Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hgSNaL0UxuO0EK1fsrVHAcqkNDA.roa
File: hgSNaL0UxuO0EK1fsrVHAcqkNDA.roa (raw, json)
Hash identifier: LBMejMZNY68D7GhaHpmCBm3aRtUKShAwuiL4AF/E/T0=
Subject key identifier: 86:04:8D:68:BD:14:C6:E3:B4:10:AD:5F:B2:B5:47:01:CA:A4:34:30
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 018D417B8A3873D72731B5D038786527AFA4
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hgSNaL0UxuO0EK1fsrVHAcqkNDA.roa
Signing time: Thu 25 Jan 2024 16:37:11 +0000
ROA not before: Thu 25 Jan 2024 16:37:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205220
IP address blocks: 94.176.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 10:20:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:7b:8a:38:73:d7:27:31:b5:d0:38:78:65:27:af:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jan 25 16:37:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86048d68bd14c6e3b410ad5fb2b54701caa43430
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a5:a5:bb:1b:1a:e9:fa:f4:e4:be:0f:f7:85:
d5:9a:a7:0d:a9:80:d7:a1:26:de:cd:8d:d4:00:1b:
69:81:88:30:25:48:d0:75:3a:2d:06:1a:00:4e:ff:
c8:34:1e:f1:ee:4e:65:7e:71:09:e2:f2:07:63:85:
6d:7a:20:5c:99:82:52:ab:b6:5a:2a:ca:b7:80:2e:
95:11:3f:70:b2:0b:52:58:90:c4:f2:be:ae:c9:72:
a8:d3:47:0d:fd:89:f8:6f:cd:88:3c:1f:3e:bf:dd:
f4:c1:9d:24:61:d0:57:2e:f8:c2:c6:ac:fc:36:ea:
3b:f5:47:69:7c:83:d1:52:63:73:a1:48:08:72:63:
75:53:2b:16:cb:9d:96:43:5d:95:9b:4c:c4:2b:ae:
3f:e5:c6:59:1c:df:56:11:9b:5b:01:bc:bd:f2:21:
61:50:26:f0:d7:c0:30:92:a6:08:63:2b:b5:a2:f1:
a3:fc:03:0f:4d:29:55:8b:f1:ad:8e:90:fa:f5:2a:
87:dc:48:0f:44:a9:db:50:9d:49:d5:bd:69:cc:e9:
00:fe:e9:16:e2:66:8a:41:e9:2e:2f:20:82:39:2a:
6e:79:df:b4:13:21:92:99:be:16:95:07:1c:c9:20:
c4:3c:72:c3:c5:21:15:db:08:a3:1c:73:13:4f:9c:
f9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:04:8D:68:BD:14:C6:E3:B4:10:AD:5F:B2:B5:47:01:CA:A4:34:30
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/hgSNaL0UxuO0EK1fsrVHAcqkNDA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.176.215.0/24
Signature Algorithm: sha256WithRSAEncryption
83:1d:bf:06:63:d8:30:af:94:f4:bf:5e:51:26:05:35:9d:9b:
ba:87:28:48:f2:ea:71:86:09:73:69:cf:eb:2c:c4:7e:8c:4e:
59:64:86:7c:2a:9e:5e:c6:a5:2d:ff:63:52:0e:f5:18:52:f3:
a9:81:43:59:d7:41:89:cb:9e:8f:af:38:85:3a:71:5d:0c:0a:
72:0b:ca:7d:8a:8d:5b:d3:b6:ff:37:41:c1:e6:d3:c4:fb:7b:
51:e6:01:47:5e:22:93:ad:75:7e:fe:a3:3f:35:bb:66:06:54:
b9:41:d3:4e:5d:c3:90:27:ee:03:f2:c8:ac:88:8a:2d:7d:a8:
c6:40:ee:27:66:2d:f1:07:a3:19:8b:16:9b:43:f2:b9:04:dd:
73:7d:3a:86:59:74:05:ae:c9:60:ff:9b:58:71:7c:7b:46:41:
41:8c:5a:6b:a5:ce:54:bd:9f:26:87:81:19:74:e4:5b:96:28:
bc:20:ac:8d:29:cc:ae:c5:e1:24:1f:0e:f8:4b:eb:fc:28:2d:
8a:7b:ee:2d:fa:7c:7e:7d:d3:83:13:09:e2:71:61:71:d5:85:
f7:34:9f:1a:3a:0e:18:19:3a:e8:dd:33:69:8f:45:ca:c9:c8:
11:a4:ec:ea:e1:41:2a:ef:b2:5c:2f:4d:9c:0b:40:a1:8a:24:
66:dc:b1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 16:46:49 2024 by rpki-client on console-ams.rpki-client.org