Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/HnnD_7XhH9OBQ7cIKqP7BLd_UvU.roa
File: HnnD_7XhH9OBQ7cIKqP7BLd_UvU.roa (raw, json)
Hash identifier: FpcS4AoJ4gblz3e5AQXlJVCrbA8SwRdpeE/GxhW2qok=
Subject key identifier: 1E:79:C3:FF:B5:E1:1F:D3:81:43:B7:08:2A:A3:FB:04:B7:7F:52:F5
Certificate issuer: /CN=c42708df93954aac601aef1835bd5d69245fb02f
Certificate serial: 018FE33625848BF948568855457C52FDD346
Authority key identifier: C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/HnnD_7XhH9OBQ7cIKqP7BLd_UvU.roa
Signing time: Tue 04 Jun 2024 12:25:27 +0000
ROA not before: Tue 04 Jun 2024 12:25:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34432
IP address blocks: 37.228.157.0/24 maxlen: 24
91.151.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 16:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e3:36:25:84:8b:f9:48:56:88:55:45:7c:52:fd:d3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c42708df93954aac601aef1835bd5d69245fb02f
Validity
Not Before: Jun 4 12:25:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e79c3ffb5e11fd38143b7082aa3fb04b77f52f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:85:20:65:a5:ca:f9:54:d7:1c:16:bd:87:12:
69:cb:bf:10:5f:df:f2:c6:aa:28:8e:3f:2a:51:ec:
4c:dd:a4:e7:ce:0f:9b:12:d0:c5:20:ab:df:11:0b:
db:8c:b7:50:1b:89:01:1b:1b:ad:e6:42:df:a7:ef:
b6:69:31:a0:5a:c9:42:fd:c6:ac:2b:4a:5e:a9:4d:
2b:fa:19:17:9a:02:e8:26:4a:b1:72:58:50:92:00:
39:fb:22:99:e0:b9:ae:ad:d1:fa:59:b8:57:30:58:
33:a9:24:8a:b4:e4:2c:8f:2b:a8:d3:23:e0:bf:3c:
ee:d8:4f:63:ba:79:a0:af:18:6f:c2:ca:5e:d9:3e:
64:8b:1a:9c:48:9b:3b:45:4e:b0:8a:aa:da:b8:de:
b0:f2:51:3f:5f:33:10:f9:e2:ab:30:cf:5b:db:72:
51:09:16:17:b9:88:76:bc:71:81:74:3a:2b:2e:9a:
cb:1f:8f:25:5f:ef:d8:2a:8a:f2:eb:9f:1f:bc:6c:
79:05:99:07:c8:a0:7f:07:71:af:8a:66:76:d6:0d:
ea:ff:50:d6:8d:65:70:02:05:11:93:80:a6:4d:d5:
58:aa:d8:c0:a9:5c:da:0b:db:70:0d:91:54:a3:28:
87:86:00:f4:4a:52:90:33:02:12:17:52:35:91:33:
67:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:79:C3:FF:B5:E1:1F:D3:81:43:B7:08:2A:A3:FB:04:B7:7F:52:F5
X509v3 Authority Key Identifier:
keyid:C4:27:08:DF:93:95:4A:AC:60:1A:EF:18:35:BD:5D:69:24:5F:B0:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xCcI35OVSqxgGu8YNb1daSRfsC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/HnnD_7XhH9OBQ7cIKqP7BLd_UvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f617a5-3240-48c4-b716-741c1d8dea2b/1/xCcI35OVSqxgGu8YNb1daSRfsC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.228.157.0/24
91.151.23.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:86:44:e2:22:55:2e:88:5a:8d:38:7f:4b:99:00:26:2a:04:
dc:e3:53:14:73:e2:fc:6c:98:7e:4c:7a:75:20:1d:e9:f2:f2:
e8:55:d9:43:31:72:47:03:8a:e3:1d:b6:34:dd:22:07:6c:a4:
be:5a:f8:fe:68:e0:41:ec:88:03:a3:47:16:3d:8b:7c:91:10:
dc:6f:46:a0:a7:68:ea:89:1f:3c:80:32:ed:de:50:7d:fb:58:
f6:61:c6:1a:8d:db:76:55:3b:8f:48:d2:19:7d:c9:6e:da:6f:
31:e3:27:42:06:dc:b7:76:d7:9f:97:75:32:c6:a4:d2:f5:35:
fe:62:81:91:f4:2a:2d:f9:62:7e:2b:11:6b:53:8a:20:f2:92:
74:53:ba:20:4a:cb:72:fc:6c:4f:1d:ee:eb:1b:48:c8:c6:39:
d3:7d:9d:48:38:3c:7e:4f:e1:6c:ad:1a:bd:fe:e3:f5:7a:a5:
12:3a:f9:d6:9c:6a:23:91:4c:96:b5:e4:17:eb:36:5c:3b:cf:
4a:21:13:8b:4f:57:d8:5f:dc:2d:48:d5:62:2d:1d:e8:4a:c1:
1e:83:38:a5:bf:1a:4f:28:e1:c4:93:33:64:9c:06:63:e8:30:
df:98:92:d5:32:d3:98:ad:4a:2a:a1:eb:fb:ff:ff:56:86:b0:
0d:2c:b5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:37:47 2024 by rpki-client on console-fra.rpki-client.org