Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/hmC13hUzXkVq8EunKRHIomdNkck.roa
File: hmC13hUzXkVq8EunKRHIomdNkck.roa (raw, json)
Hash identifier: NBnb7FJtDDW11gAMdbF3Y2bbawQ25R0U+dmUuPJ2IPU=
Subject key identifier: 86:60:B5:DE:15:33:5E:45:6A:F0:4B:A7:29:11:C8:A2:67:4D:91:C9
Certificate issuer: /CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Certificate serial: 018CCA994DD4239A7A7154F10F72DD03311C
Authority key identifier: 62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/hmC13hUzXkVq8EunKRHIomdNkck.roa
Signing time: Tue 02 Jan 2024 14:34:53 +0000
ROA not before: Tue 02 Jan 2024 14:34:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139853
IP address blocks: 91.222.135.0/24 maxlen: 24
91.222.134.0/24 maxlen: 24
91.222.133.0/24 maxlen: 24
149.20.127.0/24 maxlen: 24
149.20.126.0/24 maxlen: 24
91.204.80.0/24 maxlen: 24
91.222.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:4d:d4:23:9a:7a:71:54:f1:0f:72:dd:03:31:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=622ecc6cc5903aea0db61200f4ccd4f824cdd54f
Validity
Not Before: Jan 2 14:34:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8660b5de15335e456af04ba72911c8a2674d91c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4f:cb:f9:2c:b5:27:87:37:60:d8:de:b2:04:
ba:85:a1:a4:87:98:77:74:91:d1:22:f9:b4:09:59:
f0:e2:c6:d7:0b:ab:de:72:9d:1c:3c:f7:7b:9b:55:
1e:41:c6:21:f3:35:11:02:37:f1:a0:d7:f3:f5:8a:
c3:f4:84:aa:40:db:f7:b3:2c:f6:e7:5b:71:72:d8:
f3:93:36:ad:7e:f9:53:88:a1:e0:3d:8c:b6:af:f6:
81:ba:bc:9d:ed:d4:7e:33:86:f9:dc:24:da:13:41:
23:a6:fe:b7:24:75:1e:b9:b5:a3:c3:e4:a0:aa:0b:
0a:21:ca:e8:73:99:51:b5:2d:99:a1:58:6d:d3:48:
ac:84:f4:44:01:21:37:c1:13:6e:c8:6e:7f:a6:95:
f1:e7:54:a4:2a:80:16:0b:e6:73:06:e5:e0:b3:58:
a4:25:36:90:62:33:5d:fd:c7:07:69:0a:3e:dc:38:
d9:b4:bf:37:6e:4b:9b:5d:57:7b:22:e1:33:a2:a2:
33:61:a5:c0:7e:2e:75:e6:49:0e:d2:dc:19:23:b2:
29:b6:c2:8e:fb:8f:90:41:53:fb:0e:fc:0f:b3:70:
1e:ae:7f:cf:bc:37:b4:cd:84:9e:20:ff:48:5d:ed:
68:87:03:16:7f:07:30:72:c0:76:2a:8c:8f:5e:50:
e2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:60:B5:DE:15:33:5E:45:6A:F0:4B:A7:29:11:C8:A2:67:4D:91:C9
X509v3 Authority Key Identifier:
keyid:62:2E:CC:6C:C5:90:3A:EA:0D:B6:12:00:F4:CC:D4:F8:24:CD:D5:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yi7MbMWQOuoNthIA9MzU-CTN1U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/hmC13hUzXkVq8EunKRHIomdNkck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/262a4b-c701-48dc-9ae5-346368827e68/1/Yi7MbMWQOuoNthIA9MzU-CTN1U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.80.0/24
91.222.132.0/22
149.20.126.0/23
Signature Algorithm: sha256WithRSAEncryption
11:f0:d2:83:f1:61:3f:0b:7e:d2:3b:ac:13:af:c1:9d:a4:d1:
8e:ab:09:21:82:fe:74:3a:75:90:67:76:59:f1:9d:83:e4:6b:
69:56:ce:01:a5:dd:d4:6d:d7:41:58:2b:d9:0c:37:d7:37:d7:
98:6d:a4:e1:df:f6:ea:68:fd:da:c2:1b:a1:4f:90:d3:8c:ae:
10:83:9e:d7:f8:66:41:c0:19:4c:07:47:d8:cb:62:cd:28:20:
a2:39:d8:bb:72:50:28:d9:3d:3f:c4:1f:38:d1:86:22:67:6e:
b5:6e:91:9f:97:cc:cc:d4:68:5b:f3:b3:43:63:56:95:ad:24:
5a:8e:aa:bf:7f:98:40:d9:f0:2b:f7:a4:84:ab:43:ae:e6:f9:
4e:4b:21:54:ab:80:e5:d0:b3:2a:2c:01:de:bb:9e:9c:c3:15:
3d:9c:38:43:46:c5:e3:eb:f4:63:84:39:e1:50:a5:66:d5:6e:
c7:fb:eb:8c:39:d6:7d:31:47:14:ac:f1:9d:ec:68:77:96:19:
4c:91:9d:e9:30:cd:20:e9:d0:c1:7f:49:81:ae:88:1a:f8:54:
09:ae:23:c9:1b:8c:ee:07:32:fe:77:d4:a8:97:79:b6:54:45:
01:1e:3e:01:e9:ae:45:45:94:0c:ef:bf:c5:7d:77:31:09:bf:
0b:3f:a5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:01:04 2024 by rpki-client on console-ams.rpki-client.org