Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hQIWT_A6MhzTGpydLTY4eEsK7d8.roa
File: hQIWT_A6MhzTGpydLTY4eEsK7d8.roa (raw, json)
Hash identifier: swcx5MaZIEOhQIDBXQgUvNHiBAJDSKaOgJ/JfV5DLHQ=
Subject key identifier: 85:02:16:4F:F0:3A:32:1C:D3:1A:9C:9D:2D:36:38:78:4B:0A:ED:DF
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018CC7275CE39A57AFA711A9DA2BF851AC2D
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hQIWT_A6MhzTGpydLTY4eEsK7d8.roa
Signing time: Mon 01 Jan 2024 22:31:34 +0000
ROA not before: Mon 01 Jan 2024 22:31:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400039
IP address blocks: 188.93.137.0/24 maxlen: 24
146.19.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:5c:e3:9a:57:af:a7:11:a9:da:2b:f8:51:ac:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 22:31:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8502164ff03a321cd31a9c9d2d3638784b0aeddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:1c:bb:1b:d6:8e:ea:ea:a1:0a:ee:e8:e7:c0:
45:ea:60:d9:11:3b:77:91:6a:d7:c8:d6:06:60:16:
1d:4a:f2:bd:a4:f6:8b:de:85:65:06:79:1a:2e:4f:
70:2f:64:52:b4:83:89:b6:71:c8:0d:a5:5d:86:5a:
44:cd:8e:7e:ca:a2:6f:73:f5:fa:d8:31:7f:b4:bf:
38:73:59:eb:f8:a4:28:24:31:6c:1b:bc:7a:76:55:
cb:96:9f:df:1d:52:9c:5f:78:95:03:12:2d:40:c2:
4c:07:bb:98:30:72:d1:ca:4e:4b:34:9c:1d:b3:85:
2e:10:22:b7:20:66:65:fa:c8:8f:89:1f:1d:a9:25:
8f:4a:b9:e7:88:7c:2e:4f:2f:cd:fc:5e:14:1c:70:
e9:a1:09:e8:7b:22:b9:55:69:9c:04:73:cb:f6:d4:
15:6f:52:2e:07:b6:67:9f:3f:da:0b:ac:ee:96:c8:
20:f2:01:ab:9e:ae:f0:38:0f:52:fc:c6:ea:23:f5:
ad:63:ae:66:73:fc:4f:0b:57:13:42:9a:d5:e7:78:
44:dc:c1:2b:75:a8:62:7b:ae:56:cb:58:3d:16:99:
9b:11:a1:73:62:b7:8d:f2:5a:ae:ca:14:ce:e9:86:
37:46:d9:f1:06:87:45:8b:6f:18:a4:c6:d1:dc:4d:
6d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:02:16:4F:F0:3A:32:1C:D3:1A:9C:9D:2D:36:38:78:4B:0A:ED:DF
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hQIWT_A6MhzTGpydLTY4eEsK7d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.237.0/24
188.93.137.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:31:aa:bf:5a:d8:6a:55:b1:98:6d:77:a5:54:19:2d:2e:a2:
a1:89:3c:1b:4c:55:c9:4c:d0:1e:97:1b:bb:41:be:2e:8d:39:
a6:6a:a5:0c:ab:bc:dc:c7:67:27:f4:c6:1a:6a:71:86:b7:97:
c0:42:bf:e6:3a:28:73:2e:9a:61:d0:e2:c3:5a:31:08:63:3f:
8f:22:86:a0:9a:67:63:2c:0e:3b:12:70:f2:19:20:69:89:64:
2c:f0:47:cb:5a:6d:db:28:43:c8:38:cc:c2:f5:19:97:1c:84:
49:a9:14:f6:54:24:8f:e1:45:fa:e7:f2:e1:84:e4:09:3d:80:
e2:d3:14:c5:4e:16:66:b3:e4:6a:3e:0c:46:b5:63:9c:7a:79:
11:5a:87:cf:fa:18:e1:d7:d7:c7:ce:f1:26:1c:8d:3f:ca:14:
47:44:2b:e6:4d:99:a7:70:9d:c1:ff:7f:fb:63:5a:f4:86:c2:
bf:34:8b:2d:b5:53:98:1b:6b:d5:fb:24:86:9b:73:9c:22:61:
8c:26:98:89:65:40:36:7d:a4:21:de:26:c6:ff:82:12:3f:c4:
1a:33:b0:69:2e:22:9e:8a:48:14:c7:5f:70:f5:ba:ae:b4:6e:
3c:02:94:c9:54:45:d6:99:2c:dc:71:48:dc:c1:32:fa:71:c9:
60:14:cd:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:11:11 2024 by rpki-client on console-fra.rpki-client.org