Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/HKUNS1ZmSUzVgcBvWTUNtbl8LQk.roa
File: HKUNS1ZmSUzVgcBvWTUNtbl8LQk.roa (raw, json)
Hash identifier: +WF16fvwKzrGpHcqiGmVxA1OW6dBBcacDJHy9jPTdyI=
Subject key identifier: 1C:A5:0D:4B:56:66:49:4C:D5:81:C0:6F:59:35:0D:B5:B9:7C:2D:09
Certificate issuer: /CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Certificate serial: 0192721FAED81BB0BF97A26F208AF581ABDD
Authority key identifier: 8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/HKUNS1ZmSUzVgcBvWTUNtbl8LQk.roa
Signing time: Wed 09 Oct 2024 16:32:11 +0000
ROA not before: Wed 09 Oct 2024 16:32:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 193.134.148.0/24 maxlen: 24
193.134.149.0/24 maxlen: 24
193.134.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Oct 2024 14:44:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:72:1f:ae:d8:1b:b0:bf:97:a2:6f:20:8a:f5:81:ab:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e987039b3f3b2db9b298ae0d8d0eb348969ad62
Validity
Not Before: Oct 9 16:32:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ca50d4b5666494cd581c06f59350db5b97c2d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0b:15:e2:41:79:0f:53:6c:fd:d5:27:c1:0c:
82:15:74:d9:3e:13:29:d3:00:c7:29:1b:d6:21:32:
cd:9d:d0:56:8a:04:3b:e8:c0:97:24:81:93:97:d8:
a6:2d:64:09:b0:e9:6f:e0:9b:26:00:79:ff:0b:36:
3a:f1:28:66:38:68:b8:f5:a6:aa:d0:bd:c8:35:92:
17:73:1c:6e:c7:01:3e:4d:f4:e1:e0:40:75:9d:30:
13:a2:84:16:fb:cf:14:79:1a:b7:de:7d:45:ba:0d:
7e:62:4b:a9:24:95:16:29:a1:11:82:aa:06:2c:d9:
f8:7b:16:63:d3:3c:54:80:cd:97:87:f7:33:51:45:
f7:24:ae:40:84:3e:db:a7:ee:ba:cb:08:93:3a:5d:
51:41:7d:99:ba:69:2a:90:9f:aa:b0:32:56:1e:42:
cd:5e:53:8a:83:3d:7f:71:86:0a:5f:3f:3e:18:37:
30:7a:8e:9f:6a:20:25:6c:c3:7b:6f:c3:cd:2e:b6:
2b:69:fb:2f:c2:34:82:bd:61:57:84:4f:6f:60:ce:
36:b6:54:aa:fe:4d:eb:4e:b3:c0:30:8d:37:96:7e:
35:00:de:ed:8e:bc:de:4d:ed:2c:71:1b:f5:87:c0:
1a:3c:91:b7:ac:6d:fb:bc:ad:dd:89:39:7c:98:46:
8c:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A5:0D:4B:56:66:49:4C:D5:81:C0:6F:59:35:0D:B5:B9:7C:2D:09
X509v3 Authority Key Identifier:
keyid:8E:98:70:39:B3:F3:B2:DB:9B:29:8A:E0:D8:D0:EB:34:89:69:AD:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jphwObPzstubKYrg2NDrNIlprWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/HKUNS1ZmSUzVgcBvWTUNtbl8LQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/366560-096e-4835-89fd-563600319a1f/1/jphwObPzstubKYrg2NDrNIlprWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.148.0-193.134.150.255
Signature Algorithm: sha256WithRSAEncryption
d5:95:c3:4b:8e:fa:42:fa:cc:22:b1:d8:95:18:12:59:fa:c1:
3a:0a:26:55:6d:c3:5d:11:60:f6:24:50:73:b9:bd:33:d7:0e:
1a:78:09:3c:16:8b:a1:31:45:0f:46:b8:33:7a:85:95:e7:7c:
f9:7b:1b:40:53:bc:33:3b:21:42:00:51:5d:57:e0:8e:1b:f0:
3d:b9:69:40:d2:79:d9:e5:3c:e9:19:30:f3:47:08:72:2b:d4:
64:a5:8e:ed:69:f7:ea:05:78:00:88:40:01:17:d0:27:63:a0:
0b:bc:11:1a:16:51:98:fa:dd:98:62:31:22:ea:fa:a6:74:34:
80:c3:b0:e9:19:2a:a7:39:17:e8:af:22:3d:49:4c:27:32:03:
e3:f9:5c:0b:12:7a:43:fc:dc:79:e1:c3:f3:1d:b0:be:8e:50:
f1:84:4a:14:3b:26:49:82:61:c4:4c:23:a9:d7:ed:6e:70:50:
73:19:98:88:fe:3c:3c:a9:15:b3:24:b7:aa:98:6c:51:df:76:
77:42:a1:96:4e:9c:ba:fa:1b:80:4e:09:ba:fb:4f:f9:3f:d5:
e7:76:73:d1:05:89:b0:96:ad:22:f2:bb:d9:4c:e7:2c:e6:64:
c2:14:45:be:8e:f9:db:d2:9f:12:60:7f:7e:66:78:8b:ec:8a:
fd:fa:d6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 21:31:37 2024 by rpki-client on console-fra.rpki-client.org