Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/HyMOTz0Up5nHXEPI0AMFYAZVYxw.roa
File: HyMOTz0Up5nHXEPI0AMFYAZVYxw.roa (raw, json)
Hash identifier: GNYJfMSRQetCyA+Dvv2ed+nyJeMU8psCJsjuhUcVcfI=
Subject key identifier: 1F:23:0E:4F:3D:14:A7:99:C7:5C:43:C8:D0:03:05:60:06:55:63:1C
Certificate issuer: /CN=cd73f238d96cf67a5efc0c37476fd306029af552
Certificate serial: 018CC6B945B62F85974FB5A9BBD13DC49C14
Authority key identifier: CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/HyMOTz0Up5nHXEPI0AMFYAZVYxw.roa
Signing time: Mon 01 Jan 2024 20:31:19 +0000
ROA not before: Mon 01 Jan 2024 20:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200919
IP address blocks: 185.91.112.0/24 maxlen: 24
185.91.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:45:b6:2f:85:97:4f:b5:a9:bb:d1:3d:c4:9c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd73f238d96cf67a5efc0c37476fd306029af552
Validity
Not Before: Jan 1 20:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f230e4f3d14a799c75c43c8d00305600655631c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:46:e3:20:ac:db:80:75:1b:bf:67:b8:40:
eb:40:46:f5:53:4d:3d:39:2a:ab:df:73:17:e5:16:
11:7d:8d:02:9a:af:27:19:0e:2a:ee:2a:22:0a:3e:
91:b9:fb:6d:33:5c:c1:f2:66:a6:9a:26:65:69:7e:
16:05:ea:76:99:6c:30:2a:49:fa:25:ca:5b:a7:a6:
55:4b:f4:cb:fb:c0:35:17:c5:fe:40:ac:81:66:2a:
ee:12:a2:7c:30:b8:3a:f4:74:fb:39:d5:c4:98:2a:
f3:96:db:d4:50:f8:2c:94:a6:55:48:c6:08:71:38:
d0:11:e7:38:17:fa:88:39:9f:22:eb:8e:32:fd:cf:
84:8e:c6:21:4a:32:18:45:af:d2:0d:79:13:e6:dc:
2a:a5:53:d6:91:78:3c:4b:dd:c4:e1:7f:b2:51:7b:
d5:41:48:92:2c:bd:fe:89:f2:75:12:14:fb:b1:5d:
17:b0:e8:a1:71:7e:7c:4a:1a:c6:df:a0:91:60:1c:
e2:ec:48:8a:33:1f:e0:bb:0e:3b:20:b3:c1:8c:76:
59:7c:1e:c9:3f:df:c6:f5:f1:41:06:0c:05:6d:a7:
e0:86:5f:d3:8d:8d:f8:8a:5b:0b:ea:0e:b2:c1:e7:
d3:f3:42:7a:be:4d:98:08:9c:98:a7:74:81:57:73:
66:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:23:0E:4F:3D:14:A7:99:C7:5C:43:C8:D0:03:05:60:06:55:63:1C
X509v3 Authority Key Identifier:
keyid:CD:73:F2:38:D9:6C:F6:7A:5E:FC:0C:37:47:6F:D3:06:02:9A:F5:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zXPyONls9npe_Aw3R2_TBgKa9VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/HyMOTz0Up5nHXEPI0AMFYAZVYxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/871268-bcc1-4722-b14b-dd02811903df/1/zXPyONls9npe_Aw3R2_TBgKa9VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.112.0/23
Signature Algorithm: sha256WithRSAEncryption
9f:7d:ee:f2:b7:c4:de:78:99:cf:05:f5:f5:fa:d8:31:ed:16:
3f:ad:5a:5c:ad:0f:d5:94:8e:7b:81:be:e9:7b:30:41:4b:86:
6d:4e:5d:1e:48:1a:7e:63:7c:f6:82:e4:df:51:71:bc:ab:e4:
d7:5c:62:3c:d4:58:3b:d8:b7:c6:e2:bf:85:2d:79:eb:28:fc:
98:eb:eb:78:c7:3d:02:89:09:77:a0:b6:11:dc:1f:0f:2d:30:
7d:c6:ca:6a:3a:d7:d9:ec:6b:b7:61:43:7e:5e:c8:08:d6:df:
9e:43:df:26:c1:d1:ef:97:02:4d:1b:e3:a1:05:a3:04:f4:33:
49:84:e5:b7:9c:1a:e2:98:33:5b:98:dc:c1:e1:a9:8b:90:5f:
8c:ee:54:1b:3d:d2:65:bc:9d:46:78:16:f3:90:db:88:90:e2:
14:9a:c5:f4:84:64:13:13:17:77:98:9f:4e:5b:5c:e0:da:c6:
0b:2c:f0:1d:3a:8c:b4:4e:35:d1:c9:8b:ea:70:ac:8e:d2:75:
ec:ed:84:93:c5:46:03:52:f5:a5:fd:ec:a0:da:4d:2e:95:c1:
22:51:45:5a:e2:b3:62:28:d8:e3:88:ff:da:1e:bf:81:c5:19:
c3:06:17:1e:46:3f:78:88:04:70:c8:60:cc:dd:8a:3a:00:72:
b3:21:0e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 11:58:05 2024 by rpki-client on console-fra.rpki-client.org