Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/hqkhWWJ9HgosAsbzREsgV-Zh_cA.roa
File: hqkhWWJ9HgosAsbzREsgV-Zh_cA.roa (raw, json)
Hash identifier: tJciVR/qbtmdMMU/yWJDVNspwIu2upUGDbNOBZRVFwE=
Subject key identifier: 86:A9:21:59:62:7D:1E:0A:2C:02:C6:F3:44:4B:20:57:E6:61:FD:C0
Certificate issuer: /CN=0c202663de852c7060fdea0298b490d5edcc0f24
Certificate serial: 018CC2DAEDFBF031B3651D4B15BCA9E6B9D6
Authority key identifier: 0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/hqkhWWJ9HgosAsbzREsgV-Zh_cA.roa
Signing time: Mon 01 Jan 2024 02:29:36 +0000
ROA not before: Mon 01 Jan 2024 02:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48504
IP address blocks: 194.32.168.0/22 maxlen: 24
176.125.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 May 2024 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:ed:fb:f0:31:b3:65:1d:4b:15:bc:a9:e6:b9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c202663de852c7060fdea0298b490d5edcc0f24
Validity
Not Before: Jan 1 02:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86a92159627d1e0a2c02c6f3444b2057e661fdc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:68:82:f4:b0:19:23:8a:5d:84:6d:d6:ba:e3:
5b:c9:e8:95:ad:f1:25:0a:d1:f9:f8:25:cf:1e:d9:
ad:4b:0a:12:77:d2:83:10:90:01:17:b3:0d:7d:cb:
0e:f5:03:1d:80:a2:0b:71:92:d6:95:cd:aa:e8:b5:
d2:34:11:bc:63:54:f7:82:e1:bb:10:70:01:9a:02:
9b:02:bc:05:13:3f:f6:34:61:7e:0b:63:c5:45:de:
d6:32:99:95:e0:4a:e7:1a:71:4c:5e:6a:e6:51:c0:
a2:99:40:2f:ad:bb:bc:1c:3b:2e:b3:d6:b6:08:15:
05:86:ed:b4:14:69:42:a3:38:f8:be:86:34:f5:14:
52:14:7c:ea:b6:cb:0d:8d:b8:31:79:2e:80:e5:a0:
09:b5:54:45:3f:be:a0:f8:68:21:1d:eb:b8:55:c2:
9a:5f:34:f5:ae:73:b7:00:a1:28:8b:d6:ab:6b:69:
77:13:39:47:89:21:1d:c5:e3:1f:d8:d6:5c:df:a7:
7f:93:50:72:fe:eb:11:6a:e8:b7:0a:72:9a:07:f5:
5e:55:5e:7c:c0:d2:dd:a0:8a:bc:60:2a:99:02:de:
48:88:e2:3b:20:63:c6:47:f0:4f:a4:fe:6f:41:90:
2a:24:67:d1:4a:aa:46:43:77:49:72:e4:2d:3f:a6:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:A9:21:59:62:7D:1E:0A:2C:02:C6:F3:44:4B:20:57:E6:61:FD:C0
X509v3 Authority Key Identifier:
keyid:0C:20:26:63:DE:85:2C:70:60:FD:EA:02:98:B4:90:D5:ED:CC:0F:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/hqkhWWJ9HgosAsbzREsgV-Zh_cA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0910e6-c074-40d0-b789-a17804439895/1/DCAmY96FLHBg_eoCmLSQ1e3MDyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.125.224.0/22
194.32.168.0/22
Signature Algorithm: sha256WithRSAEncryption
48:44:b2:e5:9c:85:98:42:c4:ed:1e:5d:e2:a6:0f:64:7a:28:
66:3b:76:68:7c:06:0e:46:6e:1e:8f:87:ed:25:16:3a:b3:02:
40:d7:c6:65:8d:ad:ea:16:e7:20:ae:f8:49:20:1b:a3:8d:55:
f1:16:f9:50:eb:6e:ab:6a:a7:a9:d4:f5:01:e8:18:b4:01:7b:
8f:da:c5:1e:80:3d:3e:e9:af:cc:9e:9b:35:7a:0b:58:45:95:
61:4a:b3:8c:a5:06:6f:53:9d:73:33:cd:f7:42:d3:4f:ab:1b:
46:2d:d9:80:f8:b8:ef:8f:8d:77:f9:bd:0b:db:fb:3f:25:30:
32:09:fa:bd:b4:b8:fe:5b:a8:91:2a:be:7c:7e:2b:68:8d:dc:
cf:88:7f:79:81:d5:61:39:47:77:fa:17:73:c4:1e:0b:24:c7:
ae:43:e6:c1:97:13:1a:db:6e:f1:50:90:70:71:69:f0:3d:28:
39:19:76:66:30:c1:cf:7d:2f:79:40:28:40:d8:40:10:08:00:
2f:3c:9b:15:f1:0f:61:8b:fb:3b:6f:f0:d0:70:86:9a:c0:3c:
27:59:48:a4:fa:3f:91:d4:b0:67:a2:3b:b3:d0:d5:c5:ec:af:
84:0c:72:58:38:64:7d:62:e8:bc:62:41:5f:39:cd:00:d1:19:
c1:53:13:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 12:13:07 2024 by rpki-client on console-ams.rpki-client.org