Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/HkTGLoevfP9PICaEDJJqeGBJxus.roa
File: HkTGLoevfP9PICaEDJJqeGBJxus.roa (raw, json)
Hash identifier: wMNQVOF/4pgZ0mYhIVRe116E3LhVQZjCuQjLiRz3Af4=
Subject key identifier: 1E:44:C6:2E:87:AF:7C:FF:4F:20:26:84:0C:92:6A:78:60:49:C6:EB
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CC8DE166A137D5EAC89E832D3239B6BEB
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/HkTGLoevfP9PICaEDJJqeGBJxus.roa
Signing time: Tue 02 Jan 2024 06:30:47 +0000
ROA not before: Tue 02 Jan 2024 06:30:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 140641
IP address blocks: 193.239.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 11:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:16:6a:13:7d:5e:ac:89:e8:32:d3:23:9b:6b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 2 06:30:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e44c62e87af7cff4f2026840c926a786049c6eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0a:f1:ef:4b:30:b9:6a:d8:c9:88:7b:b6:ef:
a0:ae:a0:25:0e:eb:4b:34:98:3e:91:aa:a1:47:94:
df:9e:8c:ec:c5:dc:93:4e:1e:c1:69:77:10:d4:05:
3d:b4:e9:03:21:7a:33:aa:61:fb:88:94:20:bf:9b:
0b:c7:c6:32:77:bd:b1:a6:a4:49:4e:3e:cc:42:a2:
e6:8c:21:cb:1d:68:a6:f7:33:e5:76:72:25:b2:60:
20:07:19:83:23:8b:20:b2:00:a0:be:cb:f7:7c:fe:
67:26:7e:e9:71:04:37:c4:22:ee:f1:67:e4:89:50:
f5:1d:f9:45:84:37:56:2b:cd:bd:24:85:1c:30:9a:
51:b8:46:4f:ab:03:61:9e:21:b3:cf:d6:44:cc:8a:
fe:62:17:a4:8c:9e:27:e2:b7:fd:6b:8e:ea:ab:42:
ca:57:25:d2:93:df:88:6c:9c:bc:47:5f:fc:4b:f1:
fa:01:db:60:1f:b1:cf:10:bb:d4:47:2d:f6:31:4a:
ef:bf:6b:ef:50:a3:cd:21:1a:50:fa:53:76:6a:84:
0a:fd:65:80:38:60:3e:f3:48:da:a8:82:37:df:79:
8c:f7:35:db:af:67:55:db:67:43:47:35:a7:02:33:
e4:d9:07:99:65:e5:75:27:57:f1:6f:31:6b:01:7f:
90:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:44:C6:2E:87:AF:7C:FF:4F:20:26:84:0C:92:6A:78:60:49:C6:EB
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/HkTGLoevfP9PICaEDJJqeGBJxus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.239.237.0/24
Signature Algorithm: sha256WithRSAEncryption
61:0a:54:9a:3d:a6:db:af:57:5d:74:7d:7f:43:00:fe:f5:64:
4a:7b:31:09:aa:a9:f4:5d:56:50:37:f3:ba:37:83:90:1f:ab:
87:0a:2e:30:b7:65:40:e3:03:27:95:6e:41:bd:81:a8:04:c6:
d8:db:a6:8c:c6:9c:fe:22:4b:c7:5b:7f:ba:65:47:ec:bd:97:
1f:5c:28:bc:c8:0a:50:1c:86:d0:83:b7:6f:a0:bf:da:a8:6a:
ed:82:07:7f:a8:c7:a6:49:52:03:65:bb:a1:30:9a:c2:bc:b3:
ca:b7:bf:00:01:ba:e9:fb:7c:30:67:6e:af:d3:86:08:67:89:
b2:5a:af:70:c7:65:3e:40:9c:e7:60:a3:88:d9:93:9f:c1:91:
f0:52:8c:40:a2:bf:59:ec:40:bf:35:31:22:5f:8c:f0:a6:f9:
c1:f5:fe:24:80:8f:d8:3a:1f:be:9b:26:a6:07:4b:03:80:0d:
b4:f5:70:fe:ea:40:6d:81:25:e6:73:be:f8:0a:77:01:50:a5:
31:b9:96:87:60:20:10:30:0f:a1:9d:46:d3:2c:cb:53:d5:15:
e7:36:77:0c:98:44:22:03:d3:17:11:0b:33:a0:e4:d3:a5:b6:
52:60:6f:bd:ad:33:86:29:ce:0d:25:50:6b:55:cb:7a:bc:31:
ea:f5:f3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:50:51 2024 by rpki-client on console-ams.rpki-client.org