Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/HHkorWSsCO4WzBIOwUGkYmqcK8U.roa
File: HHkorWSsCO4WzBIOwUGkYmqcK8U.roa (raw, json)
Hash identifier: DKQya1UWvpIIWCjpCdFIb5QG8HJ5EmPhKtNNGXvYuFI=
Subject key identifier: 1C:79:28:AD:64:AC:08:EE:16:CC:12:0E:C1:41:A4:62:6A:9C:2B:C5
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A7F089B226343192805C4104A177B
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/HHkorWSsCO4WzBIOwUGkYmqcK8U.roa
Signing time: Mon 01 Jan 2024 18:30:20 +0000
ROA not before: Mon 01 Jan 2024 18:30:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62122
IP address blocks: 141.101.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7f:08:9b:22:63:43:19:28:05:c4:10:4a:17:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c7928ad64ac08ee16cc120ec141a4626a9c2bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:04:86:15:c0:db:93:4d:a2:51:50:10:d7:2d:
1d:99:0a:ba:0e:70:5c:29:05:dd:9c:44:9d:73:cc:
4b:5c:6f:19:c6:57:20:78:4a:42:50:4a:7c:3d:a5:
d0:09:1d:1e:23:35:53:85:47:92:da:8b:84:c8:c8:
b8:08:ab:1d:ee:d3:d1:37:2b:65:0c:3f:62:48:00:
df:e0:da:5b:5a:29:34:50:34:73:e8:93:b7:68:1a:
49:0e:3d:44:fa:33:a9:fd:aa:8b:83:2a:c5:1d:2a:
31:46:ef:91:a1:59:6f:ec:b4:c3:be:c4:40:72:ec:
5c:af:cd:5d:0a:27:4e:ad:f3:21:9f:2d:67:c0:cc:
c2:de:64:4a:a6:53:39:e4:7f:26:d0:90:f3:6a:59:
80:69:b9:c3:08:fd:d3:29:61:64:b9:1c:67:6c:b7:
c2:c7:7d:71:8b:3a:ba:9c:06:a4:36:24:85:ec:53:
47:40:78:83:f5:ea:1f:90:d7:4a:11:71:1a:5d:ca:
9f:d4:d3:38:9b:29:7f:93:f0:bd:06:89:d2:e6:65:
f3:b2:eb:08:be:68:bd:89:ea:78:c1:9e:c6:26:44:
06:b2:71:d1:2e:3e:be:f0:da:fd:ff:e6:56:bb:3a:
c2:ed:35:c8:ad:92:0e:67:05:26:2c:3c:56:29:eb:
42:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:79:28:AD:64:AC:08:EE:16:CC:12:0E:C1:41:A4:62:6A:9C:2B:C5
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/HHkorWSsCO4WzBIOwUGkYmqcK8U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:91:72:86:3c:8b:c3:14:c9:3a:67:1a:5a:ae:2d:7d:79:96:
07:47:87:40:1e:bd:a1:da:e3:fe:c9:ad:ca:33:b7:ba:ea:4c:
02:ab:94:96:11:ad:e8:57:ca:3a:bc:aa:94:f5:35:15:43:13:
16:f6:3d:c2:68:ef:f3:70:63:c6:45:89:33:79:13:5c:e8:8b:
4b:5c:16:ae:43:9b:d2:61:aa:a7:cd:28:69:8f:c5:73:f4:0e:
87:e4:29:b9:90:6e:ad:d3:65:e2:c8:33:05:12:7c:4b:96:34:
a2:cc:8b:f7:70:15:27:7d:68:38:8d:ba:4b:94:72:e2:be:1f:
1e:92:d9:ee:63:44:fb:62:7a:3d:f1:7a:cd:69:4f:ec:cd:e4:
89:7e:4f:56:35:5d:e5:ae:94:93:b5:b2:20:5d:cf:7a:bf:36:
f0:7f:57:c7:57:b5:09:60:8b:c5:dc:2e:1e:51:fa:95:1c:19:
ee:43:1f:39:ba:41:36:21:29:02:fb:c8:b8:fe:c0:ba:94:11:
d4:f8:4a:e3:95:73:4a:c0:17:17:d9:c5:b1:d0:9c:9b:d3:a2:
c7:09:0a:96:57:90:e4:ae:c0:f9:68:1a:83:9e:b4:03:b5:ad:
10:5b:31:e7:cc:8c:33:93:d0:04:b0:87:cb:ab:28:c3:5b:9d:
2f:42:04:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:12:24 2024 by rpki-client on console-fra.rpki-client.org