Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/HXXkNQUEFf6UqtlGSLPF-XP31VI.roa
File: HXXkNQUEFf6UqtlGSLPF-XP31VI.roa (raw, json)
Hash identifier: 7DI7cGk1iowlW5Vr8UABPW2iPdAVeYhZauSmFM8dI+M=
Subject key identifier: 1D:75:E4:35:05:04:15:FE:94:AA:D9:46:48:B3:C5:F9:73:F7:D5:52
Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial: 018CCA2A2AF0153DB59F72401687ABC8905B
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/HXXkNQUEFf6UqtlGSLPF-XP31VI.roa
Signing time: Tue 02 Jan 2024 12:33:30 +0000
ROA not before: Tue 02 Jan 2024 12:33:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199382
IP address blocks: 213.140.140.0/24 maxlen: 24
213.140.140.0/23 maxlen: 23
213.140.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:2a:f0:15:3d:b5:9f:72:40:16:87:ab:c8:90:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Validity
Not Before: Jan 2 12:33:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d75e435050415fe94aad94648b3c5f973f7d552
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:80:6a:f6:e1:e0:0a:27:fa:a2:f8:8d:e5:42:
37:c2:e2:f7:33:aa:48:2e:a7:90:a9:a4:7b:a3:e0:
94:fc:98:61:f2:0c:83:a3:59:3e:bf:4e:53:37:e7:
65:75:30:5a:f4:d1:50:19:1c:07:17:0c:08:03:92:
4d:63:ba:40:ab:95:c7:09:c5:29:2c:c3:4e:49:56:
d0:96:9a:1c:13:ff:6b:c4:56:25:cb:b2:0f:ff:54:
39:b9:b0:e0:58:ff:49:95:53:1d:80:4d:ed:95:13:
c9:10:b2:8d:a9:53:16:ed:dc:ca:8f:f0:3f:45:3f:
ca:10:e3:0a:b9:9e:3b:fd:42:d7:3b:20:ea:88:66:
83:ec:13:24:fd:74:45:53:87:d9:67:95:47:3c:7c:
d0:31:27:bc:6b:be:47:0b:64:9e:a7:80:d7:b9:e1:
c2:7c:a2:25:28:ef:43:06:aa:ea:c1:92:14:22:bf:
e1:c9:89:f0:1f:da:dd:9c:ba:e8:4d:cf:8e:b0:3b:
4a:ae:21:ec:d5:51:ec:8f:bd:3e:35:ad:ae:2a:53:
64:8a:3c:8d:08:05:e2:97:91:1b:32:4c:91:b0:2b:
d8:e9:eb:27:fe:ad:f6:90:91:2e:59:bd:2c:30:18:
55:69:e1:2a:7c:94:80:2e:3e:40:5f:9c:7a:fe:9d:
1e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:75:E4:35:05:04:15:FE:94:AA:D9:46:48:B3:C5:F9:73:F7:D5:52
X509v3 Authority Key Identifier:
keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/HXXkNQUEFf6UqtlGSLPF-XP31VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.140.140.0/23
Signature Algorithm: sha256WithRSAEncryption
57:3e:a6:9f:eb:f8:4c:df:ed:63:aa:2e:17:cc:4a:6d:fc:55:
57:5b:08:7c:3d:2a:92:28:bf:0a:4c:7a:d5:21:60:f0:1c:e3:
ed:32:68:0e:b8:18:9a:c1:77:68:f6:1b:a0:c6:14:2d:36:53:
94:d4:02:6a:ba:89:10:b4:da:56:31:61:74:d9:e4:a2:92:10:
33:78:2f:b0:c3:7a:1f:55:a9:0b:dd:9e:fc:e5:ab:bd:9b:41:
e8:fd:cc:96:0e:aa:9b:d8:cc:78:15:d2:0f:aa:10:10:36:87:
50:cc:5e:f0:c2:12:25:9a:6b:59:a0:fc:74:ff:af:9a:49:55:
b8:3b:e8:d6:75:25:75:b9:15:d3:69:d4:0d:0b:07:eb:b3:82:
bd:e5:33:4f:89:ae:0b:20:32:3d:c3:f4:34:55:09:c4:25:ef:
48:e4:5b:49:bb:19:39:ba:91:35:00:a5:45:8b:8c:b0:6c:92:
b4:90:38:42:89:a6:f1:a4:73:7e:34:2a:f5:56:77:d7:7b:fc:
d1:0c:43:30:3c:16:a9:0c:08:e0:03:01:4f:7b:0c:f7:04:f8:
40:fe:b4:95:a2:c9:7b:f7:48:80:9f:96:f5:45:4d:1a:31:ce:
02:34:95:5e:89:4f:65:15:26:31:65:8d:23:2e:39:68:c5:8d:
03:df:4c:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 16 01:33:01 2024 by rpki-client on console-ams.rpki-client.org