Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hkz3JG7DyYPivXY7I84mwPpTi1c.roa
File: hkz3JG7DyYPivXY7I84mwPpTi1c.roa (raw, json)
Hash identifier: oPleQskUFUd98/+c4dinFrreirYrhwanRju8heRYttk=
Subject key identifier: 86:4C:F7:24:6E:C3:C9:83:E2:BD:76:3B:23:CE:26:C0:FA:53:8B:57
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018EE6E22E64B87948107B758C8E84B4368E
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hkz3JG7DyYPivXY7I84mwPpTi1c.roa
Signing time: Tue 16 Apr 2024 12:29:26 +0000
ROA not before: Tue 16 Apr 2024 12:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 193.124.35.0/24 maxlen: 24
194.58.40.0/24 maxlen: 24
194.85.248.0/24 maxlen: 24
194.85.251.0/24 maxlen: 24
194.87.10.0/24 maxlen: 24
194.87.77.0/24 maxlen: 24
194.87.255.0/24 maxlen: 24
195.133.7.0/24 maxlen: 24
195.133.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:e6:e2:2e:64:b8:79:48:10:7b:75:8c:8e:84:b4:36:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Apr 16 12:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=864cf7246ec3c983e2bd763b23ce26c0fa538b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:49:44:fc:41:20:cf:e8:65:9c:8e:b2:ed:c5:
ef:51:78:dd:9c:eb:29:4c:cf:a5:8d:e2:80:c9:5d:
60:e4:a7:db:8b:5c:7b:c5:01:21:46:22:f5:29:b0:
a2:12:98:ac:71:87:40:59:7b:37:8d:46:44:5e:44:
0d:bb:83:09:4f:17:eb:da:50:10:3d:b3:ea:b7:a5:
54:49:c0:4e:46:08:6f:18:8e:4b:22:70:70:f7:d3:
73:f3:95:9d:69:db:c4:77:9f:64:09:6c:4e:c4:f6:
2f:8b:45:b4:c4:d2:21:a6:64:c7:54:53:77:f8:34:
a5:fc:2b:13:c0:fb:29:d0:3f:03:42:16:71:9f:81:
d4:a9:2b:42:c5:3f:29:1b:ba:e3:84:fc:a9:81:de:
a7:46:a6:aa:3e:53:64:7b:8e:10:39:7c:9c:61:7b:
48:42:9c:ce:c6:86:59:65:60:ee:0d:df:3b:76:e7:
55:d9:a2:d5:8c:f0:f5:40:c7:5d:9c:89:5e:4a:08:
53:8d:49:29:fb:c0:19:0a:08:34:d1:96:3a:02:6a:
6e:34:3c:ad:40:ad:33:ca:f1:44:70:2f:69:f2:dc:
ae:8c:b1:79:99:ef:3e:33:72:16:98:c2:9c:6a:54:
7d:c1:e7:bb:23:3a:e1:d5:93:77:fa:1b:49:b0:50:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:4C:F7:24:6E:C3:C9:83:E2:BD:76:3B:23:CE:26:C0:FA:53:8B:57
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/hkz3JG7DyYPivXY7I84mwPpTi1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.35.0/24
194.58.40.0/24
194.85.248.0/24
194.85.251.0/24
194.87.10.0/24
194.87.77.0/24
194.87.255.0/24
195.133.7.0/24
195.133.64.0/22
Signature Algorithm: sha256WithRSAEncryption
76:65:ec:c3:60:58:d7:cb:4a:40:ee:cf:b2:55:b7:f5:9f:49:
f6:cb:31:b9:b5:a7:84:7b:c9:ce:72:d7:1a:30:4f:9b:37:00:
94:a8:b4:8d:e3:b2:39:97:b0:e8:a6:b7:b0:b8:13:8f:2e:89:
a4:84:1d:2f:25:18:88:dc:c4:27:fe:46:69:db:50:99:3e:25:
ac:01:12:d8:13:30:8b:af:05:67:b7:01:b8:cf:da:2e:85:02:
17:0f:a7:6c:b6:9e:1a:01:08:08:d1:1d:a4:e8:3b:9f:4a:55:
31:35:42:98:68:33:6e:d3:e2:a2:65:81:7d:b3:f2:de:2c:9d:
90:ce:a3:52:89:af:e8:da:72:eb:9b:a2:00:b3:4f:28:a0:6f:
47:48:24:c8:f3:e3:4a:82:f7:1f:21:56:bb:69:bd:25:7c:46:
63:25:fb:ea:0d:ff:bf:5d:4e:f7:cf:70:6d:3d:7a:fe:dc:c4:
1c:49:11:ce:8a:97:6e:cf:c7:2a:91:b8:df:79:9f:67:bb:b6:
d7:8c:a9:8a:af:48:92:c5:41:5d:d6:5e:dc:1c:99:42:fe:54:
45:49:29:1c:ec:e9:ee:45:5b:d8:7f:1b:4e:05:29:47:a4:a9:
c7:1d:e1:fe:67:f9:43:c8:ea:98:0a:0c:6a:20:27:a1:44:61:
22:92:3a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 15:06:04 2024 by rpki-client on console-fra.rpki-client.org