Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/hnaBnhLAiVCARXhCMtwKIhOnK4Y.roa
File: hnaBnhLAiVCARXhCMtwKIhOnK4Y.roa (raw, json)
Hash identifier: Rc4Yt9X9IYHH/RqTUqJET2qXRyrKXbRDfi9DyP9l6GA=
Subject key identifier: 86:76:81:9E:12:C0:89:50:80:45:78:42:32:DC:0A:22:13:A7:2B:86
Certificate issuer: /CN=181e4d608152fc244afffba2dc72b851b19b2527
Certificate serial: 018CC8017F54987EB1F745D3470D15021513
Authority key identifier: 18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/hnaBnhLAiVCARXhCMtwKIhOnK4Y.roa
Signing time: Tue 02 Jan 2024 02:29:50 +0000
ROA not before: Tue 02 Jan 2024 02:29:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209867
IP address blocks: 86.62.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Jun 2024 14:33:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:7f:54:98:7e:b1:f7:45:d3:47:0d:15:02:15:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=181e4d608152fc244afffba2dc72b851b19b2527
Validity
Not Before: Jan 2 02:29:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8676819e12c089508045784232dc0a2213a72b86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:48:5b:e3:a3:c3:6a:47:ba:7e:b1:49:d4:05:
5b:22:93:83:f8:e7:a0:24:e1:6c:d0:e2:88:fc:28:
4c:e2:5a:5d:e4:e3:1b:06:e5:a5:4d:11:b1:f5:34:
33:49:1f:23:f3:ba:32:33:8e:2f:f8:d4:96:d2:b4:
4e:af:c2:5e:a5:e6:9b:b8:d8:5c:77:36:22:4b:76:
5f:bc:3b:dd:8a:87:6c:a0:77:a5:72:2e:ca:a1:6c:
40:f9:59:bf:12:d7:57:a3:64:13:b9:00:e2:91:53:
36:30:a2:20:8e:aa:6e:7c:38:f6:55:3a:62:d5:26:
ff:67:91:94:02:bd:d5:4a:3b:c6:ca:36:c6:0f:8e:
76:e5:67:75:7d:27:14:53:17:e4:72:ee:13:00:0a:
e4:56:b6:46:31:2a:3a:f4:8e:af:27:ef:fd:e0:de:
f2:49:c0:ad:9b:7f:9f:38:9c:9a:fa:be:be:a3:68:
e3:52:ab:eb:a7:ec:7e:85:0f:36:09:94:ce:0b:7f:
11:ee:14:fa:d5:57:61:8b:dd:78:6c:a0:89:eb:70:
a7:84:b9:49:3b:2f:a7:86:2f:69:ce:5a:07:ab:2c:
73:05:e6:73:f0:74:af:ae:b5:aa:1e:3c:17:ba:47:
03:a1:20:0a:29:8f:d1:91:d6:b3:06:ce:c6:3f:13:
34:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:76:81:9E:12:C0:89:50:80:45:78:42:32:DC:0A:22:13:A7:2B:86
X509v3 Authority Key Identifier:
keyid:18:1E:4D:60:81:52:FC:24:4A:FF:FB:A2:DC:72:B8:51:B1:9B:25:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GB5NYIFS_CRK__ui3HK4UbGbJSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/hnaBnhLAiVCARXhCMtwKIhOnK4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9217f9-813d-47af-ad62-32208d544a84/1/GB5NYIFS_CRK__ui3HK4UbGbJSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.7.0/24
Signature Algorithm: sha256WithRSAEncryption
90:a3:44:c6:4f:b3:7e:09:4f:b1:95:92:a2:ee:88:65:ef:c6:
e2:ba:b7:60:a1:1a:19:25:60:63:01:26:55:f8:3a:88:d2:81:
de:cf:7d:d6:40:e9:05:ed:ee:c9:09:91:bf:bb:8f:5d:79:ee:
5b:49:8f:fe:5a:2d:83:24:3b:8d:de:0a:35:fb:c0:17:8e:8e:
b3:a1:df:71:8b:bd:3c:ee:ee:46:16:30:35:4c:ea:b6:61:26:
6c:2f:78:51:41:cd:c2:cb:23:72:c4:61:cd:3b:ec:ee:1b:3b:
48:cf:07:1f:0d:4a:57:b9:ff:92:80:79:77:21:30:84:da:24:
dd:33:34:d7:e7:00:e9:83:db:ad:b9:da:92:cd:fb:3d:12:e3:
0c:ae:ab:49:c5:ed:eb:ea:51:16:a3:e3:53:b7:17:7c:f1:46:
1c:54:86:4f:d5:12:d5:4a:aa:da:49:fd:01:9b:e0:7e:d0:e8:
30:08:f3:3b:57:16:6d:48:e3:b5:ca:24:f9:55:1e:ac:21:b6:
db:8c:ef:ef:8d:6f:e6:ee:d2:06:60:f6:ed:cf:aa:63:0d:ee:
93:e9:14:29:ae:d1:71:0c:c5:6a:2b:a8:30:a3:f5:e8:94:27:
9e:35:b6:8f:c8:17:65:18:e2:7b:69:f9:32:48:81:dd:77:fa:
03:33:4c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 25 23:39:46 2024 by rpki-client on console-fra.rpki-client.org