Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/HeK6Y2ZRQgNHa7fK_jZ1v_513Ng.roa
File: HeK6Y2ZRQgNHa7fK_jZ1v_513Ng.roa (raw, json)
Hash identifier: tmToq1qvSDOAfGtjx86YOgWhKMzR74lZfHzbSrtDN4A=
Subject key identifier: 1D:E2:BA:63:66:51:42:03:47:6B:B7:CA:FE:36:75:BF:FE:75:DC:D8
Certificate issuer: /CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Certificate serial: 018CC6B77AA8CB3202319B13EBDFFBE6ED37
Authority key identifier: 85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/HeK6Y2ZRQgNHa7fK_jZ1v_513Ng.roa
Signing time: Mon 01 Jan 2024 20:29:22 +0000
ROA not before: Mon 01 Jan 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20572
IP address blocks: 195.190.8.0/24 maxlen: 24
2001:67c:2ae4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Jun 2024 01:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7a:a8:cb:32:02:31:9b:13:eb:df:fb:e6:ed:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=851272e4e8186b9cf3d1eb42665c53ce714f4d4b
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1de2ba6366514203476bb7cafe3675bffe75dcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:bd:bf:ed:d6:8e:fa:25:ac:59:1c:8c:f7:02:
58:ae:56:2d:8b:63:7a:6a:c1:08:4a:b7:43:b4:90:
00:2f:a5:99:44:65:c8:14:9f:d4:55:a1:c7:b2:9b:
36:44:fb:3a:de:45:5c:08:0d:c3:4f:c4:41:52:b6:
dc:42:5f:4a:6a:b7:d8:9b:a3:a5:f4:f2:43:5b:4b:
f7:c5:0e:29:90:fc:39:35:75:8d:ed:4c:fd:be:90:
d9:b8:ca:58:1b:f5:2f:7e:5a:d6:62:4b:96:52:fc:
12:e4:b3:29:f5:0a:62:1f:cc:90:9a:7f:9b:c7:33:
6d:69:c3:8d:3c:73:6d:a7:e0:43:8e:bb:7d:92:fc:
de:db:53:b2:cf:ca:f7:21:b4:78:5d:8b:0d:76:75:
ee:7f:3c:f2:e4:7e:6d:10:92:1b:b2:5c:ff:c6:c9:
53:cc:68:d1:13:b1:01:ad:8b:73:ec:ad:94:80:7f:
78:ab:9c:8c:bf:8e:72:b0:0e:d1:5d:82:db:88:53:
d9:49:a2:35:36:a9:b2:f3:02:f6:bc:07:97:22:da:
e0:2d:1c:f9:88:ba:cf:55:a4:f9:69:30:5a:53:5c:
29:82:6b:dd:d1:c8:cd:10:cb:ba:71:4f:f4:7e:9f:
cf:21:9e:f0:0b:1c:45:2d:c4:8e:9a:cc:f2:45:db:
09:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E2:BA:63:66:51:42:03:47:6B:B7:CA:FE:36:75:BF:FE:75:DC:D8
X509v3 Authority Key Identifier:
keyid:85:12:72:E4:E8:18:6B:9C:F3:D1:EB:42:66:5C:53:CE:71:4F:4D:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hRJy5OgYa5zz0etCZlxTznFPTUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/HeK6Y2ZRQgNHa7fK_jZ1v_513Ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed94b1-b573-45e4-9e21-3f42c71780bc/1/hRJy5OgYa5zz0etCZlxTznFPTUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.8.0/24
IPv6:
2001:67c:2ae4::/48
Signature Algorithm: sha256WithRSAEncryption
d3:ed:04:6c:25:d9:d0:b0:98:62:f2:0f:37:9e:77:e7:7d:f5:
d6:f7:b7:dd:21:90:a1:02:6f:c0:ec:ec:d1:62:fd:d4:65:84:
1a:bf:99:8f:39:5e:1d:50:ac:4b:b6:56:65:f4:1e:95:8e:a3:
f3:ee:24:b3:df:e0:2c:a0:c3:68:8f:0c:ff:40:aa:6a:2c:87:
c9:30:ed:df:cd:d6:56:c0:e1:20:16:d0:fb:e1:7e:38:ce:8c:
c0:03:bf:cb:25:fe:e0:b5:69:f3:4a:b5:57:d6:dd:8a:4f:4d:
ab:66:b8:0e:68:45:fa:50:cf:8b:28:14:8f:56:88:ad:02:f9:
5a:2f:4e:55:84:a2:37:a0:bb:cb:c6:88:21:57:3d:fb:31:6a:
d4:e4:57:6a:db:50:49:7a:d2:cc:6c:c8:ec:9b:e8:1c:c5:d9:
fc:13:fe:32:ee:f4:ed:71:d3:78:a9:ad:a5:65:33:25:37:80:
40:07:df:6c:51:8e:9b:74:f4:31:c1:70:9a:e0:3e:5d:40:47:
78:65:04:e5:c2:c6:11:90:95:e3:bd:80:72:83:d2:3c:14:4c:
f5:e6:47:c7:71:36:ae:01:cf:8a:9c:3b:5a:dd:fd:01:88:c1:
1f:07:5a:5b:78:5e:ed:62:70:c0:9e:c6:27:c1:25:ef:2d:7a:
7e:95:40:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 10:07:19 2024 by rpki-client on console-fra.rpki-client.org