Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/HjAvcmzvd4hI4vRrlmr0fpFj004.roa
File: HjAvcmzvd4hI4vRrlmr0fpFj004.roa (raw, json)
Hash identifier: 2ASnHC96kPFGVPZeA8LeoE2ConQ5SaeLgnyG5upe5wk=
Subject key identifier: 1E:30:2F:72:6C:EF:77:88:48:E2:F4:6B:96:6A:F4:7E:91:63:D3:4E
Certificate issuer: /CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Certificate serial: 018DEC7CF3DC888042E36111A1588538C172
Authority key identifier: 5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/HjAvcmzvd4hI4vRrlmr0fpFj004.roa
Signing time: Tue 27 Feb 2024 21:33:48 +0000
ROA not before: Tue 27 Feb 2024 21:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 194.26.104.0/22 maxlen: 22
194.26.110.0/23 maxlen: 23
194.26.112.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 18:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:ec:7c:f3:dc:88:80:42:e3:61:11:a1:58:85:38:c1:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c1c63a2369df7dfecf3c8508593341cd369b237
Validity
Not Before: Feb 27 21:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e302f726cef778848e2f46b966af47e9163d34e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5f:ff:d0:64:c2:bd:06:66:4e:01:58:f2:be:
e1:15:14:e0:1a:d1:0f:ad:eb:1d:2e:d1:94:8c:5c:
da:77:89:25:9a:5a:92:7c:e2:c8:e8:e4:73:b2:21:
2d:5f:4b:2a:f6:fb:fc:da:49:94:75:3d:40:ae:ff:
37:7b:4f:4c:7b:5d:45:1a:9b:70:8b:6a:f8:64:84:
bf:b2:3f:bf:6e:c2:76:b4:be:69:01:bd:db:21:c9:
d3:18:86:ad:e2:59:0e:36:45:3c:28:cb:61:cf:c8:
0f:07:2d:8e:06:15:93:a9:91:4e:a5:5d:7d:50:20:
a7:5a:b3:53:15:dd:be:fe:64:34:0f:f5:84:45:b5:
5f:53:41:06:af:4e:0a:f5:08:cf:b0:70:e5:c9:c5:
fe:37:22:a0:45:2b:1d:47:c7:bb:fc:29:d9:ea:d9:
6e:f7:15:77:5d:1b:e5:3d:ac:d6:51:ec:d8:20:36:
23:89:00:78:65:8f:15:e6:fa:03:15:84:9f:64:bb:
41:d8:69:7a:18:89:f7:ac:8b:0a:5b:f9:86:05:3f:
7c:36:02:24:62:a4:c6:df:c3:e8:9f:c4:9e:be:f8:
56:9a:fd:1d:1e:1d:05:20:2d:f3:53:92:d1:47:ad:
4f:99:0e:7f:39:41:61:68:8b:73:a5:d4:38:54:d0:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:30:2F:72:6C:EF:77:88:48:E2:F4:6B:96:6A:F4:7E:91:63:D3:4E
X509v3 Authority Key Identifier:
keyid:5C:1C:63:A2:36:9D:F7:DF:EC:F3:C8:50:85:93:34:1C:D3:69:B2:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBxjojad99_s88hQhZM0HNNpsjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/HjAvcmzvd4hI4vRrlmr0fpFj004.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/57c73a-1ad6-4d5a-b225-67a18d62ec2d/1/XBxjojad99_s88hQhZM0HNNpsjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.104.0/22
194.26.110.0-194.26.113.255
Signature Algorithm: sha256WithRSAEncryption
73:29:d3:7c:bd:39:47:7b:ab:63:b4:ad:4f:42:be:3e:e3:d5:
94:a1:36:ab:5d:67:f2:e6:a6:56:51:14:1c:7d:ac:0c:16:c3:
ba:4f:27:6f:89:b5:29:32:26:28:b6:d5:65:bc:bd:33:7e:e6:
cf:32:5d:05:1d:9f:be:7d:8a:50:5b:bd:01:fd:ad:bf:63:17:
7f:6a:e4:a1:be:0b:33:2e:f6:9b:ed:38:b6:f2:cd:aa:32:cc:
64:6f:c0:55:b4:a5:2b:8d:58:23:86:98:fe:5c:08:54:e1:9c:
b9:eb:26:cd:33:04:fd:5c:9f:de:ca:cf:fd:5e:dc:14:56:9c:
d1:a7:d4:f7:a8:65:c9:c6:61:1d:e1:e7:54:58:09:ca:45:8c:
c9:de:3b:b6:4c:eb:2c:5a:8f:53:71:b9:fb:21:87:e6:67:60:
74:24:1e:3d:b0:ec:ab:e6:ea:96:05:19:ed:d7:0a:c3:92:76:
eb:5f:f9:72:ee:5e:e7:12:42:00:1b:aa:34:e5:b3:1b:f4:df:
26:ee:77:34:bc:a9:6b:ff:1a:f2:bd:f6:25:b0:2f:ee:af:15:
07:fe:5f:0f:09:67:eb:76:fd:ea:df:da:48:7c:df:ed:4d:0e:
2f:3a:ab:20:69:81:c2:78:67:03:9d:0d:43:c1:5a:cf:23:f2:
9c:85:79:20
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Nov 23 01:56:29 2024 by rpki-client on console-ams.rpki-client.org