Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/hl0lHn_RunVv_xWWc3-H_tnGnp4.roa
File: hl0lHn_RunVv_xWWc3-H_tnGnp4.roa (raw, json)
Hash identifier: iemrdXOE7oL8FSdpdQNAs+21piAHusaiJZ+l7Ib4HQ4=
Subject key identifier: 86:5D:25:1E:7F:D1:BA:75:6F:FF:15:96:73:7F:87:FE:D9:C6:9E:9E
Certificate issuer: /CN=130793e24a67201f7d52b656686f43dade3a1392
Certificate serial: 018CC8DE5E98C126C0FF11B5B11BC6C169D4
Authority key identifier: 13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/hl0lHn_RunVv_xWWc3-H_tnGnp4.roa
Signing time: Tue 02 Jan 2024 06:31:05 +0000
ROA not before: Tue 02 Jan 2024 06:31:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49855
IP address blocks: 185.98.240.0/22 maxlen: 22
91.202.40.0/22 maxlen: 22
31.24.144.0/21 maxlen: 21
109.69.64.0/21 maxlen: 21
2a02:16d0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 20:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:5e:98:c1:26:c0:ff:11:b5:b1:1b:c6:c1:69:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=130793e24a67201f7d52b656686f43dade3a1392
Validity
Not Before: Jan 2 06:31:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=865d251e7fd1ba756fff1596737f87fed9c69e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:f7:1b:53:26:ed:65:3d:88:46:e3:73:59:c7:
e2:52:58:c8:cb:49:24:ce:ca:ec:17:5a:fa:98:e6:
d4:d9:24:15:ae:29:82:e4:22:64:a4:14:14:aa:a3:
5c:56:5f:ee:74:cc:c4:5a:74:48:93:3b:74:4a:b4:
8c:e0:52:ad:29:d7:3d:d1:41:00:d3:61:2d:dc:d2:
56:8e:a3:98:48:45:9a:a4:f7:0c:92:d4:4f:d7:e3:
0e:09:d3:31:d6:70:b3:b7:b7:0e:38:3a:29:6b:8b:
40:31:cd:3f:3d:5c:8a:4d:9e:1c:76:ee:20:16:11:
88:de:35:de:40:98:af:9a:f9:2b:4e:e5:05:eb:22:
f4:9d:ae:b9:5e:93:c8:3c:eb:84:ef:fb:94:88:bf:
32:70:3d:67:0e:9e:67:ff:2b:b0:f9:ac:f9:32:97:
a2:a5:c4:12:28:5d:59:12:a6:8b:a3:8d:35:80:02:
e9:53:7b:db:35:32:9e:a5:8a:8c:fe:ff:ae:f3:d0:
47:7f:33:dc:ff:b1:04:c9:e2:55:01:37:6f:fd:af:
28:f9:13:e7:b7:bb:6e:88:2c:04:10:5d:68:b9:a9:
85:ea:fe:da:93:8b:df:b8:10:c1:9c:8e:c7:10:fd:
3f:fc:aa:43:e2:75:a4:c7:8b:44:8e:b3:ce:ed:25:
72:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5D:25:1E:7F:D1:BA:75:6F:FF:15:96:73:7F:87:FE:D9:C6:9E:9E
X509v3 Authority Key Identifier:
keyid:13:07:93:E2:4A:67:20:1F:7D:52:B6:56:68:6F:43:DA:DE:3A:13:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EweT4kpnIB99UrZWaG9D2t46E5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/hl0lHn_RunVv_xWWc3-H_tnGnp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/934ef8-0cb5-4c59-9b8b-8bdf98c0c8f0/1/EweT4kpnIB99UrZWaG9D2t46E5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.144.0/21
91.202.40.0/22
109.69.64.0/21
185.98.240.0/22
IPv6:
2a02:16d0::/32
Signature Algorithm: sha256WithRSAEncryption
04:64:dc:53:4c:09:06:09:3d:a6:a6:83:f2:95:3c:9f:e1:09:
34:8d:94:b8:95:91:4d:3f:2b:26:95:67:6a:28:b6:c3:b4:00:
60:7a:37:e6:23:7c:09:95:83:d8:b3:1d:4f:83:64:d4:2e:f9:
1f:8f:6d:16:37:b0:c0:9e:5a:fb:b5:ff:73:0a:ff:fe:6d:cc:
69:00:22:b7:c9:52:e5:b8:cd:d6:a4:86:7d:ff:5c:39:65:b2:
be:52:ef:10:7e:67:bc:0f:fa:45:ce:db:cb:31:ff:93:65:f6:
e0:9d:94:fd:ff:d4:f8:be:e1:13:6c:ab:e5:17:a9:0a:30:78:
20:6b:ce:b2:24:9f:05:89:b6:d7:7e:10:4c:08:e0:36:94:d5:
eb:93:df:21:c0:87:3f:f9:6f:1e:e3:b1:ce:ec:a9:d1:5e:fd:
2a:db:8c:48:fb:dc:ae:79:d6:c2:94:28:78:b9:3b:3c:fc:ab:
d6:ba:34:7c:04:35:6e:42:1e:08:69:52:70:f6:97:d5:19:d4:
e3:5b:3a:26:9b:4a:73:bf:db:70:3a:a2:16:5a:b6:65:86:5b:
67:96:41:8e:af:a4:c1:e9:92:58:b2:35:23:3e:ae:85:2f:5d:
68:e0:61:14:ae:12:4e:aa:07:10:bb:d8:d8:31:69:fe:55:15:
93:2e:a6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:44:13 2024 by rpki-client on console-ams.rpki-client.org