Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/HuBFli4qaOOcXYLwpOn7HDxh9DU.roa
File: HuBFli4qaOOcXYLwpOn7HDxh9DU.roa (raw, json)
Hash identifier: zKQcJ/40lJWzz+vTyvCDZwTOUtf6DtHXFQWw2MhroAQ=
Subject key identifier: 1E:E0:45:96:2E:2A:68:E3:9C:5D:82:F0:A4:E9:FB:1C:3C:61:F4:35
Certificate issuer: /CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Certificate serial: 018CC79439925ED4426E250FF56978CEEE0A
Authority key identifier: AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/HuBFli4qaOOcXYLwpOn7HDxh9DU.roa
Signing time: Tue 02 Jan 2024 00:30:29 +0000
ROA not before: Tue 02 Jan 2024 00:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60015
IP address blocks: 185.54.64.0/24 maxlen: 24
185.54.67.0/24 maxlen: 24
185.54.66.0/24 maxlen: 24
185.54.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 15:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:39:92:5e:d4:42:6e:25:0f:f5:69:78:ce:ee:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe443f9ae98acafddd6162d5c8eb0f9419a05f7
Validity
Not Before: Jan 2 00:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ee045962e2a68e39c5d82f0a4e9fb1c3c61f435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:25:c0:b1:c1:98:b2:da:89:fe:a2:9f:00:6f:
ef:3b:44:a9:41:00:3b:c3:0a:5f:66:90:b5:09:a6:
bf:50:98:22:84:ba:87:89:5d:fc:b7:c4:48:89:b4:
65:70:60:fc:25:5b:2b:ff:c6:ee:69:f8:49:2a:8c:
b3:69:88:61:ba:46:ab:bd:d2:97:41:5d:18:98:f5:
a2:82:47:e5:b5:90:e5:34:f2:28:b0:6c:e8:4b:5f:
cb:46:e9:4a:09:fb:1d:4f:37:6b:50:df:46:6c:91:
d3:e8:90:62:47:7a:05:29:85:8b:21:98:05:cf:ec:
d8:f7:d6:57:dc:df:22:b6:da:b2:28:16:35:6a:4d:
a8:d9:f1:f8:56:ed:b3:d0:49:7d:81:c9:89:e5:53:
ac:67:1f:2a:a0:ca:9a:ad:02:43:cd:81:ad:e5:ff:
8f:38:a6:c8:11:26:4d:a3:04:31:af:cb:ca:24:8c:
63:bd:f7:b1:f8:fe:58:fd:4a:be:d8:5e:dd:8a:01:
b5:a3:97:ec:ac:02:a4:cb:cf:83:20:ee:b6:b3:66:
06:17:7c:a0:9b:7f:17:48:69:dc:c5:79:a9:91:cd:
f1:03:cd:8b:26:a0:fc:b0:3b:ad:08:0d:a6:5a:3c:
d5:55:84:6a:47:d7:c2:8e:80:cc:8c:dd:22:76:e2:
ba:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E0:45:96:2E:2A:68:E3:9C:5D:82:F0:A4:E9:FB:1C:3C:61:F4:35
X509v3 Authority Key Identifier:
keyid:AB:E4:43:F9:AE:98:AC:AF:DD:D6:16:2D:5C:8E:B0:F9:41:9A:05:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-RD-a6YrK_d1hYtXI6w-UGaBfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/HuBFli4qaOOcXYLwpOn7HDxh9DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/900b24-f286-4bc7-961e-044b686bc97f/1/q-RD-a6YrK_d1hYtXI6w-UGaBfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.64.0/22
Signature Algorithm: sha256WithRSAEncryption
04:a6:62:f5:6d:5e:51:f6:f2:3e:59:a8:c9:a8:8b:04:81:c8:
fc:58:cb:e0:14:b2:86:86:4c:77:23:57:e5:c6:94:57:c2:59:
c4:d8:e5:4b:fd:52:f3:46:f6:3d:ed:b6:dd:ac:ee:a5:55:9d:
60:c0:72:a5:1a:d3:7f:56:e5:cd:c7:62:5b:0c:2e:e4:5e:fd:
b9:f6:e3:3e:a1:82:06:65:d7:c0:e2:b3:ad:83:c8:60:be:59:
ae:21:12:30:7c:67:19:f1:6a:08:46:44:47:60:c6:41:fb:bd:
98:ff:f3:42:00:d4:05:1a:61:3a:e7:97:ef:66:60:da:1d:f2:
96:28:9d:eb:05:b3:09:22:b4:8e:be:e6:4b:9a:9c:a1:ea:26:
e2:48:f3:09:39:69:bd:40:67:2e:fc:e3:1c:2c:36:2c:3c:62:
e9:de:b0:f7:d0:bf:b2:37:f7:40:e9:97:66:8a:44:fd:6c:3c:
6a:de:c4:92:9e:8a:1e:f4:fe:22:77:bd:e4:bd:4e:70:fb:24:
01:df:f3:78:da:d8:03:38:73:49:c8:e9:1c:dd:f5:05:59:b3:
a0:66:a8:b2:a5:76:4b:ee:88:d4:e9:9e:08:1c:79:81:3c:e7:
53:ff:ce:c3:21:4d:5a:92:43:a3:64:58:bb:33:cd:ab:08:3d:
26:f0:85:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:27:51 2024 by rpki-client on console-fra.rpki-client.org