Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/hjBQjSjNlyE2NslsrT6MQftQsZw.roa
File: hjBQjSjNlyE2NslsrT6MQftQsZw.roa (raw, json)
Hash identifier: K4kc1KSO3bLSGhh6XpmyhIIlmUgGLCsVXeNj6/tU9ak=
Subject key identifier: 86:30:50:8D:28:CD:97:21:36:36:C9:6C:AD:3E:8C:41:FB:50:B1:9C
Certificate issuer: /CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Certificate serial: 018CC726F1CC236BBDC2D3024DFE900FF59E
Authority key identifier: A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/hjBQjSjNlyE2NslsrT6MQftQsZw.roa
Signing time: Mon 01 Jan 2024 22:31:07 +0000
ROA not before: Mon 01 Jan 2024 22:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 185.184.176.0/22 maxlen: 22
77.111.232.0/22 maxlen: 22
188.227.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.mft
rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:f1:cc:23:6b:bd:c2:d3:02:4d:fe:90:0f:f5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6bb3045aea78e8fa7648129714fb736068dc37b
Validity
Not Before: Jan 1 22:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8630508d28cd97213636c96cad3e8c41fb50b19c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:db:c8:28:d2:e1:d8:c2:82:e2:73:56:a2:7c:
30:1f:2c:6c:3f:e9:9e:a5:27:37:19:3b:b2:c6:81:
57:fa:87:d6:b4:ea:15:87:a6:46:17:4e:92:5c:3b:
6e:4a:5f:c0:f0:37:d0:db:bb:d7:c9:09:d1:eb:2e:
9e:30:62:a1:1e:45:78:3d:b0:5a:ab:ac:57:71:82:
32:ad:b5:57:06:10:1d:b0:7d:fa:96:fc:31:71:4c:
85:38:fb:96:fc:df:5b:13:8a:86:13:5e:ef:d3:b4:
5e:24:4e:1d:e0:85:48:76:8b:4b:02:6c:87:76:bb:
12:d7:9d:3f:a2:da:32:97:38:63:ac:9b:fc:b8:9f:
6c:dd:19:e2:a2:a9:ac:1c:03:2e:ca:99:51:45:77:
c7:a7:d0:c2:83:70:86:ed:cf:9b:e9:70:63:a7:e7:
a2:1f:a0:59:b0:be:7a:0d:06:c0:7f:04:33:87:a7:
9c:73:15:92:af:80:62:17:87:01:c9:32:fc:42:32:
ea:54:98:a0:08:2c:6c:65:67:15:e4:56:63:51:5c:
8d:96:03:ec:bf:b3:d8:28:2d:e5:f3:d4:a6:0e:86:
be:04:20:54:1a:ea:a4:4d:3f:5e:42:d0:d3:5c:11:
bc:df:cc:51:df:cc:eb:1b:41:e2:90:e8:7e:7e:ac:
81:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:30:50:8D:28:CD:97:21:36:36:C9:6C:AD:3E:8C:41:FB:50:B1:9C
X509v3 Authority Key Identifier:
keyid:A6:BB:30:45:AE:A7:8E:8F:A7:64:81:29:71:4F:B7:36:06:8D:C3:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prswRa6njo-nZIEpcU-3NgaNw3s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/hjBQjSjNlyE2NslsrT6MQftQsZw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/41eaf9-656d-40d9-9f7a-334de3d76fe5/1/prswRa6njo-nZIEpcU-3NgaNw3s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.111.232.0/22
185.184.176.0/22
188.227.200.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:68:3e:4e:85:6b:8f:02:48:05:78:de:bd:71:76:42:c0:7d:
bd:0e:6f:b8:47:28:21:4c:01:16:20:67:ff:93:c7:fa:f2:a5:
99:71:18:d8:69:c0:d6:34:23:a9:9a:cc:3b:9a:0d:26:15:63:
bf:a4:e6:ac:80:a0:cb:7f:94:a4:20:24:75:5e:64:0b:1e:cd:
3a:64:71:37:e9:db:14:03:34:80:b7:d5:d6:a4:af:6f:76:2a:
39:8b:a3:74:ea:e4:de:cf:bc:9b:26:1b:80:b6:33:24:f2:59:
4f:c8:08:a9:98:b4:d2:40:4e:df:fd:15:c9:59:cc:05:28:47:
01:5f:09:fa:0f:77:de:41:7c:0b:2b:52:62:28:18:eb:8e:5b:
a8:26:cd:ef:ba:b8:8f:cc:59:4a:5b:3b:bc:06:b2:94:62:c4:
ac:df:e8:64:57:ef:f7:88:77:5a:dc:02:b8:02:83:dc:4c:a1:
dc:1c:e1:3c:2c:57:7c:3d:6d:fb:c6:49:57:30:d2:24:85:27:
1f:ef:c4:f5:cb:ba:0d:c5:16:88:a7:00:56:f0:cf:4f:57:19:
bf:80:91:31:60:18:07:a7:a9:54:32:d6:7c:b8:db:91:28:93:
ea:60:2a:97:50:33:49:a3:c7:bd:b1:98:dc:1e:dc:ff:38:ac:
dc:40:01:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:06:52 2024 by rpki-client on console-fra.rpki-client.org