Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/hsrQr_d_tk0oLIpPAPMuFwnYU-k.roa
File: hsrQr_d_tk0oLIpPAPMuFwnYU-k.roa (raw, json)
Hash identifier: BIt3XBxnsHk5DTr3aBBWB7t6v7a/WhSZ0Tes6W/Wl8U=
Subject key identifier: 86:CA:D0:AF:F7:7F:B6:4D:28:2C:8A:4F:00:F3:2E:17:09:D8:53:E9
Certificate issuer: /CN=f13219221cc0a21326ce006c42825bac2be31e17
Certificate serial: 018CC86EF8A20BE6975187891260DBCB9C7C
Authority key identifier: F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/hsrQr_d_tk0oLIpPAPMuFwnYU-k.roa
Signing time: Tue 02 Jan 2024 04:29:24 +0000
ROA not before: Tue 02 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44577
IP address blocks: 37.99.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 05:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f8:a2:0b:e6:97:51:87:89:12:60:db:cb:9c:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13219221cc0a21326ce006c42825bac2be31e17
Validity
Not Before: Jan 2 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86cad0aff77fb64d282c8a4f00f32e1709d853e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:42:43:c8:20:67:d4:a5:74:00:27:e1:50:25:
5f:0b:74:9a:fb:48:87:70:a9:90:6b:e4:9f:e8:3d:
79:cf:11:58:99:5b:7a:aa:7f:03:5b:90:8e:8e:81:
5e:ff:67:01:db:98:bc:b2:0f:e3:fa:98:6c:83:8e:
c9:1d:c7:5a:94:2b:d1:a8:b9:c5:f7:1a:91:11:69:
a8:d8:08:71:90:2e:58:db:a9:cc:d7:a1:f3:bf:d2:
07:e5:e3:c8:81:2c:10:aa:c2:79:d6:12:46:02:b1:
cb:2d:53:ca:da:f9:53:2b:ed:07:bf:46:7a:ae:c0:
7f:b4:16:a4:fc:a7:bb:55:00:32:50:0d:54:2a:7b:
46:6f:23:4b:e3:46:2d:08:bf:b1:7e:85:ec:88:90:
4c:18:52:b8:25:1c:ae:80:59:57:d9:dd:7b:e9:99:
e3:60:6c:13:e6:10:bd:8b:38:6a:93:1b:52:c0:41:
e1:68:42:04:9f:d7:3d:54:1d:e9:f0:67:23:2b:af:
e2:55:c5:68:ad:0d:69:41:9f:91:08:bb:63:e6:00:
93:7f:e7:9a:3e:87:14:5c:9f:ab:63:d0:98:1a:45:
2f:b1:1d:6c:f7:49:15:2e:06:ef:75:f7:7d:33:df:
0a:1c:41:43:2a:5e:71:43:a0:c6:e5:d4:11:f3:bf:
18:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CA:D0:AF:F7:7F:B6:4D:28:2C:8A:4F:00:F3:2E:17:09:D8:53:E9
X509v3 Authority Key Identifier:
keyid:F1:32:19:22:1C:C0:A2:13:26:CE:00:6C:42:82:5B:AC:2B:E3:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TIZIhzAohMmzgBsQoJbrCvjHhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/hsrQr_d_tk0oLIpPAPMuFwnYU-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/34244d-03c8-4780-87c3-45e696a5ae45/1/8TIZIhzAohMmzgBsQoJbrCvjHhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.99.190.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:10:7d:03:00:67:c8:4d:93:ef:f7:25:e4:63:b8:42:bc:df:
e1:b0:bf:cd:33:47:b3:1a:18:d7:7f:1e:fa:58:c4:c9:f7:50:
22:23:e2:c0:ef:db:64:5d:5f:15:e9:2d:70:8e:1d:03:dc:1e:
d4:43:e7:f4:13:34:f8:03:08:3f:c4:04:1b:f7:9e:73:f1:fa:
14:ab:6b:f7:3d:86:e0:dd:ba:88:19:15:e9:67:e9:15:87:71:
50:47:3c:fe:34:60:17:86:10:83:65:5d:a6:22:1a:7c:66:a1:
56:40:d4:dd:76:a7:ac:3a:9b:07:1d:c6:a3:0d:89:07:e1:02:
58:86:a0:b9:6a:e3:79:53:90:d9:16:02:88:aa:3e:33:5a:84:
d2:89:1b:c9:d0:45:7e:6b:b4:ee:03:2a:fc:a6:0b:5b:36:e7:
8a:c4:73:59:42:d3:9b:ce:c0:99:14:0f:68:8d:4a:61:89:e8:
dd:8c:f5:5b:ed:ea:bd:ef:c9:2b:ae:50:b8:cf:71:cd:16:93:
94:25:7a:ee:a4:18:99:19:df:f5:cf:30:e6:b6:c9:2c:8b:46:
7b:b7:a2:ba:bb:99:48:54:76:d1:d8:52:d3:47:5d:48:87:6f:
c9:6b:1f:b5:36:7d:c8:cc:e4:a8:3a:9c:87:ca:c6:76:c9:12:
37:59:50:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:28:01 2024 by rpki-client on console-ams.rpki-client.org