Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HcZZhQmj3GhRl2B9mm7xQWyTNM8.roa
File: HcZZhQmj3GhRl2B9mm7xQWyTNM8.roa (raw, json)
Hash identifier: /K7Vp6GHGU7eFpw20WY8KIBeBks5X4o7wb9WJW8VYzk=
Subject key identifier: 1D:C6:59:85:09:A3:DC:68:51:97:60:7D:9A:6E:F1:41:6C:93:34:CF
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0192002CCDBFE128E8E15462B38880E63B97
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HcZZhQmj3GhRl2B9mm7xQWyTNM8.roa
Signing time: Tue 17 Sep 2024 13:29:49 +0000
ROA not before: Tue 17 Sep 2024 13:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60859
IP address blocks: 87.120.110.0/24 maxlen: 32
94.156.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:00:2c:cd:bf:e1:28:e8:e1:54:62:b3:88:80:e6:3b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 17 13:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dc6598509a3dc685197607d9a6ef1416c9334cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:67:fc:e1:5d:11:d4:fa:6d:e2:22:6e:fe:d4:
90:3d:43:2e:2b:e1:cd:0d:e9:73:3c:8a:4a:46:f8:
0a:a0:91:cc:d6:ec:e2:7b:a1:58:62:28:6b:39:a1:
57:cc:90:7f:1e:1c:bb:b7:26:cb:18:c9:49:9b:57:
25:cf:0d:4f:29:6f:50:1d:cf:d7:df:14:2d:8e:46:
11:dd:f4:97:b4:38:65:7c:30:95:86:cf:91:da:f7:
cc:dc:d1:ad:9b:40:56:28:a2:2e:0b:86:87:05:5e:
69:cf:92:88:86:15:7f:02:2c:c7:17:56:87:6b:8d:
aa:16:9b:cf:55:de:9c:4c:1a:2f:1b:1b:dd:36:63:
c1:43:2e:34:e8:2f:0c:ea:5f:55:5c:34:81:09:08:
ac:67:f8:6a:e0:7f:62:70:95:6a:73:e2:b7:fd:bb:
bd:30:a7:7d:45:f5:28:8b:79:f7:8c:d7:c8:8a:a2:
6b:2e:3b:20:c6:c5:ec:e7:02:6f:c6:54:a0:20:af:
9f:18:f1:bc:29:ce:d3:1e:84:97:52:aa:db:80:1e:
d6:97:23:e0:e2:c8:44:84:75:09:bb:cc:ff:6a:a7:
21:17:db:5e:0b:f5:d7:98:e7:06:7f:11:4a:b9:da:
31:9e:ba:b6:76:56:3e:80:19:0c:cb:00:52:d8:0d:
98:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C6:59:85:09:A3:DC:68:51:97:60:7D:9A:6E:F1:41:6C:93:34:CF
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/HcZZhQmj3GhRl2B9mm7xQWyTNM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.120.110.0/24
94.156.34.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:f5:f5:20:47:1f:43:23:4d:1d:2b:bf:6e:ab:65:ea:a8:80:
63:8a:e9:1e:20:f4:e4:38:7e:3a:27:b0:84:47:b7:45:49:fe:
38:2f:57:05:ae:62:99:97:af:c9:2e:67:24:ad:4f:fb:1a:e3:
87:87:14:ba:82:16:32:4f:e6:cf:51:e4:2e:b9:31:63:02:a0:
9f:44:0c:cd:40:cc:cb:7a:c0:43:9c:a4:d4:a8:86:07:71:ff:
75:f0:d2:95:2d:bc:b2:be:1c:da:49:7f:9e:12:d1:b2:c7:6e:
88:61:e9:8e:45:0f:05:cc:a6:9b:9a:0d:d4:b2:85:f4:32:5d:
9d:60:87:53:8d:03:9b:29:3e:5e:4f:a4:46:f5:ea:41:50:27:
0a:7f:35:f9:b9:78:aa:e4:82:9d:24:0f:f9:a7:85:f5:b1:e0:
55:64:70:c5:8c:dd:3c:b3:01:d2:cd:8e:26:ef:9e:8b:64:ec:
69:1c:cc:8c:69:b7:5c:06:60:85:d6:9f:a3:63:b1:7c:97:30:
06:61:2c:27:e6:54:80:28:c0:04:d6:6a:fb:4c:f7:ea:38:06:
88:c2:65:0c:f8:f8:f7:d1:d1:70:22:87:70:72:d5:59:3b:da:
ac:c7:d4:fa:bf:70:83:f7:49:51:f7:2b:d2:b2:0f:e3:2a:45:
8b:b8:f2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:15:16 2024 by rpki-client on console-ams.rpki-client.org