Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/HgLh2Xvbq1djAwzbWZrBXHJUYfw.roa
File: HgLh2Xvbq1djAwzbWZrBXHJUYfw.roa (raw, json)
Hash identifier: xQazVKJbUz1kB9z6hyv04w/HHXQg2S4Of5FWQLIfXOg=
Subject key identifier: 1E:02:E1:D9:7B:DB:AB:57:63:03:0C:DB:59:9A:C1:5C:72:54:61:FC
Certificate issuer: /CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Certificate serial: 018CC3B695F8A12DCF5E792A98AFDE5EB104
Authority key identifier: EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/HgLh2Xvbq1djAwzbWZrBXHJUYfw.roa
Signing time: Mon 01 Jan 2024 06:29:32 +0000
ROA not before: Mon 01 Jan 2024 06:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49164
IP address blocks: 89.36.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:95:f8:a1:2d:cf:5e:79:2a:98:af:de:5e:b1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebf42e80602aedf58a3c7a81883c1a34f69d2fb4
Validity
Not Before: Jan 1 06:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e02e1d97bdbab5763030cdb599ac15c725461fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:66:c0:da:6f:6d:02:db:61:93:1b:1f:fa:0e:
98:be:0c:d0:3f:e1:16:3a:f0:9a:1d:a5:3b:56:16:
51:7c:3a:e3:ea:d8:48:df:33:ea:ea:b4:e5:9b:e7:
b3:db:b4:9a:09:64:22:ec:de:d8:48:fa:7f:6d:a4:
c5:38:94:e7:2b:e6:06:d2:b2:23:a0:f0:e5:f1:4c:
10:f0:e8:97:3e:de:a6:81:a9:6d:e6:f3:82:2c:39:
b0:37:6a:22:c0:77:d7:d4:1c:be:f3:76:b5:55:85:
dc:c9:08:93:f5:87:fc:cb:d5:5f:70:84:b9:64:ff:
a5:63:36:19:1c:ed:40:bc:38:48:cb:36:96:7e:c0:
9f:e6:4e:b2:57:76:64:78:70:10:43:78:95:0c:fe:
f1:c8:ff:b0:e3:f3:83:31:32:28:7f:d4:71:d9:b4:
29:af:83:ed:d6:36:63:63:a4:bb:d4:28:b6:8c:86:
2b:8e:ed:b4:f3:f3:5a:4f:92:3b:dd:43:95:ac:eb:
4e:41:b0:00:1e:5b:b2:65:1d:ab:0e:0c:4a:c5:c1:
0a:c5:1f:c5:35:8b:9e:5d:f9:88:2d:a0:ce:4a:61:
3c:ee:92:c8:42:81:a7:08:3c:09:a9:18:36:ce:14:
c5:8f:30:66:62:50:61:c1:f7:18:de:65:ae:17:3c:
f8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:02:E1:D9:7B:DB:AB:57:63:03:0C:DB:59:9A:C1:5C:72:54:61:FC
X509v3 Authority Key Identifier:
keyid:EB:F4:2E:80:60:2A:ED:F5:8A:3C:7A:81:88:3C:1A:34:F6:9D:2F:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6_QugGAq7fWKPHqBiDwaNPadL7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/HgLh2Xvbq1djAwzbWZrBXHJUYfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0952d4-4a49-447d-ad3c-1903edafa8bf/1/6_QugGAq7fWKPHqBiDwaNPadL7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.173.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b4:c2:cc:66:2f:1b:90:35:f9:e1:96:63:4a:9d:64:47:20:
b9:1d:63:e2:5b:dc:46:63:16:5f:40:de:0c:39:7b:d0:9b:52:
fb:33:56:40:fd:df:e7:a9:32:c7:9b:ff:86:1d:5b:79:82:b2:
45:5d:aa:1a:38:87:94:7e:6c:d4:e3:60:76:4a:e5:8c:13:99:
81:fa:0e:af:cb:50:44:43:23:1d:36:ca:7f:2b:3e:c2:7b:a9:
21:55:22:e0:78:3c:2b:1e:27:4e:71:bb:08:56:a6:3a:9c:e7:
84:12:ac:4c:12:e3:f9:c5:d4:26:aa:86:b0:62:9c:c1:f5:16:
f8:fc:b9:95:48:2e:0e:7f:95:4d:ac:11:7f:ec:11:e9:34:34:
4d:cc:72:16:44:23:98:18:3d:2c:4c:d6:51:35:1e:bd:91:ce:
01:fd:99:aa:5e:fe:c4:dd:6e:0a:90:99:3f:6f:9a:00:a3:f7:
c3:40:ea:11:77:d7:d5:99:7f:b3:42:54:76:68:4a:97:36:eb:
99:c1:be:65:37:0c:fc:1f:bd:b5:61:fb:b7:f2:6f:cd:77:ea:
8c:71:fd:d7:bf:2a:5d:d9:9d:13:0d:5d:82:12:ca:d4:1c:a1:
d1:6c:4e:88:6d:91:13:f2:2f:19:a8:61:65:69:dc:92:e3:69:
ab:13:ff:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 16:43:12 2024 by rpki-client on console-ams.rpki-client.org