Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/58b206-5744-439d-be73-473660b31b16/1/Hnckx1ra-TlPqBCG1BT3q66GuWE.roa
File: Hnckx1ra-TlPqBCG1BT3q66GuWE.roa (raw, json)
Hash identifier: hlnW4zsLpyzt7qTq2jx4Pmm6E1vxDEfMYiJdk+177fI=
Subject key identifier: 1E:77:24:C7:5A:DA:F9:39:4F:A8:10:86:D4:14:F7:AB:AE:86:B9:61
Certificate issuer: /CN=36ca81a378a87e043c4883fbdef4ee9f13a024a7
Certificate serial: 018CC42460298EF793C879C2CF919E2FB157
Authority key identifier: 36:CA:81:A3:78:A8:7E:04:3C:48:83:FB:DE:F4:EE:9F:13:A0:24:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsqBo3iofgQ8SIP73vTunxOgJKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/58b206-5744-439d-be73-473660b31b16/1/Hnckx1ra-TlPqBCG1BT3q66GuWE.roa
Signing time: Mon 01 Jan 2024 08:29:27 +0000
ROA not before: Mon 01 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 185.244.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/58b206-5744-439d-be73-473660b31b16/1/NsqBo3iofgQ8SIP73vTunxOgJKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/58b206-5744-439d-be73-473660b31b16/1/NsqBo3iofgQ8SIP73vTunxOgJKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsqBo3iofgQ8SIP73vTunxOgJKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:60:29:8e:f7:93:c8:79:c2:cf:91:9e:2f:b1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36ca81a378a87e043c4883fbdef4ee9f13a024a7
Validity
Not Before: Jan 1 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e7724c75adaf9394fa81086d414f7abae86b961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:b4:13:50:b2:9d:19:7d:8c:07:ef:26:bf:86:
c8:47:e6:53:96:dc:00:42:69:22:05:65:ca:7c:62:
e0:53:cc:ae:ce:f4:90:10:63:09:3b:6e:3c:ef:01:
cc:6b:a5:c3:6a:e4:44:37:4d:14:47:2b:5b:c9:ca:
28:7f:fc:cb:7f:49:e0:0f:61:e9:54:65:31:c8:d1:
d6:c3:ac:09:37:b1:5f:6f:f4:67:a2:a1:57:ae:99:
e1:fd:82:38:95:71:0e:8f:d4:83:26:1b:b5:28:06:
7a:09:f5:dc:65:40:f0:d5:28:8f:e6:c9:2a:b7:84:
5e:ae:43:93:3e:cc:eb:40:88:03:29:c2:aa:1e:80:
7b:32:76:c1:c1:cf:a5:aa:ff:cb:5e:32:09:88:9c:
c3:48:ed:e8:36:bc:0f:e4:22:de:bf:7f:6d:0f:5f:
db:61:22:4e:2f:38:9e:f0:f6:8b:83:37:80:4a:50:
f7:56:4f:28:b9:bb:62:ff:97:c8:5f:e5:e6:bc:89:
c3:8b:f1:da:b1:7d:2f:35:69:46:83:9a:f7:90:98:
9c:71:93:5f:81:cb:52:fb:84:69:ff:3a:38:0d:21:
0d:b1:b4:bd:0a:02:52:2e:62:ef:56:cc:50:98:8f:
2a:2a:f2:2a:c6:35:c6:9c:ab:1d:78:66:12:71:6b:
2c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:77:24:C7:5A:DA:F9:39:4F:A8:10:86:D4:14:F7:AB:AE:86:B9:61
X509v3 Authority Key Identifier:
keyid:36:CA:81:A3:78:A8:7E:04:3C:48:83:FB:DE:F4:EE:9F:13:A0:24:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsqBo3iofgQ8SIP73vTunxOgJKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/58b206-5744-439d-be73-473660b31b16/1/Hnckx1ra-TlPqBCG1BT3q66GuWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/58b206-5744-439d-be73-473660b31b16/1/NsqBo3iofgQ8SIP73vTunxOgJKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.161.0/24
Signature Algorithm: sha256WithRSAEncryption
19:c4:38:61:79:e9:dc:20:ba:19:69:cc:ea:69:a0:40:30:6f:
45:6e:33:99:5b:42:67:a2:04:63:08:2a:65:18:97:03:db:77:
99:46:54:e0:58:62:d1:54:9c:62:30:f5:b5:5c:e0:e1:82:eb:
11:b5:76:bc:e0:52:8d:57:0b:5e:75:3c:27:0f:ba:c4:30:cf:
46:80:20:b6:40:70:2a:31:17:97:94:78:df:43:6f:22:02:05:
da:6f:b3:2f:53:81:b8:e6:33:ac:be:1b:b4:6c:08:b7:aa:c8:
4a:84:91:3e:3b:f7:9f:a6:08:ab:8f:da:1f:35:d5:c9:d0:ad:
b3:4d:3f:e3:4a:18:9d:73:da:4b:0d:db:ed:6e:78:98:ca:95:
34:8a:4c:1f:9f:9d:89:77:2d:4f:90:bc:ae:0d:da:0c:ff:47:
d7:93:c4:f9:0d:2d:8a:90:b7:d1:26:03:f8:cf:6e:6c:a2:c2:
b7:4d:40:78:ed:1c:0d:e3:59:9b:bf:1c:79:54:a4:99:76:8e:
fb:69:74:5b:f0:f0:2d:27:ef:04:a3:73:73:81:cb:0f:c1:fa:
c1:e6:55:24:16:03:8a:7c:d6:c8:cd:ab:33:75:07:75:06:f7:
4a:35:db:ea:2f:53:36:ad:07:8e:29:0b:a6:48:6c:c9:e4:9b:
c9:97:43:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 18:59:35 2024 by rpki-client on console-fra.rpki-client.org