Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/HZs3Hy9CKdMJPRCO45jpHRBmBHQ.roa
File: HZs3Hy9CKdMJPRCO45jpHRBmBHQ.roa (raw, json)
Hash identifier: kho0ZRYjcqc11t0A8WY7hOzBjP7A82F19CyZ4L3uDuk=
Subject key identifier: 1D:9B:37:1F:2F:42:29:D3:09:3D:10:8E:E3:98:E9:1D:10:66:04:74
Certificate issuer: /CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Certificate serial: 018CC727525265B1B35B9DBAA5410FA96097
Authority key identifier: 54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/HZs3Hy9CKdMJPRCO45jpHRBmBHQ.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60721
IP address blocks: 213.238.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 17:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:52:52:65:b1:b3:5b:9d:ba:a5:41:0f:a9:60:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54cbda78b1d1b613df565ff99700b6aee940de3f
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d9b371f2f4229d3093d108ee398e91d10660474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:91:ad:2c:a5:64:5c:82:47:69:1b:0d:5b:ab:
9d:17:78:cb:fa:32:9d:1c:de:dc:01:6e:2e:da:bb:
f5:9a:66:0a:f4:7c:f5:fc:bc:76:50:57:93:7a:27:
6f:72:0a:08:6d:b6:ec:6c:55:80:3d:e1:e8:18:65:
79:47:a8:f3:db:ed:6f:ee:4e:7b:76:50:f9:a2:fc:
44:2f:c8:1b:17:ba:26:4c:68:56:6a:90:f5:63:e8:
46:85:9a:2e:2f:05:42:1a:ae:56:76:18:79:23:2a:
04:a2:35:d1:f5:12:19:98:bb:68:5f:bd:78:76:c6:
6f:75:73:49:2b:68:9b:a3:87:28:78:0c:36:cb:c4:
ef:62:be:3b:2a:2d:47:27:ed:e3:c6:5d:ac:38:fe:
24:45:14:02:55:80:13:ae:72:84:2b:a1:eb:e2:3b:
91:88:dc:3d:ef:03:50:54:3f:cc:7c:e0:e9:78:c1:
57:ca:52:33:aa:9b:ce:7d:0f:85:1f:2a:95:2b:64:
fb:12:a9:e3:e4:8d:29:cb:ae:d3:73:0e:1b:a2:16:
d7:16:04:82:f1:7c:6b:f6:8b:45:c0:60:ca:d3:41:
95:df:db:6d:17:5b:18:d5:22:c9:8f:0b:ae:4a:0c:
a0:bf:21:00:f6:9c:59:57:d5:fc:a5:83:5d:9f:5a:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9B:37:1F:2F:42:29:D3:09:3D:10:8E:E3:98:E9:1D:10:66:04:74
X509v3 Authority Key Identifier:
keyid:54:CB:DA:78:B1:D1:B6:13:DF:56:5F:F9:97:00:B6:AE:E9:40:DE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VMvaeLHRthPfVl_5lwC2rulA3j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/HZs3Hy9CKdMJPRCO45jpHRBmBHQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6d61d9-0bf7-44bb-b80f-cd31615d01a9/1/VMvaeLHRthPfVl_5lwC2rulA3j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.238.166.0/24
Signature Algorithm: sha256WithRSAEncryption
95:04:b0:de:3d:b5:0f:f5:33:6e:68:54:c2:ef:e8:6c:24:5f:
b7:ae:be:19:1e:98:82:ce:e4:bf:15:f2:04:89:1d:69:0d:dd:
10:d0:ac:74:82:67:64:f3:45:5f:bc:78:69:ca:75:b6:cd:c3:
0a:9e:49:e1:98:99:ba:96:c3:d7:9e:80:4c:c0:b6:2d:74:a3:
69:fd:ae:58:08:42:bd:17:af:a4:72:52:94:db:61:9f:ce:0a:
c7:cf:a9:aa:6a:9b:89:5a:87:4c:94:4f:d6:8c:28:26:74:88:
b3:f2:ae:db:0c:80:a3:22:89:82:7e:ac:f8:d6:c6:e5:6f:a1:
60:c8:1f:de:6c:64:38:c7:92:e3:98:49:fc:e1:e4:b3:34:74:
37:5b:14:b3:25:de:77:45:e8:10:81:5a:56:ce:bf:7d:ed:d0:
1b:a0:80:e2:3c:67:8d:7c:6c:c4:26:a3:3e:42:57:db:f8:1f:
6a:e2:93:51:02:cd:cf:ec:1b:c2:ad:04:e4:96:f4:b8:b3:23:
54:36:60:13:8e:47:4a:dd:c3:72:b7:7e:b2:8e:8d:ba:2b:ed:
79:08:1f:57:86:a9:39:33:15:09:c5:d3:e0:af:47:c7:fd:c8:
39:5c:58:8b:42:03:d8:11:f4:17:7f:f7:49:80:2e:fa:5e:33:
f7:f6:c5:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 01:18:16 2024 by rpki-client on console-ams.rpki-client.org