Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hUY-l9AuH_m10IYseqMjnVrdcJo.roa
File: hUY-l9AuH_m10IYseqMjnVrdcJo.roa (raw, json)
Hash identifier: Qm8PCwhfq66P9DlSdEVbxN0rc+I49qLUtrZsIdzmpw8=
Subject key identifier: 85:46:3E:97:D0:2E:1F:F9:B5:D0:86:2C:7A:A3:23:9D:5A:DD:70:9A
Certificate issuer: /CN=85db83a8365a604476f282d24d327ad1ef0fde52
Certificate serial: 018CC79359E09D1FEDEC0FFC0EE301CF27FF
Authority key identifier: 85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hUY-l9AuH_m10IYseqMjnVrdcJo.roa
Signing time: Tue 02 Jan 2024 00:29:31 +0000
ROA not before: Tue 02 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43366
IP address blocks: 91.215.4.0/22 maxlen: 24
194.140.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:59:e0:9d:1f:ed:ec:0f:fc:0e:e3:01:cf:27:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85db83a8365a604476f282d24d327ad1ef0fde52
Validity
Not Before: Jan 2 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85463e97d02e1ff9b5d0862c7aa3239d5add709a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6d:39:bc:ef:b5:d4:32:06:20:35:9f:96:8c:
a4:0f:40:fe:20:e4:2d:c0:16:63:c1:03:cf:e2:93:
3d:da:b7:e3:ee:9f:91:3d:51:fc:3f:b8:23:46:62:
7c:7a:f3:ec:27:4b:c4:96:3d:97:1e:18:2d:0b:a5:
7c:27:cb:bf:5b:d2:85:52:87:9d:9b:ff:80:d4:9e:
71:62:4f:e8:3b:40:92:f2:76:2d:6c:e3:80:98:ec:
a1:4b:16:c4:54:0c:ea:52:6f:24:9a:f1:44:d1:5d:
76:0e:4e:5d:40:40:5a:16:4d:d3:d3:b6:dc:87:65:
3a:37:80:82:b4:90:d7:c9:b0:1d:b4:a0:bb:de:6e:
0b:ee:db:8c:38:3d:cc:0d:1c:e1:d3:43:53:60:da:
47:a0:2c:a6:89:7b:3a:18:f9:73:b0:b3:cb:4c:9c:
e7:4e:46:d2:90:fb:ec:56:c4:c9:ae:67:f3:46:3d:
43:c3:12:ea:25:52:9d:e4:f9:7c:a3:b4:11:b0:c9:
fc:3f:3b:8a:c8:31:a9:7f:23:fa:62:84:0b:6e:04:
14:f7:2a:fd:3c:22:5e:ad:c8:c8:1b:d1:a6:d8:65:
2c:ae:37:c3:39:32:be:26:71:a6:2e:da:9b:13:b1:
b5:40:b6:2d:ce:57:7a:f2:fb:e3:d5:b7:75:43:64:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:46:3E:97:D0:2E:1F:F9:B5:D0:86:2C:7A:A3:23:9D:5A:DD:70:9A
X509v3 Authority Key Identifier:
keyid:85:DB:83:A8:36:5A:60:44:76:F2:82:D2:4D:32:7A:D1:EF:0F:DE:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hduDqDZaYER28oLSTTJ60e8P3lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hUY-l9AuH_m10IYseqMjnVrdcJo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2c8f08-e599-44f3-bbc1-8cbef913e342/1/hduDqDZaYER28oLSTTJ60e8P3lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.215.4.0/22
194.140.246.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:b0:37:9b:68:2f:ae:c1:2a:ce:a4:a5:b6:90:36:a5:ec:6b:
54:04:79:ba:20:b0:84:3e:ec:f0:c2:6d:ac:d7:a5:a2:85:ba:
d8:01:df:b5:a1:9b:2e:c9:57:b2:c1:a2:2c:d8:63:57:5c:50:
e7:cd:60:43:0f:24:ff:a6:86:d6:b3:5e:cd:e1:e9:10:81:78:
95:c4:89:33:2e:1d:33:16:36:7c:38:11:be:c1:cc:a5:1b:4b:
c7:c2:07:17:d4:dd:c9:b0:0d:cb:05:3e:97:2f:64:05:ca:5c:
19:3f:af:b7:cb:bf:8d:a5:3e:d2:e0:50:c3:88:fd:27:c4:e1:
66:d5:40:3a:2c:0d:f1:24:8e:22:21:3c:26:e5:a6:e4:6c:4b:
0f:1d:a6:2e:90:3e:8d:c6:2d:15:ff:53:31:7a:4c:7e:37:ef:
9e:5a:be:c5:00:94:50:94:b8:40:20:04:12:67:77:b6:cf:f7:
82:08:c2:29:08:67:07:4a:15:83:55:6e:8f:2e:5f:9a:92:92:
4e:98:8b:18:ca:ff:6e:f4:09:da:f5:0a:68:c5:fe:08:09:01:
b6:13:d4:2e:50:8d:43:43:e5:cb:e1:05:8a:62:a9:01:86:d9:
d0:1f:3f:1a:1e:1b:ef:1e:40:04:11:50:37:17:ad:ad:69:3a:
4b:73:a3:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:43:24 2024 by rpki-client on console-fra.rpki-client.org