Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/HkmTF1ss9mAZwPBwnvKWvkbnH5M.roa
File: HkmTF1ss9mAZwPBwnvKWvkbnH5M.roa (raw, json)
Hash identifier: RF4kUBz6ZBQvjHpsL4DdoxQW6HCtHRSzEJ5wR91/07U=
Subject key identifier: 1E:49:93:17:5B:2C:F6:60:19:C0:F0:70:9E:F2:96:BE:46:E7:1F:93
Certificate issuer: /CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Certificate serial: 018CC64ADA28AE3062629EFE4E45DB3E5000
Authority key identifier: 89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/HkmTF1ss9mAZwPBwnvKWvkbnH5M.roa
Signing time: Mon 01 Jan 2024 18:30:43 +0000
ROA not before: Mon 01 Jan 2024 18:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203400
IP address blocks: 185.72.88.0/24 maxlen: 24
185.72.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:da:28:ae:30:62:62:9e:fe:4e:45:db:3e:50:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896aa1f0ed4596e733f8b62d39e37b8de5085ed7
Validity
Not Before: Jan 1 18:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e4993175b2cf66019c0f0709ef296be46e71f93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:97:a4:2b:87:2f:f9:9d:8b:89:67:23:2e:
66:f4:34:d8:55:28:4c:9e:21:09:da:f4:85:8c:7a:
75:c1:32:43:9f:bb:0f:3c:6e:9b:ff:dc:0a:d6:be:
5b:ae:4a:c6:a5:60:c8:64:f6:7c:86:68:38:7f:50:
2b:de:68:95:59:06:69:8d:cb:a5:60:0d:2f:ec:d2:
97:af:f3:b5:37:f7:d8:e8:2e:d3:8d:cd:4d:90:fd:
c7:31:c6:f0:9b:8c:e5:ca:1e:e5:e4:8a:bf:77:1a:
bf:12:dd:fb:6c:82:62:b8:be:a6:07:2e:66:bd:53:
08:28:ad:16:16:68:98:7a:eb:a4:20:d5:31:ca:7e:
20:ee:73:7f:4d:e9:48:47:d1:52:60:9d:85:5f:74:
2f:d8:70:3d:74:f9:e2:b8:38:5d:64:f4:7f:a8:8d:
c3:c1:cb:76:57:f4:81:4e:16:27:c5:b4:4f:4c:ab:
fc:65:30:7b:cc:c4:dd:36:ea:a3:ce:84:ce:8a:b9:
c0:f7:be:2b:4b:27:da:8f:20:3d:56:a9:40:b4:bd:
4d:9d:20:d9:76:59:d2:a9:d7:c0:25:e2:32:ca:c4:
e7:3f:b3:a9:9d:a9:50:ce:87:55:22:49:f3:05:92:
8f:97:e5:58:82:0d:89:67:fc:90:35:7e:a6:08:33:
f6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:49:93:17:5B:2C:F6:60:19:C0:F0:70:9E:F2:96:BE:46:E7:1F:93
X509v3 Authority Key Identifier:
keyid:89:6A:A1:F0:ED:45:96:E7:33:F8:B6:2D:39:E3:7B:8D:E5:08:5E:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iWqh8O1Flucz-LYtOeN7jeUIXtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/HkmTF1ss9mAZwPBwnvKWvkbnH5M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/20e162-2cbc-4be3-a50c-a286d02532d3/1/iWqh8O1Flucz-LYtOeN7jeUIXtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.88.0/23
Signature Algorithm: sha256WithRSAEncryption
db:b5:94:bd:07:e6:44:3a:33:0a:a5:c2:15:d7:87:d4:8f:d3:
a6:88:c2:05:4b:9e:1b:f9:32:8a:03:af:39:21:31:f7:1e:ff:
d8:66:5a:ac:1c:08:09:9f:2c:63:29:cd:e6:c5:3a:0f:1c:04:
df:ff:a0:7c:96:9d:6b:ee:51:a3:5a:2e:bd:67:9d:43:61:f2:
5d:56:53:55:f2:98:f7:8d:86:8a:7f:dc:6a:5a:8e:1b:dc:40:
78:4b:16:d3:46:ed:e2:bb:bf:4d:bb:b9:f2:a7:4f:42:37:0f:
b4:48:8a:cd:c8:4e:59:ef:22:98:73:9e:cf:8d:24:fa:83:f4:
2c:25:75:0a:04:5f:11:75:f4:59:46:55:de:83:10:61:a5:9b:
78:47:70:0e:53:9c:d2:70:66:03:d1:64:5e:16:da:a1:e1:34:
c6:b8:3f:63:cf:f5:36:1e:0a:6b:7f:1a:ab:03:eb:06:a1:a2:
44:b6:e9:41:34:44:a6:96:c4:8a:ae:8a:d0:c9:f5:93:f8:33:
d7:22:49:f0:2e:bc:a8:45:79:be:07:c5:86:6d:ae:2c:ec:e6:
52:db:92:69:fa:7d:8a:00:31:3b:02:ed:19:0c:d7:a3:da:37:
8f:d4:33:8c:ed:4b:11:43:46:cb:15:c2:54:bb:2a:d9:0e:a7:
5f:2d:4b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:15:16 2024 by rpki-client on console-ams.rpki-client.org