Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/53DoIu-NhVLFvidWiWKYX_HsRXk.roa
File: 53DoIu-NhVLFvidWiWKYX_HsRXk.roa (raw, json)
Hash identifier: 2hKV/+sPimjtyThDv03V7FxYAsKPInGnKU1irDFs7ks=
Subject key identifier: E7:70:E8:22:EF:8D:85:52:C5:BE:27:56:89:62:98:5F:F1:EC:45:79
Certificate issuer: /CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Certificate serial: 018CC6B77A84FA8766725E0D04DB6F2EFCD1
Authority key identifier: 86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/53DoIu-NhVLFvidWiWKYX_HsRXk.roa
Signing time: Mon 01 Jan 2024 20:29:22 +0000
ROA not before: Mon 01 Jan 2024 20:29:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29533
IP address blocks: 194.146.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jul 2024 07:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7a:84:fa:87:66:72:5e:0d:04:db:6f:2e:fc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86efb49df2474a6042b9f210bfea861b1b2886ed
Validity
Not Before: Jan 1 20:29:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e770e822ef8d8552c5be27568962985ff1ec4579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:d3:b2:f3:88:db:1d:b0:95:8e:ac:74:de:
e3:57:e5:46:0e:93:38:d4:b4:51:15:31:f1:e4:11:
3d:40:d7:be:a8:98:66:a4:0f:42:be:1a:9b:8b:7e:
a1:70:5f:18:3e:66:50:4a:af:40:fd:09:b3:f1:32:
de:21:1a:f1:12:49:cc:e8:b5:5b:d0:69:66:cb:ac:
ea:ab:ea:03:bb:93:e0:bd:96:0a:77:fd:31:35:2e:
22:8d:a2:a3:3f:fe:49:f5:90:e7:13:35:bd:20:f9:
cc:92:08:c1:18:73:4c:6b:92:01:6b:07:b2:8f:98:
51:a0:5d:7d:2d:5e:69:3e:ac:2f:34:e2:f9:f1:5e:
be:5d:ad:4f:66:7e:29:4a:a0:c2:19:68:8c:e7:75:
dc:f2:40:6a:10:4e:11:ee:ad:5b:7d:d4:05:ca:ca:
32:2c:f3:9f:84:0d:32:6a:98:52:a8:f2:a5:5d:68:
38:6b:b5:ae:07:e4:26:66:f4:22:87:40:ed:13:23:
2e:1b:e1:6b:2a:c8:1e:bb:96:2f:1f:d3:c0:a7:37:
76:18:16:79:08:3e:1f:51:1d:28:17:21:c6:20:83:
05:bb:f1:16:45:f7:e0:dd:bc:f1:d2:4a:5e:c2:f3:
1d:73:da:81:b0:24:f5:47:d6:d9:9d:9e:84:e7:4e:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:70:E8:22:EF:8D:85:52:C5:BE:27:56:89:62:98:5F:F1:EC:45:79
X509v3 Authority Key Identifier:
keyid:86:EF:B4:9D:F2:47:4A:60:42:B9:F2:10:BF:EA:86:1B:1B:28:86:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hu-0nfJHSmBCufIQv-qGGxsohu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/53DoIu-NhVLFvidWiWKYX_HsRXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/435184-7791-4b54-b9b8-95b271f2e20b/1/hu-0nfJHSmBCufIQv-qGGxsohu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.121.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:9c:89:0a:da:08:33:0a:32:1f:d7:41:3c:bd:f6:24:12:76:
00:51:20:05:0c:ea:95:6a:9d:8e:41:a4:a2:9f:79:38:a5:10:
5c:d6:41:5e:af:9c:4f:87:6d:9d:de:91:7c:73:c0:b0:30:c9:
58:2f:b1:3f:2f:65:ec:90:3a:3a:7f:0c:8e:8b:4c:2c:2c:f4:
79:8c:b3:f7:05:c2:6b:6a:a8:17:ac:b8:1d:25:52:4c:27:44:
5d:ab:1f:30:04:0a:18:aa:17:29:e1:6e:38:22:05:c1:55:7a:
39:5f:70:aa:66:90:4a:6a:bd:73:3b:66:68:7a:d9:b1:59:91:
6d:a7:0b:f0:47:c9:f3:40:f6:1b:d2:5c:05:26:e5:23:70:fe:
7d:29:24:07:fa:9b:c6:45:91:08:ac:8a:30:52:76:69:a5:9c:
a2:ae:56:fa:b7:6f:fa:e4:96:61:77:73:d6:16:e0:8a:b2:98:
36:31:76:c2:9b:b8:be:42:b2:63:32:f2:30:47:67:57:21:83:
58:37:03:2b:1e:55:37:f4:f1:c3:6f:9e:47:68:61:df:f9:cc:
9a:3d:c9:4b:8a:37:bb:26:ab:0c:fa:da:65:9e:db:93:a2:b3:
1b:9a:28:7e:3f:9c:08:89:bb:5a:99:21:c2:da:9d:a6:4f:ae:
28:04:8b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 15:58:05 2024 by rpki-client on console-ams.rpki-client.org