Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/HNx8pHBGrdQ0MyhX50uZA0jqn8c.roa
File: HNx8pHBGrdQ0MyhX50uZA0jqn8c.roa (raw, json)
Hash identifier: CflAm4a4laLVRj2J98F5kTKYC4TXjcKAaPmbpzXs7BY=
Subject key identifier: 1C:DC:7C:A4:70:46:AD:D4:34:33:28:57:E7:4B:99:03:48:EA:9F:C7
Certificate issuer: /CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Certificate serial: 018CC6B83798081CE7BFF51FC53F846EACB0
Authority key identifier: 24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/HNx8pHBGrdQ0MyhX50uZA0jqn8c.roa
Signing time: Mon 01 Jan 2024 20:30:10 +0000
ROA not before: Mon 01 Jan 2024 20:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197889
IP address blocks: 193.188.192.0/24 maxlen: 24
193.188.193.0/24 maxlen: 24
193.188.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.mft
rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 19 Jun 2024 13:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:37:98:08:1c:e7:bf:f5:1f:c5:3f:84:6e:ac:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=248f5e26f1c08f4486c9911c8b609eae8b6cb74d
Validity
Not Before: Jan 1 20:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cdc7ca47046add434332857e74b990348ea9fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:93:46:96:15:87:78:b9:6c:2a:d0:6e:cf:74:
37:41:eb:73:d1:37:19:89:c2:6a:80:ff:06:e9:53:
89:6e:b9:c5:a3:81:a1:06:f7:cb:39:52:98:aa:ee:
5b:18:e7:a8:3f:b0:da:a6:7b:26:df:12:af:0e:c1:
c6:72:10:0b:c1:d4:be:06:2d:ff:17:5f:36:da:dc:
48:f0:67:82:9c:1c:8a:6b:c9:26:49:c1:8e:8b:27:
71:f7:4e:00:ec:7f:53:93:60:85:09:e0:6d:c9:6f:
ce:2c:27:4d:85:75:94:88:9a:63:fb:b9:8b:a9:ad:
b8:15:6d:91:e2:18:51:b8:fa:7d:8b:85:78:c6:7b:
b3:ec:86:6c:26:75:26:0d:88:d8:e2:e1:9c:77:1d:
24:01:19:c0:1d:69:8b:1f:98:8b:c9:d7:9d:5e:a5:
38:3d:a9:3e:fb:0b:3f:19:c3:5f:d1:f2:c2:fe:40:
cc:82:81:17:8b:e3:02:36:95:a7:21:62:ae:16:22:
3b:39:a3:5c:26:14:ce:59:1b:67:8b:ca:7f:6d:e5:
3a:1c:17:47:27:8b:80:49:c6:bd:a3:26:79:ad:df:
04:ff:b9:e9:11:ea:5c:4f:a0:87:85:a1:fd:d0:3f:
d9:9c:57:0f:7a:00:e2:cf:15:bf:b0:50:fa:bf:ca:
c4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:DC:7C:A4:70:46:AD:D4:34:33:28:57:E7:4B:99:03:48:EA:9F:C7
X509v3 Authority Key Identifier:
keyid:24:8F:5E:26:F1:C0:8F:44:86:C9:91:1C:8B:60:9E:AE:8B:6C:B7:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JI9eJvHAj0SGyZEci2Cerotst00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/HNx8pHBGrdQ0MyhX50uZA0jqn8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/dae8b0-97d0-48d4-9b26-0137b1f75d02/1/JI9eJvHAj0SGyZEci2Cerotst00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.188.192.0-193.188.194.255
Signature Algorithm: sha256WithRSAEncryption
0f:d2:ac:99:aa:d4:80:f9:10:84:3c:ac:f9:fe:1d:9e:26:34:
f8:61:62:6e:87:5f:5f:7b:b4:e5:64:ef:45:01:82:f8:ac:42:
9b:7c:b2:a5:cc:99:30:05:b6:1b:9b:80:df:19:aa:17:c7:51:
cd:3f:a7:0f:8f:f4:b9:76:9b:1e:32:51:4a:37:ae:db:2b:40:
3a:79:bf:1f:64:54:ae:25:20:f2:17:3e:31:94:3d:27:2a:ec:
a7:f8:0c:3f:92:ed:4b:4b:c0:73:01:9d:02:fc:0e:6c:ed:b4:
0b:89:34:11:0d:9f:70:15:22:bc:e7:40:7c:68:37:a1:4d:72:
5a:e6:e7:b9:52:9d:1e:e2:3d:93:0c:0f:ca:c6:14:80:b9:11:
d9:9d:ce:3b:9d:2d:5e:08:24:bf:f2:c6:82:cb:2b:76:10:38:
f4:e7:7a:6d:18:88:7a:30:b6:68:40:32:54:d0:5d:d2:25:3a:
81:9f:d5:30:2b:8d:41:1b:82:42:af:8b:49:87:b4:47:72:fb:
d3:6c:92:e4:be:03:4f:01:3a:ad:f7:7b:f1:de:e8:8c:ae:9d:
f2:c8:25:9b:a7:68:1b:32:2c:ca:39:a6:32:4a:3f:ec:a9:e6:
f3:fa:ec:56:d0:71:93:d1:7e:73:e2:69:29:f9:38:f4:d3:28:
2b:90:67:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 18 21:10:35 2024 by rpki-client on console-ams.rpki-client.org