Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/hnsEPSgfNb_dsPgblQIItMN1wv8.roa
File: hnsEPSgfNb_dsPgblQIItMN1wv8.roa (raw, json)
Hash identifier: MTnq+UDECUCzniKYyVbZtGRfeQTbtaYbpUS06qKiY6c=
Subject key identifier: 86:7B:04:3D:28:1F:35:BF:DD:B0:F8:1B:95:02:08:B4:C3:75:C2:FF
Certificate issuer: /CN=02b610cd43bafced91480fabfdcaae82049fbf71
Certificate serial: 01932B4480AC04D270A5D16AF15743613F25
Authority key identifier: 02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/hnsEPSgfNb_dsPgblQIItMN1wv8.roa
Signing time: Thu 14 Nov 2024 15:22:09 +0000
ROA not before: Thu 14 Nov 2024 15:22:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51115
IP address blocks: 81.161.98.0/23 maxlen: 24
178.248.232.0/21 maxlen: 24
185.65.148.0/22 maxlen: 24
185.94.108.0/22 maxlen: 24
195.43.92.0/23 maxlen: 24
195.43.92.0/24 maxlen: 24
2a03:70c0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:2b:44:80:ac:04:d2:70:a5:d1:6a:f1:57:43:61:3f:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02b610cd43bafced91480fabfdcaae82049fbf71
Validity
Not Before: Nov 14 15:22:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=867b043d281f35bfddb0f81b950208b4c375c2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:94:9c:34:c1:b7:12:db:0c:fd:4b:c8:10:
a0:7f:60:12:4e:c3:e1:76:71:21:e2:60:8e:0e:b5:
2b:43:73:17:70:4a:72:02:95:8b:b9:12:2f:d1:86:
df:42:3e:86:f0:60:f9:ec:4a:0d:0b:4b:59:7b:79:
3f:5d:f9:cf:3b:63:1f:f1:62:7f:f9:28:ff:82:2f:
73:83:0a:25:a6:e6:43:bf:e9:38:2f:eb:4b:6f:67:
b6:63:a9:55:07:cd:1f:0b:84:6f:9e:27:d9:40:26:
11:0a:83:1f:e8:69:f3:30:66:fd:8e:51:00:ab:9f:
2e:7e:fd:e5:d2:e9:18:08:eb:61:ec:df:41:11:e3:
85:3a:e7:ee:0d:cc:c5:a7:5e:08:8c:55:6a:c2:e6:
88:9c:fb:88:8a:12:97:4f:81:83:a2:06:d2:f1:fd:
b4:64:49:bd:c9:04:03:0b:a8:42:76:65:b4:17:89:
1c:9b:28:71:3e:5b:fc:44:c1:47:55:71:f6:09:ae:
29:ba:80:3c:0d:be:db:1b:dc:e0:42:b1:42:32:18:
8a:70:de:34:81:be:01:e7:f6:8e:50:53:e3:20:59:
98:a8:72:54:d8:63:dd:e0:fa:05:37:37:14:aa:6d:
e8:90:7d:ae:60:d7:90:7e:d7:ab:39:ad:fb:76:69:
6d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7B:04:3D:28:1F:35:BF:DD:B0:F8:1B:95:02:08:B4:C3:75:C2:FF
X509v3 Authority Key Identifier:
keyid:02:B6:10:CD:43:BA:FC:ED:91:48:0F:AB:FD:CA:AE:82:04:9F:BF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ArYQzUO6_O2RSA-r_cquggSfv3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/hnsEPSgfNb_dsPgblQIItMN1wv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/e3decc-3ef7-4cb2-81d1-9013ca996b16/1/ArYQzUO6_O2RSA-r_cquggSfv3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.98.0/23
178.248.232.0/21
185.65.148.0/22
185.94.108.0/22
195.43.92.0/23
IPv6:
2a03:70c0::/32
Signature Algorithm: sha256WithRSAEncryption
4f:80:39:1c:eb:62:51:ab:90:49:25:4c:93:9b:69:80:cd:cd:
99:fd:28:d8:73:33:b3:e4:aa:a2:58:11:5b:ca:f9:f4:c2:1e:
27:6d:b9:b3:52:06:66:9d:42:c8:88:0d:96:94:ce:31:ba:91:
a7:9c:26:3f:d7:05:46:04:c2:0c:f3:46:eb:f7:62:2b:ce:d4:
8c:bf:18:e2:64:eb:f1:a8:95:25:66:13:b4:96:fc:ca:30:f6:
db:7b:54:3c:17:73:65:24:91:65:d3:3f:78:10:c8:68:4d:80:
6d:8e:b0:39:00:12:ce:35:26:6c:65:48:73:4a:18:c7:83:81:
f2:f8:cb:d6:9c:c4:52:9e:64:fc:53:a9:eb:0d:07:93:e6:5e:
67:32:f8:83:0f:53:7b:2d:ff:4d:ec:d9:1a:a2:e2:0c:c0:e0:
f2:8b:f7:ac:cd:bf:35:db:b5:31:3e:4d:14:c1:27:db:7b:e5:
4f:7b:c2:68:0f:1a:60:63:53:3b:46:a0:c7:db:bf:33:7c:01:
2f:e8:b1:2a:82:78:f1:10:f0:df:5d:9e:83:6e:b6:7a:13:58:
d6:30:b3:9c:58:67:a0:1e:a6:c1:ea:fd:c1:be:92:d1:23:5e:
fe:43:9a:b7:43:a2:fd:9e:10:35:fd:76:dd:d7:39:93:94:f4:
71:db:c0:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 02:49:45 2024 by rpki-client on console-fra.rpki-client.org