Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/hvDoxRi_vFr2plKJlQwTmW6R264.roa
File: hvDoxRi_vFr2plKJlQwTmW6R264.roa (raw, json)
Hash identifier: ftTPtgJfzHoxIPm/sVk2WD/zfc/x+Sc/0s+8jPKd/LA=
Subject key identifier: 86:F0:E8:C5:18:BF:BC:5A:F6:A6:52:89:95:0C:13:99:6E:91:DB:AE
Certificate issuer: /CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Certificate serial: 0190A0293811784534A1C483B0B3782D5827
Authority key identifier: 4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/hvDoxRi_vFr2plKJlQwTmW6R264.roa
Signing time: Thu 11 Jul 2024 04:59:34 +0000
ROA not before: Thu 11 Jul 2024 04:59:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209360
IP address blocks: 193.105.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a0:29:38:11:78:45:34:a1:c4:83:b0:b3:78:2d:58:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2ba3ac87139ad11602777e4d35d81582a191bf
Validity
Not Before: Jul 11 04:59:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86f0e8c518bfbc5af6a65289950c13996e91dbae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:8f:01:3a:32:e6:f2:f3:4e:47:77:4f:1f:73:
ca:78:e0:e4:a4:38:8d:47:8d:c7:a6:58:39:d1:ea:
24:c4:f6:ba:16:c7:3e:53:bd:82:5f:2c:6b:4c:ac:
f8:cb:e6:0e:9c:ef:29:84:8e:fa:85:f8:a8:8a:22:
01:98:28:90:5c:0a:4d:4a:d5:94:5b:b7:fe:4d:36:
0b:f0:00:6d:f5:3a:56:e1:9d:2f:e0:06:10:52:41:
f2:e2:eb:54:7e:73:6e:41:44:8c:d9:21:ff:29:fb:
72:e8:8f:c1:5e:5b:9c:9e:a9:a7:c2:97:69:a3:01:
d3:0f:3a:16:56:71:34:2d:be:41:ae:c9:77:81:90:
5a:7e:b7:04:4c:04:b6:2d:e9:e8:45:45:a0:84:3a:
1e:ce:11:2c:bc:f0:9c:a6:8e:ae:9a:66:40:f0:36:
6f:77:f6:e8:cf:f5:32:d1:4c:bb:20:bb:e0:c5:56:
15:5b:ea:6b:ba:a7:ac:71:47:a2:9f:59:44:70:3c:
8f:99:b5:0c:9b:aa:a4:66:5e:72:5e:9b:b5:b5:2d:
01:12:53:02:df:1e:90:71:c8:1c:20:dc:93:d7:49:
a4:91:f7:a3:d6:01:4f:9b:bf:d1:88:2f:5f:c7:5e:
55:48:49:69:22:84:cb:17:e4:7a:c4:7c:03:87:c8:
22:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F0:E8:C5:18:BF:BC:5A:F6:A6:52:89:95:0C:13:99:6E:91:DB:AE
X509v3 Authority Key Identifier:
keyid:4E:2B:A3:AC:87:13:9A:D1:16:02:77:7E:4D:35:D8:15:82:A1:91:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiujrIcTmtEWAnd-TTXYFYKhkb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/hvDoxRi_vFr2plKJlQwTmW6R264.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ed50b6-2e55-4cf2-b380-dae922e16be8/1/TiujrIcTmtEWAnd-TTXYFYKhkb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.105.123.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:3d:90:27:8b:ee:bb:b9:55:0a:1a:6d:67:81:c2:99:06:c2:
10:66:01:25:b7:19:5e:63:33:56:bf:5d:6f:34:97:de:27:c1:
69:cd:63:7c:14:56:a3:78:55:d8:02:61:57:82:a5:d3:34:b0:
61:ca:de:ef:82:6a:3a:4e:79:4a:f2:68:2f:4d:34:d2:b6:79:
52:54:d0:9d:c3:0f:82:f5:6a:fe:40:af:e3:c8:8b:df:25:83:
ef:be:06:4c:ff:0a:93:b9:28:26:c6:07:1d:e6:4b:cb:00:a2:
0f:91:01:64:1a:32:67:6e:7b:12:1b:38:c2:4b:63:d4:0b:18:
e8:c3:d1:82:07:61:0a:34:20:55:de:7d:49:e3:57:15:23:cf:
6e:a3:07:59:5c:8c:1d:5d:c8:00:e2:ec:18:10:ce:39:46:f3:
e0:9f:aa:b7:85:ca:ff:84:16:8d:ba:76:25:12:45:5c:06:f9:
62:03:b3:cf:ef:b2:1b:75:3e:5e:81:fc:9f:bf:d9:61:c8:16:
24:d0:19:68:db:44:16:d9:bd:9a:72:09:24:df:64:cf:f6:e8:
41:e2:12:73:9b:c0:3c:4e:37:ad:3d:83:7d:73:9d:73:31:4f:
c5:32:3f:a2:c4:e7:ba:0e:21:33:88:27:ff:96:87:a8:fe:8c:
86:48:f5:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:17:08 2024 by rpki-client on console-ams.rpki-client.org