Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/hGqRcO15V0ZSHmUUh6loSfSlk0s.roa
File: hGqRcO15V0ZSHmUUh6loSfSlk0s.roa (raw, json)
Hash identifier: 54yTXVYwgQ5PgjFCRUsGim1xGGpCJrWCxW/H4go2TM8=
Subject key identifier: 84:6A:91:70:ED:79:57:46:52:1E:65:14:87:A9:68:49:F4:A5:93:4B
Certificate issuer: /CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Certificate serial: 018CC424F34CE68BF84D4177E6C046E8236E
Authority key identifier: 04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/hGqRcO15V0ZSHmUUh6loSfSlk0s.roa
Signing time: Mon 01 Jan 2024 08:30:04 +0000
ROA not before: Mon 01 Jan 2024 08:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41590
IP address blocks: 195.34.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:f3:4c:e6:8b:f8:4d:41:77:e6:c0:46:e8:23:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04d29211f92e560f0b7834bb2932ac63cabfa14a
Validity
Not Before: Jan 1 08:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=846a9170ed795746521e651487a96849f4a5934b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9d:e1:14:06:33:c5:90:1a:30:09:06:8e:38:
aa:4e:0f:f7:19:bf:ce:4c:38:b3:35:b4:d3:e3:f7:
be:87:0d:45:aa:e0:dc:46:63:c2:e9:c1:13:77:ad:
8d:f9:cd:63:fc:d7:5c:37:e4:6a:76:4e:a9:dd:40:
9d:29:54:56:78:d6:c2:c8:97:21:00:89:9e:b8:0f:
4f:90:0e:aa:8e:85:30:13:1b:fe:a3:f7:47:20:ce:
bf:41:68:8c:33:02:3c:0c:c7:38:74:c1:1a:87:ab:
4e:42:5f:59:c3:08:e6:2a:c6:2f:3d:e3:07:c3:51:
f1:d6:54:21:18:ad:c1:05:26:86:41:44:e7:9c:23:
6d:40:14:76:62:ba:69:38:1c:d4:8a:c7:e8:3e:ab:
e4:8d:ed:f1:45:ef:3c:b2:09:84:7a:39:d0:e7:7f:
18:12:6c:bc:dc:35:fd:22:b7:ff:50:e4:44:41:8a:
21:6a:e8:a1:ef:60:69:1d:3a:9c:a2:2e:34:6c:b8:
39:19:8d:fe:99:14:b7:d6:82:d6:13:5e:43:83:6b:
60:92:6b:c9:a3:9f:2f:0e:8f:24:83:0a:a6:c2:26:
20:32:de:c5:45:54:a3:5d:08:6e:89:47:36:8b:55:
34:89:51:6b:11:0c:e1:83:6b:06:fe:6a:34:79:51:
88:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6A:91:70:ED:79:57:46:52:1E:65:14:87:A9:68:49:F4:A5:93:4B
X509v3 Authority Key Identifier:
keyid:04:D2:92:11:F9:2E:56:0F:0B:78:34:BB:29:32:AC:63:CA:BF:A1:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BNKSEfkuVg8LeDS7KTKsY8q_oUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/hGqRcO15V0ZSHmUUh6loSfSlk0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f6ac34-6bc3-417b-814d-e8d19296395c/1/BNKSEfkuVg8LeDS7KTKsY8q_oUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.34.88.0/23
Signature Algorithm: sha256WithRSAEncryption
cc:57:69:6c:79:52:b5:f3:4a:84:fd:91:c9:7e:90:cf:ee:81:
0e:53:d2:b1:58:0b:5a:8b:2c:c0:ae:19:21:38:d3:23:bc:0d:
d3:ac:bf:4d:9f:df:80:f0:08:d7:2f:ca:93:ca:4a:27:ed:74:
06:da:f8:bc:8f:1d:43:d4:0a:60:cd:55:ba:dc:17:f4:c6:0c:
e6:c0:5a:02:28:a3:69:9c:8a:59:fa:01:46:ff:94:98:b2:42:
67:bb:f4:a8:e9:5f:e4:f2:cc:63:2e:4c:76:b1:35:28:84:30:
f5:8a:92:76:00:f0:ee:0b:d1:b0:85:39:98:8a:1c:5d:08:39:
57:03:b6:48:8d:2f:55:ea:95:94:b7:76:f3:0e:2a:74:46:7b:
b3:c8:a1:2c:42:34:27:83:1d:96:7a:ad:2b:7a:21:db:e1:7c:
a3:98:72:d8:dc:8c:cc:a3:46:f0:0c:27:f4:48:ec:aa:c2:01:
d9:25:12:c1:c6:11:15:85:d1:b7:45:7a:9a:04:8a:96:86:43:
46:69:29:81:7f:12:05:1f:ca:7d:2f:cf:81:fd:4b:41:85:04:
61:73:3f:3b:99:c5:8b:e1:24:9b:c5:78:d8:57:73:cd:02:64:
ef:75:4e:2e:f4:87:3e:09:64:da:a6:dd:3c:d6:52:2a:0f:f1:
58:d5:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:37 2024 by rpki-client on console-ams.rpki-client.org