Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/AHBHOHN6ts_DcPkKBOXitCmW3MU.roa
File: AHBHOHN6ts_DcPkKBOXitCmW3MU.roa (raw, json)
Hash identifier: bqLyK/Sk7M+ZOfSeenv51Ma/RsGhCq0CpUI5U21KUSs=
Subject key identifier: 00:70:47:38:73:7A:B6:CF:C3:70:F9:0A:04:E5:E2:B4:29:96:DC:C5
Certificate issuer: /CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Certificate serial: 018CC80185A10C23787D4977F2E5A37A1A38
Authority key identifier: A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/AHBHOHN6ts_DcPkKBOXitCmW3MU.roa
Signing time: Tue 02 Jan 2024 02:29:52 +0000
ROA not before: Tue 02 Jan 2024 02:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42105
IP address blocks: 217.9.8.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:85:a1:0c:23:78:7d:49:77:f2:e5:a3:7a:1a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7ee182d9c43a5ce7068dfd9ba7aa8ed90e5e0ba
Validity
Not Before: Jan 2 02:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=00704738737ab6cfc370f90a04e5e2b42996dcc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:44:8d:69:a3:89:f4:f0:96:d2:4b:bb:d7:44:
0f:8a:ec:ce:54:4d:fa:08:69:48:36:86:dd:9f:29:
cc:35:eb:da:33:45:40:54:2f:04:f5:cd:5a:02:ad:
74:92:01:4e:32:9d:5d:6c:17:fb:a3:3c:0d:80:16:
34:f7:f9:c8:2c:6b:0b:c8:51:d1:db:cf:cc:e6:da:
65:ad:95:50:b3:7b:f5:47:a5:d3:c9:2c:ef:84:e7:
60:ed:d6:5a:67:eb:17:af:b3:42:64:c1:d8:54:10:
53:45:a8:19:99:43:1d:b8:f6:98:28:cb:18:41:bb:
d4:42:b8:ec:ca:0c:ce:b1:e8:9e:78:4f:d5:02:c6:
82:4f:35:77:a8:a6:0d:44:d4:55:ba:1d:ee:5d:3b:
a4:69:e6:52:8b:f8:9f:14:f5:8a:7d:b9:42:42:51:
18:d9:1b:df:e9:8f:e6:6f:bb:46:51:29:8a:0d:02:
c6:3e:d5:d0:59:3c:34:71:69:85:2f:f8:3f:70:fa:
9a:8a:6e:37:8d:68:fc:d1:bf:6d:e6:ce:fb:ef:ad:
08:08:d5:b8:03:60:b7:b6:63:7e:a7:2e:64:7a:0f:
a8:8a:03:6a:24:85:ad:97:a9:27:ca:6a:6f:01:b0:
61:f0:b8:a6:d7:6f:ce:79:12:1b:d7:ee:41:0a:eb:
8b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:70:47:38:73:7A:B6:CF:C3:70:F9:0A:04:E5:E2:B4:29:96:DC:C5
X509v3 Authority Key Identifier:
keyid:A7:EE:18:2D:9C:43:A5:CE:70:68:DF:D9:BA:7A:A8:ED:90:E5:E0:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/AHBHOHN6ts_DcPkKBOXitCmW3MU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/dab420-0de3-4321-9c09-6b5f68522a7d/1/p-4YLZxDpc5waN_Zunqo7ZDl4Lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.9.8.0/24
Signature Algorithm: sha256WithRSAEncryption
69:ab:c6:36:0e:b8:10:b8:86:7a:2f:b4:05:b0:16:b9:2b:c0:
e6:a4:6b:6b:f7:f3:7c:4e:3b:1d:08:cf:02:e0:ec:4d:4b:42:
8d:b6:9e:dd:69:bb:c4:dd:c4:4e:cd:39:14:87:a2:2d:35:ef:
d8:f5:33:7b:e0:2a:f9:ba:57:47:42:78:8f:31:8f:46:3f:aa:
f4:cd:69:5b:7e:a4:83:1d:0c:b0:6f:ae:57:8b:67:09:bb:c3:
56:4b:0f:f6:a8:e3:16:24:97:e9:4d:2f:5c:2f:ce:f7:06:bd:
4e:dd:98:9d:28:30:aa:d2:c6:46:4e:ed:9d:5f:de:f7:b9:84:
ce:89:f0:cc:83:fd:06:62:2e:7f:8e:0f:ab:52:6e:db:ca:9a:
9a:59:7d:1f:f5:dc:17:f8:6c:3f:e5:2f:b2:6e:73:87:f4:4e:
4d:69:1e:00:de:8b:c6:76:17:df:9f:90:c5:ef:53:7b:cd:50:
a3:f8:07:ba:59:e5:ce:ab:94:99:a3:7f:28:87:06:57:d0:8b:
36:48:12:1a:f9:96:de:52:cb:3b:0b:9f:c8:f1:ed:03:2a:e9:
ad:04:e0:c6:5c:da:57:3d:cb:9d:b2:87:44:88:12:04:63:bb:
45:38:0c:81:6c:11:b9:3d:bf:4f:13:4b:0f:6d:53:cf:2c:3d:
93:f1:c1:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:53:11 2024 by rpki-client on console-fra.rpki-client.org