Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/HF2XbYjJvu69VXIR3q4532IaQZU.roa
File: HF2XbYjJvu69VXIR3q4532IaQZU.roa (raw, json)
Hash identifier: +2prh5szipP2kwDbAJeERLwDz+H2V6Ak1+qQUXS1dhM=
Subject key identifier: 1C:5D:97:6D:88:C9:BE:EE:BD:55:72:11:DE:AE:39:DF:62:1A:41:95
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 018CC94DFF01423EDF9402DBF125A950A246
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/HF2XbYjJvu69VXIR3q4532IaQZU.roa
Signing time: Tue 02 Jan 2024 08:33:01 +0000
ROA not before: Tue 02 Jan 2024 08:33:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35161
IP address blocks: 89.47.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:ff:01:42:3e:df:94:02:db:f1:25:a9:50:a2:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 2 08:33:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c5d976d88c9beeebd557211deae39df621a4195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:26:8b:d3:60:db:24:e4:24:dc:59:0d:de:43:
c3:17:fd:9f:fc:f1:18:67:a0:e4:82:61:48:e8:4e:
b6:dc:96:9f:6e:38:0f:01:6f:d3:bb:65:ce:c1:04:
ee:36:fb:f5:ff:80:28:7c:db:f1:e5:ae:01:0a:37:
05:ac:cc:7e:ef:6b:1b:18:6f:33:71:56:4f:b7:fe:
50:0b:f8:b0:1d:57:15:c0:34:b1:db:1f:75:68:b2:
5a:b4:86:13:a6:c1:25:0a:54:a4:d9:db:f8:51:86:
01:89:ae:be:64:5b:c8:a3:de:ab:bf:62:2b:a0:a7:
99:92:73:3d:bf:73:e3:7e:a6:d0:7c:b2:44:3a:57:
f3:5a:9f:0c:c4:02:ee:a5:e1:f6:6e:87:49:26:d2:
37:cf:31:3c:be:99:5e:56:41:c8:25:a8:e9:87:f0:
9c:72:b0:e9:91:f1:ae:b1:84:ba:c2:f6:43:ff:21:
bd:9b:6d:c0:7b:63:18:1f:f4:9b:f3:0d:35:b5:bb:
d0:57:d9:4e:74:b8:83:92:ae:2b:78:d3:e7:eb:14:
17:63:14:77:24:60:69:67:d0:03:3d:1e:08:ec:13:
76:25:04:32:e0:99:06:4d:92:95:fb:75:02:8f:89:
eb:f1:6a:57:dc:8b:d3:4f:ba:78:3e:f1:37:bd:0f:
4f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5D:97:6D:88:C9:BE:EE:BD:55:72:11:DE:AE:39:DF:62:1A:41:95
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/HF2XbYjJvu69VXIR3q4532IaQZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.47.54.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:47:57:64:a8:6b:d6:fe:8a:5f:56:49:c6:80:77:8a:ad:e2:
a0:a1:15:2a:32:7b:fc:10:9b:c5:25:4b:d0:88:49:cf:07:92:
51:f4:1f:7b:3d:28:c3:cd:f8:bc:93:ff:47:72:71:6f:16:d5:
49:93:52:3e:48:c8:b0:8b:ee:f5:9e:90:61:7f:89:69:da:c9:
0e:aa:ad:ed:73:92:77:7d:97:a6:7b:2e:5d:16:99:47:6a:3f:
8d:68:fc:a9:91:7d:96:38:1b:0f:07:21:4e:4e:9e:10:77:c3:
74:14:a4:44:bc:bd:6f:f9:40:12:41:3c:2f:27:89:ba:10:ba:
f8:2c:79:40:a9:0d:c9:57:8c:d7:a0:78:4d:f4:ec:bd:ec:d8:
e6:70:d9:66:6b:6f:a8:34:c5:04:10:35:ab:05:33:23:62:e9:
4d:3f:bd:77:b5:e5:da:44:92:9b:0a:19:48:80:f4:05:84:21:
2b:3e:77:58:11:cb:99:81:c4:55:aa:67:ef:a1:f6:c1:69:b0:
5f:83:d8:1a:9c:f4:dd:f4:5e:16:c3:34:b4:e0:c1:cb:30:56:
0e:bb:d6:44:ab:8e:61:54:e6:f9:ef:1a:88:f5:af:38:5e:9c:
9b:81:82:29:cc:d6:7f:73:04:04:aa:5e:89:d4:49:1f:dd:24:
22:84:5f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:14:34 2024 by rpki-client on console-ams.rpki-client.org