Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HaHhMo82XGieQkFPdohTXeltUnE.roa
File: HaHhMo82XGieQkFPdohTXeltUnE.roa (raw, json)
Hash identifier: 8w0XVO3y6PGdgiK4c5lh+AcG4LGQr3lFgilwqWRC9r4=
Subject key identifier: 1D:A1:E1:32:8F:36:5C:68:9E:42:41:4F:76:88:53:5D:E9:6D:52:71
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DD1262D0F2C5F8A233FED59464B746
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HaHhMo82XGieQkFPdohTXeltUnE.roa
Signing time: Tue 02 Jan 2024 06:29:40 +0000
ROA not before: Tue 02 Jan 2024 06:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216240
IP address blocks: 93.123.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 06:47:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:12:62:d0:f2:c5:f8:a2:33:fe:d5:94:64:b7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1da1e1328f365c689e42414f7688535de96d5271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:03:dc:c9:3d:14:f8:91:e7:4d:bb:d3:9b:b6:
47:21:be:84:a6:4c:8a:b8:91:4f:b7:29:46:f6:92:
1b:d0:da:9a:4c:cd:2e:78:8c:43:0a:80:d1:e3:64:
b3:b4:bf:68:17:ce:b2:ac:bb:f6:c3:c4:1e:98:f6:
4c:f8:34:ae:f1:60:7f:fc:6b:12:b0:03:bc:20:42:
75:5c:be:ee:a1:81:68:e3:38:d1:03:a9:50:34:8f:
33:6d:3b:5d:1c:48:34:df:92:06:1c:2f:bf:cc:e4:
17:e8:21:f7:31:95:f8:58:b6:5d:db:96:82:1b:f5:
2e:03:26:63:27:2f:7c:c3:c1:de:be:1b:9b:d1:72:
66:f0:69:e8:0f:83:18:bf:06:0d:81:74:78:c9:df:
94:95:31:f3:89:0b:f5:d9:17:5d:09:af:91:75:81:
9e:e3:6c:e6:3d:a7:d9:d7:04:f9:01:c6:0e:2f:e9:
2f:1d:40:51:90:b7:4d:a7:22:bf:d8:d3:52:59:6a:
df:8b:8e:e7:09:5e:9c:64:25:31:83:6e:1c:33:f7:
7b:80:f6:6b:a0:43:31:f5:57:5a:0b:b7:51:1e:c2:
7d:42:36:ed:e4:2e:95:8f:56:eb:8c:b5:17:5b:4e:
be:22:6d:74:e6:90:bf:87:05:d2:bc:19:bb:ce:b8:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A1:E1:32:8F:36:5C:68:9E:42:41:4F:76:88:53:5D:E9:6D:52:71
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HaHhMo82XGieQkFPdohTXeltUnE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.123.85.0/24
Signature Algorithm: sha256WithRSAEncryption
28:be:ec:17:f5:10:89:c7:15:81:28:a3:aa:cc:25:80:52:9a:
dd:32:9f:5d:fa:24:95:84:e9:c5:82:03:4d:dc:b3:7f:7e:40:
42:fd:98:91:bd:bf:c4:1e:77:da:fa:b0:e9:49:e6:53:57:26:
85:db:3c:20:22:3b:e8:8a:0f:74:5d:2e:ce:9c:f4:b5:06:85:
d9:2b:57:e1:8a:10:19:82:95:b7:a5:a3:22:45:a4:cd:9d:2a:
f5:e2:58:fa:3e:fc:da:13:be:37:2e:d6:e9:17:9e:48:53:db:
be:58:02:83:94:e6:10:ff:30:0f:7a:69:09:b8:6f:ed:ea:66:
57:01:d7:a9:d7:a5:0b:5f:e5:c2:7b:c4:8e:56:5b:b5:ed:41:
16:9d:a5:67:3d:a4:3a:b2:bc:2d:37:7c:06:9c:76:df:4f:b8:
4a:d8:cd:a5:73:ee:9b:61:bc:d4:85:c0:76:0e:af:8e:25:a9:
f5:fb:20:06:a5:83:09:cf:65:b6:07:b1:39:69:d4:56:4a:92:
23:5e:b4:92:9b:40:c6:8a:72:e9:34:dd:bb:45:8f:ff:43:a1:
24:34:cb:7d:03:09:16:d7:f3:08:74:28:37:93:67:a7:69:4a:
ae:13:72:94:de:04:b3:50:51:d7:32:49:9f:b7:c8:ac:94:fc:
58:51:9b:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 15:37:22 2024 by rpki-client on console-ams.rpki-client.org