Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/HZtMuZhFbXvYxfRHOVQ-39uPw8o.roa
File: HZtMuZhFbXvYxfRHOVQ-39uPw8o.roa (raw, json)
Hash identifier: SoGpCOAKUAFbY8MOVipGGK7QTCjHjdIjC8r8TPw5CGw=
Subject key identifier: 1D:9B:4C:B9:98:45:6D:7B:D8:C5:F4:47:39:54:3E:DF:DB:8F:C3:CA
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 018CC3B73C44B337DD38964B14BCE60D61F8
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/HZtMuZhFbXvYxfRHOVQ-39uPw8o.roa
Signing time: Mon 01 Jan 2024 06:30:14 +0000
ROA not before: Mon 01 Jan 2024 06:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198952
IP address blocks: 90.85.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 31 May 2024 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:3c:44:b3:37:dd:38:96:4b:14:bc:e6:0d:61:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 06:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d9b4cb998456d7bd8c5f44739543edfdb8fc3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:c0:74:74:32:59:b3:14:08:81:b6:3c:82:8f:
06:0a:71:eb:ff:f7:b5:07:6f:8f:31:b6:41:f9:27:
a9:c5:db:d1:37:55:f2:13:27:7a:b9:61:10:08:b3:
26:ad:8f:19:cb:ad:d7:ca:65:e0:57:fb:48:a8:f4:
da:ee:f4:b8:6e:b4:77:96:49:9d:6f:4d:a8:dd:8d:
72:f4:b6:b9:3d:c7:a4:c0:56:52:40:dc:b6:ed:02:
9e:d1:8b:3c:00:73:7a:8b:2e:2d:17:8b:e9:9d:87:
4d:75:30:d3:82:a0:ea:00:e4:48:7d:81:51:c9:ed:
96:48:56:e4:04:23:85:ba:77:cc:d3:60:6f:73:d0:
2a:e9:ef:58:4c:4c:86:62:e8:3e:cb:41:ad:eb:8c:
50:11:01:5f:7e:ef:b1:f6:3f:17:1f:c4:3e:2d:24:
e0:65:bb:80:23:33:f2:ec:15:ec:7f:28:6b:29:23:
96:e0:00:6e:54:a9:01:e5:ba:65:0a:d4:36:13:d2:
1f:a7:eb:f2:63:3f:e5:28:1a:86:51:53:38:ee:c4:
c3:c0:0a:cc:c9:14:b2:8e:05:15:1d:89:d0:d7:dc:
ac:ef:3b:b8:fd:fe:4c:13:ac:bd:d0:0d:3a:84:9f:
c0:bd:47:af:9a:cf:02:03:80:3a:02:1f:bd:d8:86:
ed:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:9B:4C:B9:98:45:6D:7B:D8:C5:F4:47:39:54:3E:DF:DB:8F:C3:CA
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/HZtMuZhFbXvYxfRHOVQ-39uPw8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.85.2.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:1b:91:07:f7:be:28:bb:64:74:c7:68:00:62:9e:e8:5a:cd:
80:00:f9:98:6b:b4:7b:6a:32:c1:ef:e8:2e:2d:ff:fb:af:48:
4b:70:d8:07:bb:f1:6b:34:f0:cd:6b:3e:b1:91:45:20:ed:7a:
08:98:42:04:c2:2f:75:1d:75:bb:67:66:78:2a:84:8a:a3:26:
07:0c:bd:d1:a9:28:5d:bb:ff:5b:09:54:ed:cd:31:88:a0:7b:
7e:d0:03:c3:66:47:74:0b:23:e0:15:eb:f5:51:17:07:0c:4e:
dd:ac:d8:b4:4f:81:2d:ee:a6:25:28:ae:aa:48:59:d0:94:64:
93:eb:94:99:22:23:56:68:ab:88:6c:95:b9:ea:65:d8:80:62:
7d:c8:f0:37:d2:57:36:03:41:6a:35:97:86:e4:55:7b:a5:36:
4c:d3:93:d9:8f:3a:26:ce:0e:ef:ed:5f:2c:c2:a5:27:2e:5c:
08:51:64:f4:0f:88:1a:b4:2e:d1:60:36:9e:0a:b5:6b:43:c7:
6d:c6:5c:47:ef:5d:98:75:3e:a7:58:0f:de:34:01:49:e2:5e:
45:76:bd:11:48:b9:db:3a:1b:b1:fe:5d:de:db:b5:72:e6:58:
01:ff:3e:cf:31:c1:27:78:4a:0c:43:62:33:e3:9f:8c:87:c0:
4e:c4:3c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 12:38:29 2024 by rpki-client on console-ams.rpki-client.org