Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/1-HnbxmK99DUTDW7m7lpCJFydmBk.roa
File: 1-HnbxmK99DUTDW7m7lpCJFydmBk.roa (raw, json)
Hash identifier: GAUj/w+5iJrWywATYOYn1Bo5eeBQqwqfKLyFdVj07+g=
Subject key identifier: F8:79:DB:C6:62:BD:F4:35:13:0D:6E:E6:EE:5A:42:24:5C:9D:98:19
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 018CC6B81F79E13452AEB2641A5FB8A75F41
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/1-HnbxmK99DUTDW7m7lpCJFydmBk.roa
Signing time: Mon 01 Jan 2024 20:30:04 +0000
ROA not before: Mon 01 Jan 2024 20:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30823
IP address blocks: 195.62.33.0/24 maxlen: 24
87.237.52.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.mft
rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:1f:79:e1:34:52:ae:b2:64:1a:5f:b8:a7:5f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Jan 1 20:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f879dbc662bdf435130d6ee6ee5a42245c9d9819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:17:f0:4f:ae:96:6d:6b:f4:c9:d3:70:b1:
48:03:e4:93:39:18:5a:af:37:45:b9:06:cd:9e:e5:
05:0a:13:48:b9:48:34:95:32:c0:a4:46:8f:a9:39:
d8:96:32:a4:5a:76:73:5f:0b:f2:f3:ac:b9:9b:eb:
d2:2d:ea:3c:57:6f:6c:1c:5c:3e:39:43:18:8f:53:
c7:eb:ac:d5:3d:0f:73:a0:db:c4:ca:2b:44:af:5d:
e7:5c:3b:f7:8c:d8:34:03:a7:d2:3b:20:25:ed:9f:
a3:76:ff:65:d7:89:6a:c6:73:40:35:18:ea:1c:c4:
93:df:d8:ca:5c:27:21:60:a8:60:a7:38:9f:7f:cb:
80:79:f5:58:10:c1:ad:01:11:b4:46:17:5a:bb:c1:
39:f4:eb:62:d4:0b:a2:22:84:a0:e8:34:a9:0f:6f:
29:42:32:e6:fc:3b:79:84:8b:48:db:4e:90:bb:cc:
33:81:da:a5:f8:f6:1c:ee:25:c7:1e:75:1d:5c:87:
ce:84:8a:a5:2f:2a:d8:41:69:be:61:c4:f8:41:df:
19:2a:b7:68:0c:ac:a0:fe:a9:e6:4a:d2:35:cc:f5:
bc:f8:0e:de:b7:0b:bf:92:e1:90:e7:15:d0:2c:50:
b0:d1:a3:35:16:7f:98:90:9c:02:4c:c7:13:e4:6a:
5a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:79:DB:C6:62:BD:F4:35:13:0D:6E:E6:EE:5A:42:24:5C:9D:98:19
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/1-HnbxmK99DUTDW7m7lpCJFydmBk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.52.0/22
195.62.33.0/24
Signature Algorithm: sha256WithRSAEncryption
88:12:d4:3a:51:6f:33:39:af:18:a6:c7:05:25:1a:8f:d2:0c:
f7:00:31:bc:d8:85:5a:be:11:d6:73:07:89:a9:83:75:fe:3b:
bc:ae:7a:64:32:3d:21:fe:c4:41:47:9a:6e:c1:d3:6d:4e:16:
99:6a:d4:77:99:cf:a2:65:10:2c:81:4f:77:e8:34:88:4a:35:
f5:42:0b:ff:7e:c7:c2:d4:37:f3:7d:44:10:2c:0c:60:8a:34:
1c:ec:ae:90:2d:23:6b:0b:06:c1:31:fe:dc:ad:25:3d:82:b1:
de:86:2a:b9:82:6e:ee:5f:2d:b6:7e:7d:11:95:04:25:ef:07:
6a:f8:9d:dc:89:43:0f:f3:ec:3c:ac:42:6c:67:7d:8d:6f:f9:
84:51:3f:5f:52:5c:e9:4b:98:db:f2:e7:92:ec:b3:c6:8b:f3:
1b:48:35:e3:70:cc:b2:d2:4d:e7:d9:25:78:7e:cb:7a:95:ee:
04:c3:fd:b3:89:eb:b0:9c:21:f8:89:0b:65:f9:7d:24:96:8f:
1c:fc:03:85:fb:82:b5:72:2e:b2:44:70:41:af:4e:2a:11:25:
f3:1d:32:7d:f1:69:7f:61:13:05:5e:8a:67:e5:fc:71:80:be:
52:c0:10:83:9b:39:45:1b:4e:f7:98:89:ba:78:a1:4b:18:7d:
11:43:fa:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:13:20 2024 by rpki-client on console-fra.rpki-client.org