Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/HfTZs5n6UkebNp0oIHY4il_Q1Og.roa
File: HfTZs5n6UkebNp0oIHY4il_Q1Og.roa (raw, json)
Hash identifier: jYCbSqDWq1cHHiuf4ofPiZeo5uwavDHl+Kpc0ZCmhvA=
Subject key identifier: 1D:F4:D9:B3:99:FA:52:47:9B:36:9D:28:20:76:38:8A:5F:D0:D4:E8
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 018CC8012CBEB49360AD0992F0BDABFE7C0F
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/HfTZs5n6UkebNp0oIHY4il_Q1Og.roa
Signing time: Tue 02 Jan 2024 02:29:29 +0000
ROA not before: Tue 02 Jan 2024 02:29:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50485
IP address blocks: 159.148.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:2c:be:b4:93:60:ad:09:92:f0:bd:ab:fe:7c:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 2 02:29:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1df4d9b399fa52479b369d282076388a5fd0d4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d2:76:68:9b:26:37:b3:1f:ef:38:b3:2c:84:
86:13:09:23:60:21:14:1b:5f:d1:45:ed:e2:e0:54:
f8:a9:26:d5:ff:a2:7b:b5:df:1d:21:e8:42:a5:89:
9f:57:74:1b:31:dc:6c:0d:b5:59:4a:79:1e:04:0b:
86:46:13:c1:bf:18:02:bc:a5:58:54:5d:83:a5:c2:
f4:ce:ef:2c:8f:78:81:31:37:ed:af:c6:4c:83:5f:
83:9c:6e:a3:36:01:40:4e:3d:81:be:7c:8d:de:79:
e4:f4:2f:99:f5:e7:11:a0:66:b6:00:f9:f1:75:d8:
ef:3f:af:12:dd:0d:37:bf:21:f8:5d:0e:88:96:06:
7b:69:88:55:d5:34:ee:f0:e6:84:ff:87:8a:25:71:
23:09:f4:be:e3:03:ec:12:ca:05:68:2d:ac:11:c5:
d9:98:cb:b9:c8:40:da:bc:4b:5d:5a:34:65:4e:39:
12:c6:7e:5e:5e:eb:d1:e4:2a:97:7e:3d:97:85:4c:
36:5e:aa:5d:f3:78:dc:fa:b4:19:a0:48:67:89:10:
90:89:1a:c5:34:84:2a:00:0f:3a:21:cd:77:d7:e3:
17:97:f7:83:43:b6:ba:dd:68:bf:cc:81:4e:84:d1:
4c:8a:e7:69:fb:51:3a:c6:82:17:f2:fc:32:c9:eb:
37:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F4:D9:B3:99:FA:52:47:9B:36:9D:28:20:76:38:8A:5F:D0:D4:E8
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/HfTZs5n6UkebNp0oIHY4il_Q1Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.231.0/24
Signature Algorithm: sha256WithRSAEncryption
14:af:b9:f1:0d:88:a2:1c:32:71:fe:a3:0e:25:0d:40:a5:5e:
52:53:ab:50:f8:c2:f6:88:e8:60:d8:db:6f:bc:4f:18:e7:af:
d7:57:79:07:dd:e8:4c:7c:83:9c:cf:67:de:cc:e3:4b:62:4e:
4f:05:18:91:cd:3d:26:50:b8:e2:2e:fa:27:ce:4f:47:db:dc:
00:cd:66:57:25:d9:68:65:04:38:c2:75:b7:d7:34:1f:b2:d2:
9d:8b:06:84:6b:84:77:cc:09:e8:0a:50:28:ec:a4:5e:12:d4:
1b:87:37:27:94:72:e0:7e:99:3e:76:e5:57:f6:63:c1:d7:d1:
b8:98:7a:57:8e:75:c0:2f:ce:29:f6:97:43:e1:8c:cd:21:50:
9b:6c:73:ce:9b:bf:b2:e1:c7:53:07:54:3f:73:75:92:03:57:
28:dc:1b:3c:8a:2f:f3:da:9c:f6:98:7b:cd:a6:20:bd:f4:ed:
17:e8:f8:0d:4a:a5:b1:b6:24:87:2e:b0:0e:67:c4:02:2a:8f:
c6:b5:8b:ec:90:fa:2a:19:0a:c5:0d:eb:28:f9:ab:0e:c4:4f:
ca:0a:53:8f:aa:e3:8f:38:d1:05:3e:90:45:05:2d:69:14:49:
41:ca:82:64:f8:a0:d4:bc:a5:72:7c:77:f9:ea:b2:1c:d8:f1:
48:c2:d2:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 20:55:51 2024 by rpki-client on console-ams.rpki-client.org