Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/HFzWVdVYnqtyWzXDsyqgi9PE_uE.roa
File: HFzWVdVYnqtyWzXDsyqgi9PE_uE.roa (raw, json)
Hash identifier: +YVbtGkC2Kok8O4H5sgLhJt44NttIuw7gHpurwke338=
Subject key identifier: 1C:5C:D6:55:D5:58:9E:AB:72:5B:35:C3:B3:2A:A0:8B:D3:C4:FE:E1
Certificate issuer: /CN=855be74d09d9b05251dad2c9696793c04b40f241
Certificate serial: 018E2DA6BA2BDE1D758E5A69CB4731A46A9B
Authority key identifier: 85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/HFzWVdVYnqtyWzXDsyqgi9PE_uE.roa
Signing time: Mon 11 Mar 2024 13:14:45 +0000
ROA not before: Mon 11 Mar 2024 13:14:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210570
IP address blocks: 176.126.127.0/24 maxlen: 24
2a12:7c6:abc::/48 maxlen: 48
2a12:7c6:affe::/48 maxlen: 48
2a12:7c6:c001::/48 maxlen: 48
2a12:7c6:d001::/48 maxlen: 48
2a12:7c6:e001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:a6:ba:2b:de:1d:75:8e:5a:69:cb:47:31:a4:6a:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=855be74d09d9b05251dad2c9696793c04b40f241
Validity
Not Before: Mar 11 13:14:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c5cd655d5589eab725b35c3b32aa08bd3c4fee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:72:a1:42:9c:9d:ff:b3:fe:54:a3:11:23:
38:f0:cc:9f:c1:d7:bf:d3:14:57:49:cb:c7:5f:fd:
4d:65:90:1a:bd:7b:55:5b:f3:bd:c6:08:30:cf:7b:
d9:96:2a:ed:57:c2:6c:7c:ce:f0:e4:0c:a1:fe:e2:
ec:c2:c3:1a:14:07:37:6a:98:25:f6:92:1c:c4:8b:
1d:ec:88:52:f8:22:38:da:73:c0:fd:3d:b5:a5:1d:
6a:0c:f7:52:ed:94:29:40:a9:1b:b9:9a:1f:7d:62:
8a:45:4b:e6:50:c1:fe:ba:4c:88:9c:17:7b:ef:15:
45:ac:fe:c2:53:bb:c3:a2:9f:f8:ac:4c:dc:8e:50:
a2:af:d6:bb:03:d5:f7:09:26:ff:4d:ed:24:14:9a:
7d:ee:53:1c:09:f0:4e:5c:6c:72:73:28:84:9e:96:
1a:66:4d:43:cf:d9:b2:14:a8:1d:31:f8:76:1e:1b:
95:18:43:84:2e:5a:5b:05:28:84:e3:eb:05:5b:a5:
27:2b:db:e0:b1:7a:26:04:dc:aa:e9:2f:a0:2a:68:
e5:9d:c0:0e:a8:88:4d:a2:7d:ca:21:b7:58:26:c9:
ab:91:46:0e:67:fb:99:9e:ef:ee:70:c8:0a:8f:d2:
11:55:fb:b4:cd:fa:de:69:36:5f:0c:86:da:5e:08:
fe:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5C:D6:55:D5:58:9E:AB:72:5B:35:C3:B3:2A:A0:8B:D3:C4:FE:E1
X509v3 Authority Key Identifier:
keyid:85:5B:E7:4D:09:D9:B0:52:51:DA:D2:C9:69:67:93:C0:4B:40:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVvnTQnZsFJR2tLJaWeTwEtA8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/HFzWVdVYnqtyWzXDsyqgi9PE_uE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/48d092-a76c-4c28-b84b-39ad80f542a0/1/hVvnTQnZsFJR2tLJaWeTwEtA8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.127.0/24
IPv6:
2a12:7c6:abc::/48
2a12:7c6:affe::/48
2a12:7c6:c001::/48
2a12:7c6:d001::/48
2a12:7c6:e001::/48
Signature Algorithm: sha256WithRSAEncryption
3b:f3:58:5d:bf:4f:03:60:e2:83:33:2b:e3:b1:3c:8d:42:67:
68:2f:c2:d4:40:05:f1:0b:32:c9:90:fb:88:fc:fb:56:dc:ba:
ea:00:a7:72:76:54:30:af:8c:e7:44:e2:fb:30:21:8b:30:f4:
63:64:c8:eb:2f:8e:1c:8d:f4:06:77:09:77:bd:26:eb:1d:ae:
97:f9:26:df:8a:ff:c2:59:e6:6f:ed:ae:f6:ac:da:3c:91:43:
7b:44:18:6f:12:99:23:66:1a:33:fb:93:bb:b2:25:c9:ad:b9:
1f:07:15:91:13:e6:88:c0:e7:6b:53:d7:a1:4d:2f:44:18:ac:
75:0b:6e:d4:46:fa:06:8c:f6:37:e7:c3:f3:3a:df:83:5d:5c:
61:f3:81:94:25:90:4c:d8:c4:a6:ed:68:eb:d9:ca:cf:60:f8:
c8:04:cd:4c:15:de:78:94:c5:b5:b3:bf:0a:d7:a3:64:b3:b0:
b5:2e:d3:f7:cb:88:12:96:11:dd:88:3a:68:c2:e7:08:32:f2:
15:0c:59:96:84:fd:42:35:63:70:2b:f9:b3:93:7a:aa:5b:19:
bf:d5:f4:78:e7:3b:ec:ec:ab:64:48:fc:ce:37:77:c3:64:4f:
d5:b6:c7:c2:23:1c:b9:5c:59:41:cb:2c:2c:bd:09:a6:87:4d:
b3:10:e7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:27:58 2024 by rpki-client on console-ams.rpki-client.org