Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/HXKf_8gBgpM08fP0Bt6uwqRRZ-8.roa
File: HXKf_8gBgpM08fP0Bt6uwqRRZ-8.roa (raw, json)
Hash identifier: qrK0bQyiju8np0f5gPg8YmbnkcPmGKFrgM/jaoNMZ0U=
Subject key identifier: 1D:72:9F:FF:C8:01:82:93:34:F1:F3:F4:06:DE:AE:C2:A4:51:67:EF
Certificate issuer: /CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Certificate serial: 018CC64A07B97D110FB82100A56EA6A34189
Authority key identifier: F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/HXKf_8gBgpM08fP0Bt6uwqRRZ-8.roa
Signing time: Mon 01 Jan 2024 18:29:49 +0000
ROA not before: Mon 01 Jan 2024 18:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6830
IP address blocks: 176.103.228.0/22 maxlen: 22
31.133.92.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:07:b9:7d:11:0f:b8:21:00:a5:6e:a6:a3:41:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4b9ea4d9d83a728dd41029e86af8a130d389ed4
Validity
Not Before: Jan 1 18:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d729fffc801829334f1f3f406deaec2a45167ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:65:68:10:80:04:66:d1:23:9e:2e:60:22:73:
e0:52:97:58:89:a8:ff:62:4e:fa:95:7a:d6:96:ce:
71:0a:9f:04:55:b7:cb:9d:95:26:6d:0c:b3:74:0c:
cb:8e:54:ac:4d:fd:df:29:21:02:13:12:49:ed:42:
1f:74:a8:1f:31:47:89:c0:f8:49:b6:21:2e:a0:2b:
3f:bb:6e:de:6e:61:3f:29:92:b6:8b:2e:ec:08:4e:
d4:a5:da:9f:b2:cd:f8:6d:58:c8:11:54:99:31:96:
ef:69:56:77:9e:d6:b5:3b:56:d0:69:f8:b7:fe:df:
84:38:08:c7:71:53:c6:a0:85:cb:77:45:73:b2:15:
37:33:ea:ab:a0:73:12:92:20:09:f2:7d:bc:64:dd:
73:51:a1:9e:b4:93:79:79:ac:e3:10:ef:d5:c9:7f:
51:b7:a6:d1:cf:93:15:32:34:dd:b9:ef:d4:00:cf:
63:04:ba:b6:27:d8:3f:71:80:7a:6d:5d:53:43:cf:
38:41:49:fd:89:ff:17:f3:c2:16:1b:2d:de:91:42:
64:c5:8f:cc:0e:d0:fa:c5:78:e3:f7:ed:87:d5:19:
fa:f1:ea:d3:f5:ab:04:5a:44:79:1b:0a:eb:4c:b9:
44:3b:f8:7a:98:9e:6c:57:d2:10:bf:92:a0:48:1c:
65:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:72:9F:FF:C8:01:82:93:34:F1:F3:F4:06:DE:AE:C2:A4:51:67:EF
X509v3 Authority Key Identifier:
keyid:F4:B9:EA:4D:9D:83:A7:28:DD:41:02:9E:86:AF:8A:13:0D:38:9E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LnqTZ2DpyjdQQKehq-KEw04ntQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/HXKf_8gBgpM08fP0Bt6uwqRRZ-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/14f305-013b-453e-ac53-081cb2b17ab5/1/9LnqTZ2DpyjdQQKehq-KEw04ntQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.92.0/22
176.103.228.0/22
Signature Algorithm: sha256WithRSAEncryption
79:c4:c5:90:ed:11:14:22:ac:3b:3b:d1:4f:5c:d9:ec:53:d0:
57:04:c4:b9:3b:26:61:d0:73:9c:62:01:c6:f4:3b:d5:03:c5:
68:d0:dc:76:5f:f0:16:b7:50:97:2b:20:33:c7:33:fc:80:dc:
ca:4f:71:35:87:f5:33:7a:90:ad:dd:10:87:43:80:75:c0:53:
28:2a:8f:d4:b7:73:0e:11:1a:66:0c:cb:6d:57:ad:4a:71:ec:
ff:15:82:fa:d5:57:9c:78:ff:72:b4:e7:45:6d:d9:8c:71:d8:
ee:40:3e:56:50:20:2c:40:0e:68:6d:3d:fc:e2:16:2c:f3:be:
1c:f8:58:30:b0:5b:36:7e:a0:6b:ff:bc:06:aa:83:aa:ba:a4:
da:5a:f7:2c:17:39:02:17:62:f1:cb:6f:f3:99:00:00:0d:11:
98:0d:6b:5a:80:b5:99:af:34:61:02:ae:03:27:83:f8:9c:b9:
bf:b9:dc:6c:ca:ab:01:3d:85:9f:b0:8c:46:5c:84:25:29:b0:
49:e5:b4:c4:b8:14:b3:37:1e:3d:73:9a:ca:28:24:90:ef:cf:
03:1c:79:34:4b:c6:b2:c3:58:16:f5:11:33:87:c0:6e:fb:64:
a3:de:5c:f4:e6:80:c0:c7:78:71:3e:6c:06:55:c2:f6:a1:e8:
37:18:29:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:20:14 2024 by rpki-client on console-ams.rpki-client.org