:15:01:B8:5B:E5:2B:1C:B4:42:12:92:0B:10:32:7A:15:67
X509v3 Authority Key Identifier:
keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/rhkNFQG4W-UrHLRCEpILEDJ6FWc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.66.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:5e:de:a0:92:b6:77:ad:77:49:3f:c0:85:ec:e0:20:9d:2e:
44:7d:d0:69:ca:1c:31:f9:8b:2a:fc:f7:a0:e1:ed:95:a0:6b:
07:eb:b7:38:c7:83:45:04:10:75:6c:b1:7f:63:b8:78:1d:3f:
15:35:bc:df:8c:56:b4:26:9a:2d:fb:58:fd:82:e7:be:72:92:
2d:26:3c:c9:38:08:c5:0b:8b:2e:09:7d:0f:90:1e:ff:51:63:
dd:03:31:ae:db:c0:1b:4e:01:b5:e8:64:ad:71:2f:f2:89:51:
3f:8e:8f:25:73:d9:71:73:7f:59:71:63:a4:80:77:a9:93:2c:
66:4d:1b:62:47:57:4c:02:d4:70:bf:f4:2f:6b:0d:11:1f:1e:
ea:6e:3c:58:57:af:2a:47:6b:9c:c9:22:7c:d1:c6:95:50:fd:
d8:2d:88:8f:6b:df:bd:c3:63:c1:9e:a9:da:af:61:ce:86:d6:
a5:58:fd:89:5d:0f:3f:52:09:7b:2b:6e:9a:2e:20:2f:9c:26:
a5:2d:75:26:6f:b3:03:7b:03:56:2e:17:6d:c7:e1:d3:f2:38:
5e:12:65:4d:7b:d5:ec:de:88:4c:a2:77:b3:85:6c:15:db:ae:
29:4f:25:15:dc:c5:bb:12:32:1b:48:89:21:9a:d5:db:60:8e:
dd:a6:7a:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 03:31:45 2024 by rpki-client on console-ams.rpki-client.org