Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/HKYXuhb1IzMtjlvETNDmCgEmPQQ.roa
File: HKYXuhb1IzMtjlvETNDmCgEmPQQ.roa (raw, json)
Hash identifier: lbIE8D99hG8ZIBHDOkoVTLuMFrO9nZnOkvOjjk66KJM=
Subject key identifier: 1C:A6:17:BA:16:F5:23:33:2D:8E:5B:C4:4C:D0:E6:0A:01:26:3D:04
Certificate issuer: /CN=78d636c505d56af42a414c167d52407d356b3d0b
Certificate serial: 01922B0DF8188D74799CF78439ADA1E4CD31
Authority key identifier: 78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/HKYXuhb1IzMtjlvETNDmCgEmPQQ.roa
Signing time: Wed 25 Sep 2024 21:19:48 +0000
ROA not before: Wed 25 Sep 2024 21:19:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209824
IP address blocks: 91.204.168.0/22 maxlen: 22
188.65.144.0/21 maxlen: 21
2a00:1aa0::/29 maxlen: 29
2a00:1aa0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:2b:0d:f8:18:8d:74:79:9c:f7:84:39:ad:a1:e4:cd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78d636c505d56af42a414c167d52407d356b3d0b
Validity
Not Before: Sep 25 21:19:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ca617ba16f523332d8e5bc44cd0e60a01263d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d9:b7:44:e2:3e:0c:fc:a5:71:5c:d3:5f:ba:
52:0b:55:ce:42:15:e2:fd:b2:24:42:4a:b6:ec:23:
ae:2e:6a:0d:42:e2:67:9b:0d:d5:e5:75:4b:1b:85:
60:fb:ab:79:68:10:27:db:31:47:78:9b:9f:a3:99:
b6:9b:fe:35:89:73:02:7c:ce:21:73:99:17:4d:a6:
17:f3:8f:b5:cc:eb:99:76:d3:2e:ab:74:ba:a5:67:
72:4c:0a:3a:03:95:cf:f0:1a:54:cb:c4:7f:e1:03:
3b:6d:31:02:ea:f8:9e:5f:74:10:fa:0d:0d:bd:13:
05:67:dd:bb:b1:a0:f5:61:51:83:f4:66:63:ec:12:
c4:d2:71:34:69:92:60:33:97:88:1c:af:88:15:06:
7a:c5:3a:e7:4f:37:bd:94:6e:7f:a3:51:d4:24:c2:
1b:eb:43:b1:9d:8c:df:90:3b:f4:83:c0:23:15:46:
30:73:18:ef:14:34:a3:ac:99:da:b5:b5:a0:95:92:
43:e0:28:d4:cd:03:c2:92:3e:28:0b:b3:51:c0:f3:
4e:27:64:a1:2c:56:1c:9e:76:14:05:dc:c3:fa:c4:
0a:c7:37:6a:9e:79:b4:bd:67:92:4b:e5:00:c5:61:
2a:a1:5b:4f:a8:16:04:e9:91:58:b6:17:44:10:02:
a9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A6:17:BA:16:F5:23:33:2D:8E:5B:C4:4C:D0:E6:0A:01:26:3D:04
X509v3 Authority Key Identifier:
keyid:78:D6:36:C5:05:D5:6A:F4:2A:41:4C:16:7D:52:40:7D:35:6B:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eNY2xQXVavQqQUwWfVJAfTVrPQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/HKYXuhb1IzMtjlvETNDmCgEmPQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/1fa945-50e7-479a-9d92-ddcd4d935030/1/eNY2xQXVavQqQUwWfVJAfTVrPQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.168.0/22
188.65.144.0/21
IPv6:
2a00:1aa0::/29
Signature Algorithm: sha256WithRSAEncryption
34:b5:79:53:c3:6d:05:3e:f8:d4:f9:0d:46:d9:ff:d3:ec:97:
be:b7:33:f8:1a:45:6d:2e:c9:c0:6f:e2:92:64:0e:a5:a9:3b:
2c:dd:82:10:76:f2:86:2b:a3:12:d5:53:2a:72:dc:5e:65:a8:
e4:69:cc:bd:c9:36:09:45:ed:d3:7a:20:7d:4c:0d:f4:dd:03:
3a:9b:ea:c3:ae:a0:e2:a4:57:b0:78:a6:ca:c0:b6:c2:fd:6f:
f2:e8:48:bb:23:43:15:68:be:a4:5e:2c:ed:b0:66:ab:68:a1:
4d:5d:1f:16:04:7c:70:d0:09:11:fc:8b:9a:af:90:cf:eb:b1:
df:0b:6d:02:db:5f:16:a1:38:98:a9:6f:a3:b9:b2:d5:46:bb:
65:61:80:a1:cf:29:ef:3f:52:e2:49:31:94:bb:5e:6f:89:d0:
91:c4:a0:80:b6:8a:19:d2:d7:75:57:20:b3:91:c7:e6:49:0c:
a2:15:d9:ba:f6:c2:45:14:80:da:ac:77:5b:11:b8:45:f6:fb:
82:d4:04:6d:51:f2:1a:70:3a:4a:1e:ae:9e:5e:ac:7f:aa:b3:
aa:68:c5:2f:3d:41:93:dc:02:3d:00:c3:0e:6a:d8:42:9e:5c:
9d:ca:18:78:aa:3f:26:c1:2b:7f:da:15:77:be:05:73:e0:16:
00:28:b2:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:32:19 2024 by rpki-client on console-ams.rpki-client.org