Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/hplSArfs1ZjM0okASrPUHQABajE.roa
File: hplSArfs1ZjM0okASrPUHQABajE.roa (raw, json)
Hash identifier: vbt0+yjKTry51Wq+v1getZ6VyRYId4DN5B0v8eDszOs=
Subject key identifier: 86:99:52:02:B7:EC:D5:98:CC:D2:89:00:4A:B3:D4:1D:00:01:6A:31
Certificate issuer: /CN=938c88decc88f76aff13bc0858db387834be1711
Certificate serial: 018CC56E2381C25E4B116E3A5DBB14318ABD
Authority key identifier: 93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/hplSArfs1ZjM0okASrPUHQABajE.roa
Signing time: Mon 01 Jan 2024 14:29:38 +0000
ROA not before: Mon 01 Jan 2024 14:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201430
IP address blocks: 185.80.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:23:81:c2:5e:4b:11:6e:3a:5d:bb:14:31:8a:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=938c88decc88f76aff13bc0858db387834be1711
Validity
Not Before: Jan 1 14:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86995202b7ecd598ccd289004ab3d41d00016a31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:66:26:12:d4:0b:66:87:5d:f0:7a:07:51:2f:
a7:60:c5:51:1b:f2:55:ef:40:82:45:d6:5d:81:f5:
ea:14:e8:2c:e5:80:91:d3:da:77:ee:4e:cb:38:34:
5d:df:c2:98:77:e6:69:31:f6:2b:00:cb:7b:a2:12:
e4:94:93:82:c7:78:c6:15:01:d6:e9:f8:e0:8b:e7:
22:c4:b6:fa:52:93:dd:59:2a:fe:a2:69:63:81:c8:
b8:fc:66:53:cd:e9:a6:d6:cd:42:8f:01:17:7c:da:
69:31:b4:bc:23:fd:a5:8b:db:c8:90:1d:9b:a8:73:
f7:ae:93:6f:3a:10:da:da:76:f8:a4:e8:58:1b:55:
ed:01:27:b8:3f:9e:77:ee:d9:b7:48:5c:b4:92:65:
58:0e:e6:e1:ea:af:43:b2:e1:32:b7:c1:59:11:85:
79:8a:e3:05:f0:03:ff:87:0e:68:7e:2f:da:34:8f:
8a:c6:62:59:e0:2b:9c:d3:10:eb:18:e3:90:b3:74:
f8:db:4f:c4:f9:53:19:ee:c6:b4:14:7c:87:3d:78:
ff:73:23:bb:e3:5d:84:31:05:3c:9a:2d:2b:ec:9b:
c2:79:32:94:15:56:4c:27:11:51:df:84:09:26:fb:
e6:84:7a:4b:6f:92:9e:46:da:05:0f:92:39:a8:a7:
e3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:99:52:02:B7:EC:D5:98:CC:D2:89:00:4A:B3:D4:1D:00:01:6A:31
X509v3 Authority Key Identifier:
keyid:93:8C:88:DE:CC:88:F7:6A:FF:13:BC:08:58:DB:38:78:34:BE:17:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k4yI3syI92r_E7wIWNs4eDS-FxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/hplSArfs1ZjM0okASrPUHQABajE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/23226f-7c21-4338-9dca-ff9f503e2dd3/1/k4yI3syI92r_E7wIWNs4eDS-FxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.80.28.0/24
Signature Algorithm: sha256WithRSAEncryption
87:22:10:58:4d:7d:93:3a:33:4a:a3:17:f6:54:e9:32:c7:fa:
1d:5d:8a:be:8e:d9:1c:66:5b:ff:0a:32:b6:28:a1:cf:13:ed:
37:58:d9:ab:8e:f7:1c:81:09:ae:38:5d:54:83:73:ed:c9:f1:
58:f6:b3:0c:51:3f:1e:43:c6:88:f0:f8:24:3f:5e:43:09:87:
c6:37:a3:3c:68:fe:26:64:0c:78:c0:6f:0c:ea:76:0e:4f:18:
b0:dc:0b:c9:66:cc:9c:37:bd:13:cc:4e:43:46:8b:ac:02:b3:
42:39:61:b6:0c:d7:12:f0:8f:04:53:6a:3f:cc:9f:68:9f:0e:
58:2f:96:1e:50:8c:a3:dd:f5:d0:bd:70:bb:84:54:02:5d:74:
3a:d8:4e:db:c0:4a:be:27:ae:84:51:ac:3c:fc:4c:f5:e9:fa:
82:14:84:62:2e:64:18:9b:26:8e:6a:50:e2:f5:ee:e6:2f:f0:
dd:1d:6a:c4:59:97:7e:3a:b9:05:d1:03:f0:f4:f1:25:88:ba:
fd:1b:c5:52:5c:f0:62:ca:53:90:19:05:58:a6:f8:90:2a:24:
92:25:32:90:ad:a8:e4:a6:99:07:40:70:f8:09:00:52:12:f2:
20:d4:e8:f6:ff:87:e9:f5:cf:fb:60:2d:44:29:4f:cd:ee:9e:
fc:85:9f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:45:24 2024 by rpki-client on console-fra.rpki-client.org