Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/hvcqH8YkM67Bj-RkxkXRe199Vdo.roa
File: hvcqH8YkM67Bj-RkxkXRe199Vdo.roa (raw, json)
Hash identifier: 8UuKl5yv1AjmimUfUpsL495/E4e/2SOqnMxaA9aJVas=
Subject key identifier: 86:F7:2A:1F:C6:24:33:AE:C1:8F:E4:64:C6:45:D1:7B:5F:7D:55:DA
Certificate issuer: /CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Certificate serial: 018D407C4FAF19F50FB394C0263B3EF26A77
Authority key identifier: 48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/hvcqH8YkM67Bj-RkxkXRe199Vdo.roa
Signing time: Thu 25 Jan 2024 11:58:25 +0000
ROA not before: Thu 25 Jan 2024 11:58:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49223
IP address blocks: 185.119.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:40:7c:4f:af:19:f5:0f:b3:94:c0:26:3b:3e:f2:6a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480e3e80aeeb84c32612f4fad116e2690a546c7a
Validity
Not Before: Jan 25 11:58:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86f72a1fc62433aec18fe464c645d17b5f7d55da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:5f:34:71:bb:8c:07:32:00:3a:4c:a7:95:f1:
ee:db:e1:63:65:7f:0d:da:e2:87:f0:4e:ea:c6:57:
2c:f7:5f:1d:cc:a2:67:05:b3:f5:7f:cd:9d:d0:21:
d5:d0:cd:e4:7a:44:3a:01:03:9b:45:03:03:54:fd:
e0:43:58:83:ad:63:9b:e7:af:69:31:60:3f:dc:25:
78:6b:32:21:8b:72:cb:d4:59:5a:fc:7d:44:e3:31:
3e:40:62:d6:9a:81:4c:28:5c:49:41:9c:e0:65:79:
af:17:84:42:bb:64:c8:40:e4:30:cb:d3:d8:23:1e:
e9:b1:1c:91:fa:41:a1:9b:ed:0c:d4:11:d6:75:15:
86:4d:53:9e:cc:03:6d:85:8e:98:21:ef:f2:ac:c1:
08:ce:b6:b7:f0:6f:e3:cc:37:9e:7f:96:cf:07:94:
a7:1e:56:99:43:e3:de:f7:fa:54:4a:f3:66:eb:79:
2d:68:8e:ba:de:b6:c9:15:b7:53:0c:f2:23:47:d5:
6d:eb:f7:ec:55:19:9e:0e:c6:7f:ba:e5:f9:fd:b4:
9c:a0:a4:17:0d:96:98:55:1e:4e:15:03:44:da:93:
da:69:67:11:3d:d1:ed:80:ca:9d:87:f4:c4:33:cb:
45:c3:39:ea:a2:90:6b:4c:8e:8c:7b:6a:3e:d3:28:
29:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F7:2A:1F:C6:24:33:AE:C1:8F:E4:64:C6:45:D1:7B:5F:7D:55:DA
X509v3 Authority Key Identifier:
keyid:48:0E:3E:80:AE:EB:84:C3:26:12:F4:FA:D1:16:E2:69:0A:54:6C:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SA4-gK7rhMMmEvT60RbiaQpUbHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/hvcqH8YkM67Bj-RkxkXRe199Vdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9ce449-5ea6-4f80-ba5d-97bb1a7c4316/1/SA4-gK7rhMMmEvT60RbiaQpUbHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.212.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:8d:ce:63:d4:08:b0:56:5f:4a:e6:0c:e4:fb:58:de:5c:f4:
d8:ca:5f:8f:0a:53:44:a5:c6:bc:19:6f:59:6d:47:f1:1b:46:
fa:47:bc:dd:4f:21:79:93:57:ef:dd:fa:de:a0:ad:dd:50:0d:
8b:50:c1:2f:6f:5f:81:4d:38:99:96:4c:d7:9f:a9:e6:ad:b5:
89:0b:14:72:2f:a6:43:f8:65:78:17:95:bb:aa:e6:bc:73:20:
ea:2f:fd:fc:83:aa:76:06:81:fa:4a:d6:e7:5c:43:20:a7:2b:
77:f8:5c:2d:d8:f4:45:f8:34:d4:67:bd:2a:f4:b3:55:00:d6:
56:7f:e8:3f:5a:ea:da:c5:74:22:36:99:5f:b8:ef:f2:ce:2a:
29:89:ea:de:03:fb:ce:76:90:6d:19:8d:63:2c:28:43:b0:ec:
35:d2:7d:b5:98:6c:31:74:29:36:f0:90:57:42:56:3d:e6:5f:
91:96:43:ec:28:73:87:11:94:ba:a1:cc:f5:7d:c5:5e:e6:cb:
b7:b2:b4:02:a1:9b:b0:a5:8f:19:50:d0:6a:0a:1d:ce:f2:26:
8f:05:78:b2:c6:a7:a7:67:1a:f2:e6:ec:56:d5:a2:8e:69:66:
71:2b:18:2a:96:2f:37:cb:ea:71:e7:61:be:83:d4:8b:52:09:
cd:81:81:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:40:51 2024 by rpki-client on console-ams.rpki-client.org