Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/Hl7PicIeskBpW_owktvrCTo22AE.roa
File: Hl7PicIeskBpW_owktvrCTo22AE.roa (raw, json)
Hash identifier: 8+OUDWcV6C7vtU+909J/HjwC06WTEEAwSbHMHZTHsqE=
Subject key identifier: 1E:5E:CF:89:C2:1E:B2:40:69:5B:FA:30:92:DB:EB:09:3A:36:D8:01
Certificate issuer: /CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Certificate serial: 018CC94E4F0F2E7C6D1B1F183472B847CC7C
Authority key identifier: 60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/Hl7PicIeskBpW_owktvrCTo22AE.roa
Signing time: Tue 02 Jan 2024 08:33:21 +0000
ROA not before: Tue 02 Jan 2024 08:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21453
IP address blocks: 80.84.112.0/20 maxlen: 20
178.167.0.0/18 maxlen: 18
178.167.0.0/17 maxlen: 17
212.7.224.0/19 maxlen: 19
94.253.0.0/18 maxlen: 18
94.253.0.0/17 maxlen: 17
178.167.96.0/19 maxlen: 19
80.252.128.0/19 maxlen: 19
94.253.96.0/19 maxlen: 19
178.167.64.0/19 maxlen: 19
185.5.148.0/22 maxlen: 22
88.84.192.0/19 maxlen: 19
95.183.64.0/18 maxlen: 18
178.57.224.0/19 maxlen: 19
94.253.64.0/20 maxlen: 20
2a01:4200::/32 maxlen: 32
2a01:4200::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:4f:0f:2e:7c:6d:1b:1f:18:34:72:b8:47:cc:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6090cdd31d3a71da1ce4a4bd85f1987e3ca4eafa
Validity
Not Before: Jan 2 08:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e5ecf89c21eb240695bfa3092dbeb093a36d801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1b:7b:b7:97:15:df:90:4d:e5:53:d9:1b:2e:
30:83:06:e5:5d:c7:9c:2f:42:ff:1a:16:85:a0:19:
03:46:7b:83:23:92:7e:76:e7:0c:56:8b:b4:e4:a4:
57:46:90:62:62:a5:7f:06:cd:66:c3:e0:ad:11:4f:
c7:04:b6:43:a1:6a:98:f3:b9:21:90:4f:15:30:c1:
16:10:dc:2d:e9:32:02:b5:3e:25:95:da:c9:e4:d6:
0d:dd:4f:ec:f9:09:66:bf:64:5b:5c:ac:e2:ec:ca:
cb:f1:e5:cb:79:47:62:68:00:97:f9:c8:65:b5:44:
b6:27:ac:49:fe:a9:95:92:1f:26:a9:31:1f:aa:73:
5f:85:0c:a5:bd:fc:07:af:a0:30:96:81:57:60:19:
bd:7d:be:1e:b3:49:5c:a3:fd:f3:26:5a:64:8d:c6:
62:91:c5:56:dd:60:60:77:0a:fd:80:5e:63:9d:50:
cd:21:d0:55:52:43:a5:ae:c9:cc:6e:79:bf:db:20:
68:3e:c3:8c:b7:0e:0a:ac:dc:da:b0:d0:1d:b3:fa:
c0:1f:7e:8f:b2:81:21:23:b1:df:a6:30:93:95:34:
a4:38:29:21:22:0a:07:62:c9:70:55:de:58:a4:84:
b7:01:57:22:5c:ca:4c:41:b1:a3:13:66:59:a8:6d:
4c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5E:CF:89:C2:1E:B2:40:69:5B:FA:30:92:DB:EB:09:3A:36:D8:01
X509v3 Authority Key Identifier:
keyid:60:90:CD:D3:1D:3A:71:DA:1C:E4:A4:BD:85:F1:98:7E:3C:A4:EA:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YJDN0x06cdoc5KS9hfGYfjyk6vo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/Hl7PicIeskBpW_owktvrCTo22AE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/08900f-b361-47ad-893f-7351f869b42b/1/YJDN0x06cdoc5KS9hfGYfjyk6vo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.84.112.0/20
80.252.128.0/19
88.84.192.0/19
94.253.0.0/17
95.183.64.0/18
178.57.224.0/19
178.167.0.0/17
185.5.148.0/22
212.7.224.0/19
IPv6:
2a01:4200::/30
Signature Algorithm: sha256WithRSAEncryption
4d:6c:2e:89:14:60:c7:d7:00:72:02:0e:2a:21:da:25:5f:d5:
ec:4a:b9:fd:47:3a:fa:02:a4:e4:2e:87:1f:ca:47:7c:06:78:
1b:e7:37:86:34:3e:d6:fb:21:fd:cf:15:73:1b:9c:fd:37:a7:
6d:1b:04:9b:1a:9e:be:a9:da:cd:60:2a:5f:56:c8:2a:81:39:
1e:19:a9:ae:6b:25:91:3a:ec:25:b6:47:cf:a7:cd:bd:0b:6d:
33:03:f3:2c:09:0a:c8:9b:e2:42:56:25:3a:55:0a:63:d6:e7:
11:33:ac:0d:a4:5d:62:a7:b0:43:cb:19:9d:51:57:a9:0d:9e:
df:1a:48:61:95:32:47:ce:16:a4:eb:fa:0b:fe:e1:eb:fb:ed:
7d:27:15:e1:01:a3:cc:da:54:9f:9a:95:0f:38:a2:3a:5a:64:
4f:c3:94:fa:d2:c0:0b:be:6d:10:4e:6a:23:cf:9e:74:7b:9d:
cf:7d:84:82:0c:32:8a:a9:aa:f3:c4:7a:4a:03:fd:6d:08:ef:
03:d9:75:85:17:c1:10:a4:e4:79:19:c8:2c:78:bf:1f:35:7c:
6e:3c:b7:51:f5:88:b6:b5:19:f7:63:8d:d5:18:94:30:bf:ff:
8f:4b:fc:7c:3b:d0:53:33:fe:af:58:10:c2:b0:6a:f0:c1:aa:
ed:88:28:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:44:28 2024 by rpki-client on console-fra.rpki-client.org