Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/hlgabMUizM6xaaOrEFPR0E0I8ME.roa
File: hlgabMUizM6xaaOrEFPR0E0I8ME.roa (raw, json)
Hash identifier: t4PY/DALcVLZtCQOe1N+dVmC9WTh82YzC5i7jo6N430=
Subject key identifier: 86:58:1A:6C:C5:22:CC:CE:B1:69:A3:AB:10:53:D1:D0:4D:08:F0:C1
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 018CC56DF4D213F768F5C3F7EC6E0AE2D001
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/hlgabMUizM6xaaOrEFPR0E0I8ME.roa
Signing time: Mon 01 Jan 2024 14:29:26 +0000
ROA not before: Mon 01 Jan 2024 14:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39238
IP address blocks: 77.83.118.0/24 maxlen: 24
77.83.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6d:f4:d2:13:f7:68:f5:c3:f7:ec:6e:0a:e2:d0:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 14:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86581a6cc522ccceb169a3ab1053d1d04d08f0c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d8:3e:8d:47:45:db:ef:22:5c:e1:51:d4:47:
fc:c9:85:b8:a6:d7:df:4c:bb:36:28:da:da:15:c2:
e4:01:8b:74:a6:6e:47:f8:b7:a8:a8:ff:c8:01:8c:
b8:3b:cf:6e:df:e7:a9:67:39:01:a8:2f:32:24:f8:
0c:94:50:65:ef:ac:3c:75:98:8c:2e:7c:21:07:a6:
ad:f4:db:60:6c:69:8f:27:bf:5f:dd:92:d9:6c:f2:
a8:d6:f4:24:7a:2b:87:6d:8b:70:48:0f:ce:48:9b:
b0:57:5d:3e:5c:49:44:ec:0d:75:46:18:52:a0:7c:
41:24:4f:17:3a:6e:c7:88:2f:b0:23:9f:9b:b3:36:
d9:95:e4:f5:d5:a7:57:ee:65:02:a6:33:23:45:98:
d9:22:fd:5b:91:f2:75:22:34:c8:d7:ec:18:8f:ab:
3d:56:c9:e7:33:61:44:37:14:9f:30:4d:9a:00:c7:
15:eb:a0:c5:20:1e:1c:c0:21:ef:0a:63:03:17:c3:
91:02:df:9a:fb:b5:3a:d5:f0:d1:c5:2d:3e:63:10:
97:18:f8:37:40:cd:ac:64:c5:e1:85:ee:00:58:5d:
61:a0:c9:23:f5:17:79:5b:5d:f5:16:2f:76:4a:5c:
93:c0:1f:40:46:45:dc:18:b0:d8:64:de:64:13:39:
4a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:58:1A:6C:C5:22:CC:CE:B1:69:A3:AB:10:53:D1:D0:4D:08:F0:C1
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/hlgabMUizM6xaaOrEFPR0E0I8ME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.118.0/23
Signature Algorithm: sha256WithRSAEncryption
34:87:eb:97:1f:5e:82:8e:20:8f:3a:9c:72:25:45:c0:ac:8c:
11:66:59:e2:d3:9f:5c:c2:86:8b:d6:e2:c8:c6:4d:e6:b3:50:
8b:7f:6a:ae:f8:d6:06:db:ed:09:2c:d8:d4:3c:cb:6e:d5:a3:
18:e7:4e:2a:a6:ee:5e:ba:ec:8a:68:1a:6c:41:96:de:09:9f:
a4:08:cc:99:5a:45:0c:64:be:1f:c9:f5:bd:d8:02:8f:33:72:
d3:af:18:d4:a6:a8:ba:23:28:82:fa:9b:98:80:74:ee:b6:67:
cd:f9:d2:d4:c2:49:9f:d1:3b:a4:d7:60:0f:d9:90:4a:ea:8c:
bc:5e:c4:be:e0:97:17:27:31:3b:55:fe:0b:bc:03:0c:fe:d5:
2d:04:81:11:58:af:fb:5c:12:dd:a0:59:06:1b:dc:fd:89:73:
1d:b4:f9:b5:a8:ba:f5:32:6c:0c:97:05:aa:48:77:01:d1:aa:
92:9b:3f:c8:b2:88:46:57:0a:f5:ff:5b:c2:38:3e:1c:19:b0:
62:7a:05:2c:8b:6e:b6:c0:db:bb:89:22:ff:b9:90:bb:64:ae:
0a:95:fd:ac:16:5c:ea:84:e5:82:5f:24:b8:ad:0d:e8:b5:15:
13:c6:ba:f1:10:94:a5:a8:dc:29:90:0b:ae:67:6a:52:35:bf:
73:bd:73:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 18:47:19 2024 by rpki-client on console-fra.rpki-client.org