Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/HQ2u0KJvbCo9X6W95URRu8GkMZw.roa
File: HQ2u0KJvbCo9X6W95URRu8GkMZw.roa (raw, json)
Hash identifier: b2z+fSmWwyMqMFLnJaAZCYXtYNFTx/fmAAHgPmRoF2s=
Subject key identifier: 1D:0D:AE:D0:A2:6F:6C:2A:3D:5F:A5:BD:E5:44:51:BB:C1:A4:31:9C
Certificate issuer: /CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Certificate serial: 018CC8DD94D097B0E652F19399F99E938ECD
Authority key identifier: C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/HQ2u0KJvbCo9X6W95URRu8GkMZw.roa
Signing time: Tue 02 Jan 2024 06:30:13 +0000
ROA not before: Tue 02 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57935
IP address blocks: 185.104.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dd:94:d0:97:b0:e6:52:f1:93:99:f9:9e:93:8e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c59bd1e8c58f641bd944305f11c54efe5f3a0ce2
Validity
Not Before: Jan 2 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d0daed0a26f6c2a3d5fa5bde54451bbc1a4319c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:e2:37:97:68:78:87:9e:ee:2c:85:4f:33:80:
a2:50:a2:73:38:d8:28:c5:1c:8e:a9:da:e1:19:cd:
9d:9b:a4:de:cc:0e:31:95:36:98:a8:4b:e9:87:76:
f9:7f:3c:2b:57:54:49:05:9f:a0:1a:82:fa:4d:87:
0a:1e:6b:04:ca:b6:40:a6:8e:5d:a2:f8:bd:af:5d:
06:33:a2:db:9a:8c:d6:ed:c3:a2:31:1b:b9:1e:70:
48:f3:9a:5f:58:79:65:c4:91:4f:1b:90:f6:72:d0:
d3:f1:7a:04:28:32:ac:4a:0d:51:12:56:72:2d:38:
27:79:8f:50:32:fb:5e:88:77:94:72:bd:3e:58:13:
9c:24:b7:29:0d:93:b1:e3:29:02:7b:79:88:40:90:
a1:36:59:64:79:af:0c:05:0f:bc:d7:c4:80:f1:08:
69:9b:c4:ba:a2:7d:42:9a:07:7e:4a:1c:38:53:c4:
27:3e:b2:68:fb:a6:2f:ab:a0:81:58:a3:6c:57:44:
04:16:97:28:a4:f5:5f:60:e6:9e:56:8d:e5:a7:0d:
60:fc:60:36:f0:4b:e9:0c:a5:5f:c9:ec:c8:c1:ab:
87:d0:57:bd:b3:9b:18:8d:e7:ea:42:65:8b:e6:1d:
0b:99:ae:56:fe:54:ba:2e:e5:8d:d8:93:34:63:a9:
eb:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0D:AE:D0:A2:6F:6C:2A:3D:5F:A5:BD:E5:44:51:BB:C1:A4:31:9C
X509v3 Authority Key Identifier:
keyid:C5:9B:D1:E8:C5:8F:64:1B:D9:44:30:5F:11:C5:4E:FE:5F:3A:0C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZvR6MWPZBvZRDBfEcVO_l86DOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/HQ2u0KJvbCo9X6W95URRu8GkMZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fd8457-810f-4f7e-9e58-56cc39db6ed6/1/xZvR6MWPZBvZRDBfEcVO_l86DOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.104.189.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:04:da:6a:25:6b:5d:0b:13:80:82:35:f1:80:e0:91:57:13:
95:c1:47:28:74:96:b0:35:a0:af:95:99:59:45:9a:0e:b7:d1:
cc:e8:3c:40:77:99:49:02:55:e0:e1:aa:d6:93:04:7a:45:af:
32:d3:c7:86:e9:cb:05:55:05:c2:d0:bc:08:6b:88:13:d9:4c:
df:28:36:d0:6e:2d:da:16:c7:5a:77:f0:c4:b1:c6:06:25:f5:
59:f1:69:f3:f3:29:7a:c1:34:43:71:3b:b4:5f:3f:50:28:31:
67:37:2b:7c:c4:19:3d:fb:71:c3:69:fa:12:32:e5:c6:59:4e:
16:15:8f:71:0c:d0:1e:18:a2:ae:35:55:d6:2b:b4:6e:1f:7e:
48:ed:85:49:ee:6f:c6:04:2b:67:e5:83:18:18:72:36:9c:09:
69:a5:06:4e:4b:b7:e5:f0:35:13:e7:a6:4e:28:79:e0:af:21:
be:4d:ef:33:e7:03:75:86:bc:c6:76:6b:ae:ac:ee:80:03:51:
ba:dc:56:4d:f0:e1:28:0a:b2:73:04:05:3c:7d:fb:e7:8a:bc:
1e:89:08:ac:5d:c1:54:03:d7:f9:48:59:b9:e2:45:20:cb:3d:
35:58:3e:07:bf:95:2c:a8:4e:b3:15:0c:eb:55:15:46:42:05:
e7:c6:a8:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:03:38 2024 by rpki-client on console-ams.rpki-client.org