Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/RHLrVhnqgRTqTrRub7sRGKpzbWg.roa
File: RHLrVhnqgRTqTrRub7sRGKpzbWg.roa (raw, json)
Hash identifier: p5GOiwGn0evIT9WzH+q7OTSa/9rTi99OE3xQeI6+A4g=
Subject key identifier: 44:72:EB:56:19:EA:81:14:EA:4E:B4:6E:6F:BB:11:18:AA:73:6D:68
Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial: 0190B5CDFDC8E316DAF1E492DD2C9075878F
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/RHLrVhnqgRTqTrRub7sRGKpzbWg.roa
Signing time: Mon 15 Jul 2024 09:51:34 +0000
ROA not before: Mon 15 Jul 2024 09:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1103
IP address blocks: 192.42.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 17:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:b5:cd:fd:c8:e3:16:da:f1:e4:92:dd:2c:90:75:87:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
Validity
Not Before: Jul 15 09:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4472eb5619ea8114ea4eb46e6fbb1118aa736d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3c:89:2b:92:82:7e:9e:80:39:59:1c:00:b8:
9e:96:b7:dd:14:5d:02:cf:1e:b5:6f:e6:84:62:12:
d7:1e:a8:51:31:00:ca:e1:a4:e8:53:14:0d:7b:47:
7f:e2:0c:9a:44:52:93:97:f0:34:e7:46:94:d3:bb:
c0:95:57:43:1f:02:84:3a:53:16:4c:ac:7b:39:71:
71:48:22:d7:91:1a:1c:4b:38:dc:a0:dc:ed:0e:c9:
7c:d5:91:2c:3a:dd:23:f5:66:c8:ca:6e:7f:93:b2:
7d:21:55:3c:1d:99:b4:09:3c:3a:e5:88:48:09:45:
67:19:14:5c:06:2b:8a:41:e9:da:bb:ff:f5:d6:3c:
3c:f7:af:f3:17:5b:81:1e:2d:09:42:d5:64:94:13:
73:87:be:90:f2:d8:d2:2b:ae:fa:57:cc:47:26:d3:
5d:ab:12:f3:ee:f9:cd:52:ea:3e:e0:c7:8e:02:f7:
11:66:ff:17:33:42:e4:8f:3d:96:05:77:5f:89:72:
89:b6:50:80:2e:2a:8b:91:59:37:7e:01:7c:20:13:
a6:d5:5b:48:a1:67:76:f2:13:5f:71:b5:79:fb:37:
21:27:6f:01:93:79:f4:ba:54:a0:5d:ca:85:1e:e6:
ef:6c:ef:a8:7b:82:c0:86:d4:1c:47:83:f9:6f:a2:
d1:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:72:EB:56:19:EA:81:14:EA:4E:B4:6E:6F:BB:11:18:AA:73:6D:68
X509v3 Authority Key Identifier:
keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/RHLrVhnqgRTqTrRub7sRGKpzbWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.42.124.0/22
Signature Algorithm: sha256WithRSAEncryption
77:49:b1:9d:0a:c8:5f:4a:37:5d:89:31:a8:1c:17:e0:13:a5:
6a:7d:4b:79:4a:c1:37:0a:74:ef:e2:dd:d7:22:14:b2:83:f2:
a9:30:98:c4:42:12:0b:f4:b9:70:8c:97:2b:1c:74:06:c1:65:
ff:73:60:6d:fa:07:ad:5b:42:3d:d2:cf:84:07:df:3e:d7:70:
ba:e1:7b:ff:bd:25:80:e9:ea:99:64:a8:dd:a2:19:f9:2f:29:
39:60:e0:24:89:46:ca:f4:6b:1f:7f:68:51:51:61:eb:96:31:
d5:cf:c9:75:d5:4b:9c:23:3d:f7:43:77:f1:6f:cb:ed:3e:c6:
5e:02:18:46:6f:f6:82:8f:77:8d:d5:1e:0c:d6:81:3e:81:93:
ac:45:d4:df:b3:b6:94:5d:4b:e3:27:c4:8f:c1:b4:95:1c:6a:
71:9e:eb:02:62:9f:88:29:41:c2:2e:d9:5a:22:9b:8a:7d:65:
74:c6:e8:1b:f0:ba:da:aa:98:d4:d9:fc:69:73:19:7e:dd:2a:
bb:e8:f4:45:25:77:14:5d:10:6d:ee:cb:9c:54:23:c9:fe:40:
4d:0e:8f:14:db:5b:fd:16:ca:b3:c2:2e:6f:4a:db:ad:1d:f0:
38:9f:3f:d0:44:30:ce:55:00:5a:54:a8:3c:03:77:b7:64:3f:
3a:94:4a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:30:41 2024 by rpki-client on console-fra.rpki-client.org