Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/H9L2j3V1OCm0GEJQ8rEBWFDem98.roa
File: H9L2j3V1OCm0GEJQ8rEBWFDem98.roa (raw, json)
Hash identifier: T+LNAxZwSfX+uHTFBukVfv0EllttJbmPyIAUMgZGHhU=
Subject key identifier: 1F:D2:F6:8F:75:75:38:29:B4:18:42:50:F2:B1:01:58:50:DE:9B:DF
Certificate issuer: /CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Certificate serial: 018F2D84B3CC2F2B618F8EF23F13961035E3
Authority key identifier: 9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/H9L2j3V1OCm0GEJQ8rEBWFDem98.roa
Signing time: Tue 30 Apr 2024 05:40:22 +0000
ROA not before: Tue 30 Apr 2024 05:40:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215792
IP address blocks: 185.92.204.0/22 maxlen: 22
2a13:a3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:2d:84:b3:cc:2f:2b:61:8f:8e:f2:3f:13:96:10:35:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a6cdbf475113f96ca78a07afbd4458c88880771
Validity
Not Before: Apr 30 05:40:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fd2f68f75753829b4184250f2b1015850de9bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b7:67:67:71:ac:cf:bf:18:39:30:57:f4:2f:
15:9d:d2:ad:c5:5b:4c:c8:0c:a0:cf:01:9d:e3:a3:
7b:d4:b6:3a:62:1a:9f:b7:49:e7:b8:bd:58:12:ae:
de:b1:45:b3:a3:69:79:64:8c:a7:9c:6e:dd:b5:6c:
da:a8:dd:2e:8b:d3:1c:62:de:18:55:5d:5e:d0:02:
0e:a7:c5:db:74:bd:e3:2a:b2:8b:17:2f:fc:51:59:
52:eb:54:18:3b:c5:1d:19:3c:31:a7:cf:c8:4e:b2:
41:1c:5b:ef:83:15:60:5f:3c:9c:93:ad:21:32:e1:
52:74:1f:5d:89:25:eb:0e:ce:f3:89:ab:13:4a:cd:
06:62:47:5c:db:7b:a4:4f:b4:04:b9:c2:59:95:6a:
27:40:b4:9e:b6:ce:fc:45:ca:4a:5c:eb:72:88:7b:
84:84:cb:6f:cb:dc:a2:08:d2:e8:1a:47:d7:96:e2:
29:f5:39:0c:2b:c6:32:b2:04:6e:08:2e:57:ad:ae:
31:c3:eb:1c:41:e7:08:64:60:48:2a:37:72:7f:9e:
4a:a3:07:6d:7e:e9:47:a0:1c:78:26:34:fb:1d:aa:
f8:ea:a7:75:3b:52:84:e6:bc:fb:04:b3:c6:c9:2b:
46:15:8f:88:84:7d:08:4e:b7:11:12:ec:22:aa:ce:
5f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D2:F6:8F:75:75:38:29:B4:18:42:50:F2:B1:01:58:50:DE:9B:DF
X509v3 Authority Key Identifier:
keyid:9A:6C:DB:F4:75:11:3F:96:CA:78:A0:7A:FB:D4:45:8C:88:88:07:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mmzb9HURP5bKeKB6-9RFjIiIB3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/H9L2j3V1OCm0GEJQ8rEBWFDem98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/473577-4c31-4295-abde-dc2feac37829/1/mmzb9HURP5bKeKB6-9RFjIiIB3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.204.0/22
IPv6:
2a13:a3c0::/29
Signature Algorithm: sha256WithRSAEncryption
30:22:8b:06:e0:51:81:4f:98:a5:7d:a7:2b:32:38:73:87:bf:
b8:fd:48:eb:3a:50:c1:a6:fe:cd:46:64:78:08:bc:fc:4e:0a:
9f:e1:a4:9d:18:a6:5b:57:37:94:7c:98:a0:61:a5:a5:a6:d7:
13:9e:2e:c6:1c:13:55:5e:dd:c4:92:5c:75:02:a1:39:46:2f:
c8:8d:54:b3:ff:88:aa:ce:ba:a6:50:da:36:24:d8:88:8e:aa:
48:61:4d:90:27:d8:6b:6d:43:22:26:d8:61:80:cd:a3:81:d2:
3c:e1:f4:8f:f1:88:4e:04:fa:d7:7e:e8:c8:58:66:b4:11:71:
4c:7e:83:6d:ee:a1:8d:3b:35:b8:e3:39:8d:e5:36:e4:d4:70:
ca:98:9e:97:e5:1d:5d:ef:d6:2d:35:de:76:04:da:53:f9:15:
96:33:eb:0d:cd:63:d3:00:a8:62:42:b5:a6:d8:fe:20:66:4a:
df:b3:8e:03:3a:0a:d7:06:6a:65:bd:2d:54:a6:89:da:14:a9:
44:da:95:f4:e3:b6:22:bb:c4:33:02:73:50:b6:f5:a7:68:12:
0f:7b:d6:23:fe:d9:93:e3:ee:4b:74:35:a1:4e:01:39:bb:a8:
d8:f2:0e:fd:94:92:af:ae:f3:b7:b1:1b:da:31:c1:f1:6f:63:
e0:ed:39:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 17:45:22 2024 by rpki-client on console-ams.rpki-client.org