Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/HZjj79RHJwkqAjzQtB1Rf2bD9mI.roa
File: HZjj79RHJwkqAjzQtB1Rf2bD9mI.roa (raw, json)
Hash identifier: Qf9pGHDnLu1UtbfxL5oj9jVqEvLx+aVTojo6NMSp2SA=
Subject key identifier: 1D:98:E3:EF:D4:47:27:09:2A:02:3C:D0:B4:1D:51:7F:66:C3:F6:62
Certificate issuer: /CN=374e2729b17369890a1512f643cd08e4ba2ff414
Certificate serial: 018F764F65BF59A82F85B692CEDBC5562F74
Authority key identifier: 37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/HZjj79RHJwkqAjzQtB1Rf2bD9mI.roa
Signing time: Tue 14 May 2024 08:54:25 +0000
ROA not before: Tue 14 May 2024 08:54:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 23422
IP address blocks: 83.143.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:4f:65:bf:59:a8:2f:85:b6:92:ce:db:c5:56:2f:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374e2729b17369890a1512f643cd08e4ba2ff414
Validity
Not Before: May 14 08:54:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d98e3efd44727092a023cd0b41d517f66c3f662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:1e:a1:ed:d6:dc:d7:52:2b:c3:a5:28:1c:
1d:1f:f4:e4:fb:f8:8a:36:5e:d2:d8:a7:f6:03:e4:
2a:b1:a7:95:da:e8:e4:60:d0:57:98:76:f5:9e:ee:
09:01:d9:2f:34:01:4a:6e:f1:80:08:01:4e:de:40:
e1:3b:7b:31:e1:21:66:19:f0:f2:5d:81:b3:c0:b0:
7a:2b:39:8a:56:6e:bf:28:f5:18:30:91:67:22:eb:
eb:52:d1:75:29:15:2c:98:71:03:93:fa:79:db:37:
ec:0e:c5:fb:a5:46:b2:d4:e8:e3:28:ec:63:c4:a0:
39:f1:65:e3:05:19:21:ad:11:fa:85:ed:22:d7:81:
7a:d9:cb:34:25:b5:5b:b0:ba:b7:89:5c:d6:cc:95:
58:76:d3:7b:1c:1b:e6:6b:7e:40:bc:7a:68:59:b3:
98:1b:7e:46:0d:fd:30:0a:1a:4f:8d:af:7c:26:f9:
26:ed:cd:ff:fb:75:8e:04:b4:ce:b9:6a:51:b3:2d:
2b:2f:b3:97:8c:fb:c3:8e:27:b6:f9:b5:5a:65:f4:
41:29:b1:8f:c4:e4:eb:c4:90:6f:34:b9:ca:c5:8c:
59:d9:b1:c8:9e:f9:6d:3e:64:b3:1b:ee:62:d1:4b:
c9:32:f0:48:eb:cd:cf:aa:e2:57:a9:c4:a2:76:36:
58:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:98:E3:EF:D4:47:27:09:2A:02:3C:D0:B4:1D:51:7F:66:C3:F6:62
X509v3 Authority Key Identifier:
keyid:37:4E:27:29:B1:73:69:89:0A:15:12:F6:43:CD:08:E4:BA:2F:F4:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N04nKbFzaYkKFRL2Q80I5Lov9BQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/HZjj79RHJwkqAjzQtB1Rf2bD9mI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/952230-c262-41cc-b956-cfc46a76ec78/1/N04nKbFzaYkKFRL2Q80I5Lov9BQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.143.106.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:6c:7f:5e:d3:96:0d:e3:01:90:fe:51:5f:bf:6d:0a:c0:73:
ea:33:b4:85:d0:86:ca:c5:b3:b1:1a:1d:60:5c:51:a8:34:53:
4f:20:68:76:57:d0:5a:db:8d:5e:0b:9e:54:81:0f:11:97:f2:
03:5e:15:6f:b1:a9:cd:f9:fd:8a:3f:15:7e:8a:62:2e:e7:84:
e8:dd:5f:17:be:87:73:3d:0d:4e:76:55:08:29:b5:79:1d:2e:
9f:37:a2:34:98:ac:4e:fe:7e:52:b2:b2:5a:96:f4:81:81:c2:
b1:31:15:36:20:f2:11:f8:17:07:37:7f:d3:ca:c0:38:80:c4:
19:cc:d6:66:c7:47:bb:1c:3e:1f:8d:67:f5:a4:90:7a:68:13:
69:86:3f:ee:6a:24:db:23:5d:5c:19:af:d0:4c:e8:90:98:e4:
91:fb:bb:0d:87:f1:59:e9:4f:12:eb:28:ae:24:04:74:6d:1a:
e2:70:34:4b:f4:6e:de:b9:43:53:34:2d:3d:ea:82:31:f9:9a:
ea:83:7a:69:e9:48:7a:01:03:37:b5:49:9e:ee:e9:e5:25:f0:
88:66:78:10:19:4c:aa:ef:f5:58:d9:cd:dc:c9:9c:f4:fc:19:
a3:97:e7:b8:6d:9d:45:d0:7b:11:77:fe:61:d0:67:5b:2e:f2:
57:cc:03:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 10:21:43 2024 by rpki-client on console-ams.rpki-client.org