Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hHbc2uYdxqO9-WUh9vvdHQaKuKk.roa
File: hHbc2uYdxqO9-WUh9vvdHQaKuKk.roa (raw, json)
Hash identifier: iP5MkDZdNmupnDgSmQLpRdP6zj7uV7U2wListwNQ0H0=
Subject key identifier: 84:76:DC:DA:E6:1D:C6:A3:BD:F9:65:21:F6:FB:DD:1D:06:8A:B8:A9
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC79528CAC06E0073FEEF4C0D53F76434
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hHbc2uYdxqO9-WUh9vvdHQaKuKk.roa
Signing time: Tue 02 Jan 2024 00:31:30 +0000
ROA not before: Tue 02 Jan 2024 00:31:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49453
IP address blocks: 193.233.248.0/24 maxlen: 24
193.233.251.0/24 maxlen: 24
193.233.250.0/24 maxlen: 24
193.233.249.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:28:ca:c0:6e:00:73:fe:ef:4c:0d:53:f7:64:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8476dcdae61dc6a3bdf96521f6fbdd1d068ab8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c7:e3:7d:79:59:27:bb:42:b0:8d:21:d4:e2:
75:2a:d3:50:76:c6:49:12:0b:37:3e:51:6b:f7:65:
ce:f5:23:1b:41:95:69:f1:18:8e:68:72:b6:75:a7:
f9:d5:fd:c4:72:83:93:aa:be:e2:ca:0d:f4:98:cb:
ee:ca:5b:00:16:f3:b2:04:aa:7f:76:e4:cc:bc:65:
6b:2d:f4:a5:e4:ba:64:42:05:14:7a:4f:1d:47:3e:
89:01:1b:c8:b0:23:15:2c:09:b2:40:a4:43:a3:20:
11:31:c2:fe:b0:ce:32:7d:76:0e:71:9f:9d:7b:97:
23:e6:5e:4b:d6:39:c7:1d:14:e8:24:0b:25:f8:32:
de:e5:de:f0:37:5a:b8:0e:fc:e3:fc:09:bb:a8:9e:
c8:a3:a6:39:f0:8f:3b:d6:0d:29:79:d0:80:50:77:
0b:0a:45:c8:fd:bd:55:e8:d5:ed:a7:f2:82:fd:46:
33:f1:f7:e7:56:8a:f1:84:ab:c9:cd:73:43:0f:3c:
3f:a8:2b:19:93:ad:45:d1:8a:f6:6d:2e:67:31:6c:
f9:f6:69:11:e0:de:78:34:99:02:2b:12:1f:38:0e:
0c:65:d3:1c:01:f7:e2:17:be:44:b6:a0:32:da:4d:
fa:28:5c:fb:08:a5:df:24:9b:5c:70:11:11:a9:27:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:76:DC:DA:E6:1D:C6:A3:BD:F9:65:21:F6:FB:DD:1D:06:8A:B8:A9
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hHbc2uYdxqO9-WUh9vvdHQaKuKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.248.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:0c:3e:be:cf:01:17:f6:63:22:0a:ff:65:fc:eb:8b:08:a0:
c0:8c:ce:df:c5:d3:f4:f0:d1:30:17:cb:1d:aa:a3:7d:e9:d8:
38:cb:f4:2e:5e:64:8a:d6:ee:2c:dc:ff:e6:de:31:bb:c4:20:
b8:3c:90:98:dc:2c:ee:17:64:c7:18:78:08:d3:b7:1b:d9:23:
20:e9:99:09:fb:03:dc:5b:68:33:a6:17:e9:ec:e2:37:02:27:
df:47:d8:22:8d:3a:d3:dc:93:0c:59:9d:11:0a:bf:06:96:11:
8c:43:13:2b:97:0a:50:1a:5b:27:f5:af:1a:88:d4:7d:31:64:
b7:f2:ba:d9:9e:f2:e2:75:ac:5e:11:c7:f7:f4:b6:7b:6c:fe:
53:dc:4a:21:dc:cd:d9:fc:92:c2:82:40:58:a7:0d:8f:45:f7:
ab:b8:a2:d9:fd:6f:42:ac:88:5c:fa:df:ea:f5:e7:e3:4a:3b:
17:0a:4c:2e:64:a1:80:d3:dd:a3:81:1b:2c:59:2a:de:39:c1:
76:bc:ce:28:4d:20:c4:ce:3a:ec:8c:6c:15:38:a9:a4:8e:af:
69:b5:d3:a3:50:72:8e:51:bc:9a:c6:1d:e5:3f:89:bc:a8:5c:
a4:79:e3:6d:2e:c1:1b:23:a0:f6:f5:f8:21:5f:26:05:58:af:
69:f0:34:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:15:45 2024 by rpki-client on console-fra.rpki-client.org