Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/HrLubRvcOt-jwd15yCTpMs7T4AM.roa
File: HrLubRvcOt-jwd15yCTpMs7T4AM.roa (raw, json)
Hash identifier: bVbU8onnYRt8k2yIqBxq53NajhWCar8fHY42CFzFZA0=
Subject key identifier: 1E:B2:EE:6D:1B:DC:3A:DF:A3:C1:DD:79:C8:24:E9:32:CE:D3:E0:03
Certificate issuer: /CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Certificate serial: 018CC26D3A90102BDA7CFCF5B72776318118
Authority key identifier: 69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/HrLubRvcOt-jwd15yCTpMs7T4AM.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49685
IP address blocks: 194.53.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 04:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3a:90:10:2b:da:7c:fc:f5:b7:27:76:31:81:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69af70bda77cf858e164d6b7c709e878fd1a6045
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1eb2ee6d1bdc3adfa3c1dd79c824e932ced3e003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d1:4b:55:1b:57:b0:cf:b7:90:93:11:33:57:
86:e9:9b:43:56:53:68:44:e7:23:5d:92:a9:6d:66:
e7:d3:e4:5c:bb:7c:09:cf:df:77:0c:e2:d6:3a:87:
a8:98:f3:e0:a1:15:a7:0a:45:49:9e:d3:84:c3:1b:
0b:db:d8:e0:16:24:1a:7a:16:df:a7:b1:d0:1a:fb:
1d:17:83:54:c0:f4:d4:e7:d9:8a:09:ee:57:de:e8:
8c:0e:9e:c4:a4:ae:e1:0e:b9:e1:1d:41:8f:0a:79:
fe:5e:3d:c2:cc:2a:34:d0:85:57:d7:70:1d:ba:80:
88:6e:b9:ac:98:51:47:f9:3e:10:9d:68:22:21:49:
52:31:4d:5f:57:88:e6:ce:8a:53:ef:3e:62:c1:22:
cb:d6:28:e0:b4:8f:cc:42:f1:1b:50:87:77:c3:d0:
db:d5:47:3c:61:10:82:98:ee:04:37:30:18:3b:ee:
c9:82:4f:fa:20:ec:45:dc:64:68:b6:7f:01:f1:5a:
5f:19:b5:08:09:0c:36:cc:8d:07:f9:3f:d1:73:cf:
05:e6:c8:48:5d:00:90:2b:9d:22:a2:6a:a3:0e:e1:
dd:9d:da:b8:83:17:da:8d:e8:14:43:49:3c:ee:66:
8f:4a:75:23:3d:5c:ce:b5:4f:69:1b:99:68:a0:45:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B2:EE:6D:1B:DC:3A:DF:A3:C1:DD:79:C8:24:E9:32:CE:D3:E0:03
X509v3 Authority Key Identifier:
keyid:69:AF:70:BD:A7:7C:F8:58:E1:64:D6:B7:C7:09:E8:78:FD:1A:60:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa9wvad8-FjhZNa3xwnoeP0aYEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/HrLubRvcOt-jwd15yCTpMs7T4AM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/fc9927-63fe-4e3b-bf28-62877fe48618/1/aa9wvad8-FjhZNa3xwnoeP0aYEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.72.0/22
Signature Algorithm: sha256WithRSAEncryption
34:d5:68:eb:22:bb:db:80:3a:73:a0:6e:87:ee:5e:d6:63:39:
50:ac:13:e9:d5:08:f8:57:56:2d:de:df:da:55:66:cd:31:f4:
20:9a:d4:10:6a:b9:a2:8f:e1:88:ce:e9:04:7f:6c:c4:2f:23:
a0:f7:db:74:d2:cb:a7:98:a1:03:0b:9b:5e:14:fb:dc:ed:a2:
fc:77:d9:9a:dc:df:94:b5:d5:c9:d6:28:50:2c:a5:54:b6:6f:
a0:9c:68:be:f9:c5:7c:7b:5b:a7:18:fa:89:86:26:31:02:fb:
3a:15:82:57:50:9a:0c:08:04:be:44:99:27:16:f5:40:ec:ba:
d9:2d:df:6c:e5:f0:1a:14:bc:1e:3a:ca:21:c7:83:08:19:a6:
e4:24:a4:7a:7b:c1:b8:72:50:bf:07:ab:83:03:c2:80:8e:88:
85:5c:41:8b:8e:bd:27:da:08:cb:d3:ed:79:9a:25:d6:06:f8:
5e:b9:a9:75:48:af:d9:f5:9f:19:08:a4:61:dc:57:de:61:91:
c0:be:b0:c8:c6:d9:46:30:fb:c0:9b:0c:32:e6:57:9b:89:ab:
3f:9e:ac:18:b8:59:93:a9:6c:ac:9f:95:0b:a5:82:c6:94:e9:
88:ff:ef:de:0a:51:fd:e0:c7:c3:6e:b7:cc:21:47:6b:f8:94:
18:ef:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 11:19:27 2024 by rpki-client on console-ams.rpki-client.org