Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/hxAashSwpfEKX7tutykgdJUuMPc.roa
File: hxAashSwpfEKX7tutykgdJUuMPc.roa (raw, json)
Hash identifier: BaKWbTbdpiLR0Te+xWGLU+6uX8maVkuHjYeIedFYVp4=
Subject key identifier: 87:10:1A:B2:14:B0:A5:F1:0A:5F:BB:6E:B7:29:20:74:95:2E:30:F7
Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial: 019174F200EFAA9BC76DFF0B2EB02B8A4F4D
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/hxAashSwpfEKX7tutykgdJUuMPc.roa
Signing time: Wed 21 Aug 2024 12:38:22 +0000
ROA not before: Wed 21 Aug 2024 12:38:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 95.174.80.0/24 maxlen: 24
185.144.16.0/22 maxlen: 24
2a04:2f81::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:74:f2:00:ef:aa:9b:c7:6d:ff:0b:2e:b0:2b:8a:4f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Validity
Not Before: Aug 21 12:38:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87101ab214b0a5f10a5fbb6eb7292074952e30f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:88:85:e8:72:68:f5:36:9f:df:a0:f9:a9:
c8:f1:ab:e1:40:9b:50:ba:5b:1e:19:5e:06:b3:db:
94:dc:fd:eb:84:23:a4:6d:fb:4b:86:b8:ba:d5:36:
ce:48:a7:f1:dc:8d:28:30:08:1a:9a:76:34:f5:e2:
9c:07:3a:40:6e:ab:e8:e3:68:cc:d6:36:30:b4:8c:
f8:8a:19:33:4b:40:59:a9:e0:25:cf:0d:bb:dc:b3:
d8:be:16:77:21:43:bc:71:eb:e6:b1:16:f3:11:75:
c3:32:a6:07:3a:9d:d4:00:69:a8:36:93:ee:83:c4:
25:7b:84:82:83:c7:e0:cb:ad:af:2e:e5:92:16:21:
8c:48:e4:e9:06:6f:ea:d2:3d:b5:bd:b5:ee:fa:7c:
68:54:6c:d2:ff:1f:c9:75:9c:17:b7:07:c9:d5:bf:
6e:03:19:b2:eb:eb:c5:10:ea:94:2f:2c:3f:7c:fc:
ba:b5:9f:ab:b1:5f:ba:8f:3b:00:83:1c:0c:4f:9b:
51:b0:67:08:77:96:8f:2c:7c:e1:6f:09:79:f4:f2:
76:20:87:dc:28:b6:7b:6e:d5:37:e6:42:93:6c:6b:
b3:a9:95:48:46:90:a0:73:67:89:a9:76:5f:77:20:
61:a0:2d:17:b6:08:37:57:11:47:77:14:cc:09:a0:
0a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:10:1A:B2:14:B0:A5:F1:0A:5F:BB:6E:B7:29:20:74:95:2E:30:F7
X509v3 Authority Key Identifier:
keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/hxAashSwpfEKX7tutykgdJUuMPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.174.80.0/24
185.144.16.0/22
IPv6:
2a04:2f81::/42
Signature Algorithm: sha256WithRSAEncryption
25:29:8d:65:cc:d4:b2:08:c0:72:87:49:aa:85:64:a0:1f:68:
10:56:17:d9:c0:ad:37:ed:eb:7e:7c:4d:5f:d6:7b:cd:4f:ee:
a8:dc:7c:60:d5:a1:2e:0c:f2:f8:57:45:5d:cb:ae:06:c4:4e:
99:ee:b5:3c:5e:25:93:9f:40:1e:2b:2a:82:59:41:0b:e1:9e:
51:ea:7f:a3:39:5c:19:d6:5d:9e:74:75:ce:f0:e8:3a:a6:92:
96:5e:8d:fe:2b:32:ac:7f:ac:62:3a:b1:31:80:e1:f1:af:06:
95:91:e7:b6:4c:04:e2:8a:40:61:cb:e5:16:67:62:f0:4a:d7:
b8:38:6a:ff:bc:6b:b1:82:a9:14:e8:e1:06:e8:ef:a3:2f:e9:
ba:c8:23:1e:51:dd:ad:14:61:ac:eb:1e:9b:54:ac:f8:ec:8b:
85:90:ca:69:d4:13:6b:f9:64:71:c1:cc:56:41:95:17:44:11:
82:9c:b4:eb:6b:58:84:95:9f:d4:1e:78:b7:2a:e0:57:e9:f7:
e5:db:4c:34:eb:8b:1c:a6:63:77:1d:6d:84:e6:dc:06:3e:6c:
5c:3c:0e:48:fd:b3:9b:c8:70:d7:ea:f1:06:d2:ff:b9:f0:13:
67:42:2b:28:65:14:92:24:ec:a3:07:63:7d:4d:aa:e4:bc:a6:
c9:7a:b2:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:25:56 2024 by rpki-client on console-fra.rpki-client.org