Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/HNP43Tmxpe_7vsbHtUkr5Ri7tJ8.roa
File: HNP43Tmxpe_7vsbHtUkr5Ri7tJ8.roa (raw, json)
Hash identifier: 4y3aF9QQqcwBUGD1+1OxGq1O5PA+6Ne3ds6ae4NkOrg=
Subject key identifier: 1C:D3:F8:DD:39:B1:A5:EF:FB:BE:C6:C7:B5:49:2B:E5:18:BB:B4:9F
Certificate issuer: /CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Certificate serial: 018CC72740246460BACA4FEF68DE4346FCC2
Authority key identifier: C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/HNP43Tmxpe_7vsbHtUkr5Ri7tJ8.roa
Signing time: Mon 01 Jan 2024 22:31:27 +0000
ROA not before: Mon 01 Jan 2024 22:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39635
IP address blocks: 195.246.241.0/24 maxlen: 24
195.246.240.0/23 maxlen: 23
195.246.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:40:24:64:60:ba:ca:4f:ef:68:de:43:46:fc:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c31bb44ede2afe0bfa9d78ba29324955f7fc6091
Validity
Not Before: Jan 1 22:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cd3f8dd39b1a5effbbec6c7b5492be518bbb49f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a2:81:15:09:05:ef:7d:63:5f:9c:80:08:85:
9b:69:be:95:38:55:de:db:06:50:43:00:19:d6:c4:
c1:6c:df:87:73:54:f7:1e:48:d8:23:44:59:2c:66:
a4:db:1e:71:25:1c:8d:ac:3e:82:ee:d8:3c:6d:b1:
35:32:31:02:03:c5:96:1b:d2:a9:72:f2:cd:5d:6e:
47:9a:39:23:cf:18:c1:a5:6c:99:11:b7:aa:6f:6a:
cc:c0:13:6e:01:6d:c1:c1:8e:04:c6:de:b5:ac:f1:
12:4a:f5:d5:e0:76:92:5b:11:5d:3f:29:e4:37:a4:
1f:20:5b:3a:6d:f7:41:1f:2b:05:00:be:fd:e4:4b:
d3:66:b2:86:f3:45:8e:c2:30:57:bc:3b:69:98:12:
87:7e:c4:b3:34:1c:9c:fa:85:64:9f:b4:e4:5f:23:
27:1f:a3:3e:ac:6e:0e:1d:23:fe:1c:60:03:f3:f7:
d8:59:63:6f:f7:34:7c:0f:dc:6b:b7:5b:dd:bc:03:
f0:28:0e:9a:b1:45:40:1e:18:a1:45:e0:ce:79:7d:
8e:eb:33:2a:c4:a9:b9:d5:ba:29:dd:8b:73:c5:a8:
bc:03:72:21:93:89:3e:15:f2:b0:59:4b:ef:83:e9:
63:52:62:c4:e6:51:45:ea:85:cf:c5:7e:cc:fa:37:
f1:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D3:F8:DD:39:B1:A5:EF:FB:BE:C6:C7:B5:49:2B:E5:18:BB:B4:9F
X509v3 Authority Key Identifier:
keyid:C3:1B:B4:4E:DE:2A:FE:0B:FA:9D:78:BA:29:32:49:55:F7:FC:60:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wxu0Tt4q_gv6nXi6KTJJVff8YJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/HNP43Tmxpe_7vsbHtUkr5Ri7tJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/703f00-7f39-4d95-8c58-4bbb838a2779/1/wxu0Tt4q_gv6nXi6KTJJVff8YJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.246.240.0/23
Signature Algorithm: sha256WithRSAEncryption
79:de:b3:08:bc:60:41:62:c1:0a:13:26:77:13:ce:01:10:be:
eb:09:a1:4f:97:a5:c6:5a:bb:cc:a1:c6:55:df:32:b7:69:7c:
1b:48:31:74:3d:56:a2:ae:28:71:bb:7c:f2:ac:a1:9d:d7:51:
c3:2d:19:8b:b4:65:ce:64:49:02:1a:ac:98:24:0c:ad:8d:44:
a2:15:0d:79:d3:56:04:23:35:6c:e6:6f:c5:9d:e3:2b:ca:16:
94:94:ce:d8:2e:f5:53:1b:e4:cd:5f:8a:95:45:e9:b4:17:ba:
91:82:75:e1:b5:1b:1e:45:5d:b2:48:dc:9a:0c:d4:3a:76:93:
de:dd:96:83:e2:3a:eb:a5:de:59:2a:6c:d5:ee:24:0d:03:c2:
9e:6e:3f:c1:56:2b:7c:df:fa:69:f8:f7:0e:ef:fe:b8:88:80:
00:6e:13:f8:09:21:2e:fc:2a:5e:4f:7f:bc:f1:43:25:bb:d4:
69:d6:8e:e8:87:2c:f2:62:6e:ef:cb:2d:27:3f:75:e0:bf:22:
f2:e3:7e:df:f5:38:3f:73:99:b9:26:68:70:9e:7b:7c:c5:37:
8c:36:d6:f5:85:41:fe:04:9d:15:75:74:f4:38:d6:66:ee:7d:
7d:75:55:10:bb:da:5c:53:ae:34:6e:bc:74:e0:73:1d:c4:12:
cc:9c:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:44:12 2024 by rpki-client on console-ams.rpki-client.org