Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Hw7KXx9rsSM2xIuXcEZoT41qEyA.roa
File: Hw7KXx9rsSM2xIuXcEZoT41qEyA.roa (raw, json)
Hash identifier: uWCp6ThHVIMvtPLKNTM2G9VQ7oraqrXgM1mR6I0PiM4=
Subject key identifier: 1F:0E:CA:5F:1F:6B:B1:23:36:C4:8B:97:70:46:68:4F:8D:6A:13:20
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01919D7B81FCFE6CF13A7FA3067CFC617C79
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Hw7KXx9rsSM2xIuXcEZoT41qEyA.roa
Signing time: Thu 29 Aug 2024 09:33:22 +0000
ROA not before: Thu 29 Aug 2024 09:33:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43278
IP address blocks: 95.182.102.0/24 maxlen: 24
95.182.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:9d:7b:81:fc:fe:6c:f1:3a:7f:a3:06:7c:fc:61:7c:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Aug 29 09:33:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f0eca5f1f6bb12336c48b977046684f8d6a1320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:cd:5f:14:09:07:31:b6:6d:b3:d3:a5:09:
d8:a7:c2:8d:73:a6:e9:b6:cf:69:b5:24:b4:f7:67:
bb:17:8c:66:a4:7f:96:29:2c:3c:6d:dc:08:51:28:
92:92:57:ee:8a:37:24:1e:4a:9c:69:b3:25:4c:98:
d8:a0:20:f0:0b:c7:73:72:a2:bc:05:32:f9:bb:15:
ce:c8:d2:58:d0:7d:f7:bd:9d:09:ca:b5:81:f3:cb:
2b:0a:8d:8b:83:4e:2f:67:75:8d:58:13:85:3f:4e:
1c:26:09:95:c0:aa:e8:e3:58:ce:02:1e:c6:d9:5e:
32:fc:83:be:d2:6b:95:66:e1:66:df:94:0e:66:a4:
d4:e1:3e:0a:a0:15:c0:06:04:b2:c7:47:fe:a9:39:
9a:bf:2c:e0:3b:67:ed:65:8b:9b:31:c6:24:77:4b:
71:e0:c8:af:97:58:05:e2:1b:bc:6c:44:12:fc:42:
4b:d4:15:07:bf:ff:f3:5f:72:39:c3:a3:c8:91:0c:
4a:cc:f9:18:a8:03:8e:c5:01:dd:b0:52:85:f5:e3:
a5:e6:90:66:fd:05:e7:05:16:7b:bc:0b:85:51:8a:
90:7b:23:a4:d0:b6:ef:09:e3:29:3c:b8:21:a3:3a:
5c:ba:f6:21:39:de:1a:09:94:5b:88:ac:09:03:05:
84:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:0E:CA:5F:1F:6B:B1:23:36:C4:8B:97:70:46:68:4F:8D:6A:13:20
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/Hw7KXx9rsSM2xIuXcEZoT41qEyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.182.102.0/23
Signature Algorithm: sha256WithRSAEncryption
17:4b:7c:20:a4:c8:21:38:41:be:6c:d0:ef:f6:16:6b:18:02:
a8:be:9c:f1:be:cc:e8:7d:d6:b6:49:37:08:94:4f:c8:98:be:
5c:18:2e:d0:bb:96:00:49:06:98:1b:c2:de:6e:e6:e2:a8:55:
73:71:59:13:69:01:68:5b:e4:97:9e:f5:9c:f7:2e:51:28:e1:
36:f4:05:e1:91:35:8d:82:c8:54:dc:61:51:7f:b3:3c:12:ca:
c8:20:d3:48:4e:f5:56:ca:50:50:92:a9:ff:ab:cb:00:5e:17:
95:e1:33:69:f5:95:e6:27:ee:05:50:b0:0d:96:4f:76:eb:3a:
63:d6:6d:5b:9b:06:e7:92:14:64:b9:20:ad:37:6e:7e:ce:c9:
31:10:c5:50:b6:32:4f:c5:83:ec:b0:39:10:31:e4:57:b3:4b:
d0:7e:bb:b0:21:e9:a5:23:8b:db:bf:b7:05:9b:91:17:71:b0:
69:f8:0d:de:04:57:a3:ff:f4:e2:10:3f:8e:24:51:20:dc:05:
17:40:c3:9a:96:63:8d:28:28:2a:c5:6f:b2:0c:9a:a6:01:16:
fc:25:3a:55:f1:07:47:11:7d:b8:ac:49:b7:53:ab:68:bc:40:
3a:c5:e5:7c:67:aa:c7:7e:31:57:d4:74:42:84:a6:5a:01:73:
93:18:7b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:54:05 2024 by rpki-client on console-fra.rpki-client.org