Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/Hf4Z68jGWKGsctmkCddFCx-_rkQ.roa
File: Hf4Z68jGWKGsctmkCddFCx-_rkQ.roa (raw, json)
Hash identifier: AYs54YuahU47W3ufWTPFdWolo1KxORage57OLCRBPok=
Subject key identifier: 1D:FE:19:EB:C8:C6:58:A1:AC:72:D9:A4:09:D7:45:0B:1F:BF:AE:44
Certificate issuer: /CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Certificate serial: 018CC802C02DFFD8C26ED7CE7919AD65051C
Authority key identifier: B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/Hf4Z68jGWKGsctmkCddFCx-_rkQ.roa
Signing time: Tue 02 Jan 2024 02:31:12 +0000
ROA not before: Tue 02 Jan 2024 02:31:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30840
IP address blocks: 195.191.118.0/24 maxlen: 24
195.191.119.0/24 maxlen: 24
193.202.120.0/24 maxlen: 24
193.23.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.mft
rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jul 2024 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:c0:2d:ff:d8:c2:6e:d7:ce:79:19:ad:65:05:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7601d7cc820dc71915ea930673ef47f241a71c8
Validity
Not Before: Jan 2 02:31:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dfe19ebc8c658a1ac72d9a409d7450b1fbfae44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8b:e1:d5:45:7f:dc:a1:68:ae:e5:b8:e9:a5:
b1:08:db:7a:14:57:0d:62:dd:75:96:73:aa:fe:4d:
c1:9c:4c:ed:ac:61:b3:6e:f9:c1:34:ed:32:2b:0b:
42:e0:fe:39:8c:4c:4f:5d:01:2e:6f:29:3f:8c:13:
45:04:e6:be:29:4f:f8:8f:05:6c:1a:fc:6f:ae:de:
da:20:d3:a1:e9:e7:11:7b:b2:16:02:9e:94:3f:88:
a2:e4:6b:54:70:ac:e9:60:da:3c:e8:71:35:c3:99:
42:cb:b7:b8:6d:6c:b6:f7:de:bb:9f:58:fe:72:23:
4b:be:67:dd:6b:8e:05:af:ff:87:c6:0e:46:9d:74:
ff:73:87:09:6e:07:78:b5:b5:9e:6a:fd:71:5c:cb:
a4:7f:60:b2:08:2c:ab:8d:3e:ca:91:40:66:55:76:
86:b9:8e:0b:69:3d:b8:7a:bc:ee:ec:86:74:de:7e:
19:b7:65:da:cf:49:c8:6d:34:63:10:da:7b:00:f3:
0a:ff:88:f1:fd:ef:3c:ef:52:98:5a:a0:82:5b:c7:
17:4f:52:e6:8f:7f:c2:61:63:17:3f:d6:eb:dc:73:
a8:8f:07:bf:66:8d:e3:a4:36:db:70:e4:32:7e:31:
06:2d:24:f6:7d:c3:0c:c3:9a:1d:06:3b:3c:e8:3e:
48:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:FE:19:EB:C8:C6:58:A1:AC:72:D9:A4:09:D7:45:0B:1F:BF:AE:44
X509v3 Authority Key Identifier:
keyid:B7:60:1D:7C:C8:20:DC:71:91:5E:A9:30:67:3E:F4:7F:24:1A:71:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2AdfMgg3HGRXqkwZz70fyQaccg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/Hf4Z68jGWKGsctmkCddFCx-_rkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/2f45ae-75c0-439c-a311-671d68188688/1/t2AdfMgg3HGRXqkwZz70fyQaccg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.156.0/24
193.202.120.0/24
195.191.118.0/23
Signature Algorithm: sha256WithRSAEncryption
c7:1f:d1:01:00:a0:b9:a0:f5:bf:0d:87:74:fe:8b:7a:bf:18:
a6:56:15:50:68:96:c9:14:05:82:eb:39:40:cd:94:b7:75:ca:
92:29:f7:0d:c6:74:80:e3:5c:86:ae:71:d7:cd:a9:f9:7a:72:
45:08:cd:bf:c6:f7:e8:bf:07:7e:7c:06:d6:f9:70:56:d8:ab:
6b:c3:12:1c:24:0f:5f:93:54:13:5b:86:63:e4:2d:9c:13:0a:
f4:91:9f:10:8d:0a:ae:25:84:5e:13:1a:ba:2f:5c:49:f9:05:
da:5b:ee:ee:7a:ef:c6:57:65:4f:0d:a7:93:60:37:dd:60:01:
23:1a:73:bc:08:9c:5e:2d:df:ec:2e:bf:2e:65:f5:eb:ec:9a:
fc:44:d0:43:e0:b0:3c:00:c5:d7:c6:53:36:41:f2:86:19:ac:
73:dc:98:0c:d9:a3:02:51:c9:b7:41:b6:1e:0a:e7:12:69:dd:
dc:1a:cf:c2:2c:11:9c:16:4c:03:71:d2:eb:62:5b:eb:b0:3b:
7a:74:fe:c7:a4:e5:70:04:70:a1:41:9c:a9:79:62:b0:4d:ab:
58:98:b8:70:0c:e6:6a:17:85:af:54:19:b8:f9:4e:d6:7c:be:
43:73:65:e3:13:9d:1e:06:c0:09:70:a5:f3:27:78:8c:04:68:
43:66:fc:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 07:51:16 2024 by rpki-client on console-ams.rpki-client.org