Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/HVJNZDQ8hGJ3ImxbIVI-ccwLDbo.roa
File: HVJNZDQ8hGJ3ImxbIVI-ccwLDbo.roa (raw, json)
Hash identifier: cUxWlQaAiZ5kBUfELuJOv+ee8uwm8duCMzvM8RnObd8=
Subject key identifier: 1D:52:4D:64:34:3C:84:62:77:22:6C:5B:21:52:3E:71:CC:0B:0D:BA
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 018CC3489B02471F34F8599DD7FC81B1E594
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/HVJNZDQ8hGJ3ImxbIVI-ccwLDbo.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 212.116.244.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
91.147.117.0/24 maxlen: 24
91.147.116.0/24 maxlen: 24
91.147.118.0/24 maxlen: 24
91.147.123.0/24 maxlen: 24
91.147.119.0/24 maxlen: 24
91.147.122.0/24 maxlen: 24
91.147.126.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9b:02:47:1f:34:f8:59:9d:d7:fc:81:b1:e5:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d524d64343c846277226c5b21523e71cc0b0dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a5:b5:9b:70:99:e4:4a:11:5f:c6:af:62:ae:
1c:b2:a5:fa:11:08:b5:72:aa:9d:6d:9a:48:f1:ae:
45:74:5c:ef:31:a2:9f:22:7d:c9:4d:e3:fa:6e:79:
43:45:1e:ae:d2:78:a9:42:22:6b:01:14:e5:ab:24:
75:13:dd:b9:5e:2a:30:47:d5:5f:a2:44:01:93:27:
4a:c0:87:7f:fc:ac:34:6a:ec:1d:98:0b:37:40:d1:
46:23:4c:0e:54:59:12:6e:23:58:10:d8:8e:42:53:
ee:81:ac:85:33:bb:66:bd:67:35:eb:a9:41:92:74:
1a:1c:a2:42:51:d2:1d:b2:a5:48:7f:a1:9d:d3:7a:
6e:c3:a2:e8:fa:9c:3f:9a:fa:d5:e2:e8:6e:15:61:
d9:98:6a:6a:67:f4:58:3c:17:62:59:fe:65:8f:12:
af:fb:27:df:85:22:48:fc:af:4f:f2:17:15:2b:f9:
ca:8b:4e:87:91:d8:a5:c6:c2:5b:bb:63:61:d0:a3:
87:9d:43:37:39:8c:9d:e7:23:3c:24:df:d6:5c:bc:
1f:37:06:64:43:fe:9e:53:8a:4a:59:a9:0f:8d:ee:
0a:16:8b:43:e3:78:50:de:b6:61:ed:c6:6a:0f:be:
fd:ba:34:9e:aa:5c:0b:ad:ea:be:81:9c:24:ea:ba:
ee:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:52:4D:64:34:3C:84:62:77:22:6C:5B:21:52:3E:71:CC:0B:0D:BA
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/HVJNZDQ8hGJ3ImxbIVI-ccwLDbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.116.0/22
91.147.122.0/23
91.147.126.0/23
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
32:37:d1:f0:6c:85:9b:a2:37:85:6f:a8:49:85:a8:68:5a:49:
7f:20:b9:0f:42:78:e5:5c:b5:44:89:5c:14:ca:d2:51:5f:fb:
8d:07:65:1c:43:7d:dd:74:4f:26:89:fa:0f:e4:9e:59:a2:60:
71:67:c5:0a:36:e3:13:ba:fc:f9:f7:b8:71:c7:93:fb:53:f2:
d6:23:9d:4d:ac:a8:0e:c9:c8:cb:06:b5:65:d5:f1:f4:42:76:
2a:a2:a8:4e:28:a7:c2:08:c8:ab:57:3b:1b:66:2c:26:48:71:
61:db:4d:71:7f:8d:44:94:ed:a5:a4:9b:53:6b:61:23:6f:60:
1f:22:bb:0a:8b:8f:c2:e2:e3:55:16:e3:19:16:d5:c7:fc:af:
d7:f7:16:ec:06:2b:31:b3:1d:8d:7c:20:d2:44:59:84:a9:c0:
84:e8:b0:72:67:14:bc:fe:5a:64:d3:8e:1a:52:9f:bc:66:9f:
0f:9a:af:17:a9:4c:8f:67:c7:a5:21:63:25:4b:c3:b8:66:9d:
07:d4:51:b2:59:76:0c:e9:21:76:e8:3c:c5:cc:fb:be:22:45:
ef:e4:ec:1c:83:e0:b9:9e:11:77:42:f0:d3:9a:0e:a5:f5:4b:
32:a9:bf:d9:86:c5:e8:d8:51:bb:df:ee:96:d1:7c:69:b0:db:
71:27:33:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:10:48 2024 by rpki-client on console-ams.rpki-client.org