Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/hnkWXUqcsKAXr3sJGZ3daSbQKKI.roa
File: hnkWXUqcsKAXr3sJGZ3daSbQKKI.roa (raw, json)
Hash identifier: 7NqoZaekKX2elSFonRYYzjSddXC8bgTqUnlJhlvTASo=
Subject key identifier: 86:79:16:5D:4A:9C:B0:A0:17:AF:7B:09:19:9D:DD:69:26:D0:28:A2
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 018CC9BCA1EB080020CFCA7A138D59DD5BEA
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/hnkWXUqcsKAXr3sJGZ3daSbQKKI.roa
Signing time: Tue 02 Jan 2024 10:33:51 +0000
ROA not before: Tue 02 Jan 2024 10:33:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1147
IP address blocks: 145.127.128.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 07 Jun 2024 20:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:a1:eb:08:00:20:cf:ca:7a:13:8d:59:dd:5b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Jan 2 10:33:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8679165d4a9cb0a017af7b09199ddd6926d028a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:93:3e:11:af:57:2f:31:6a:b6:f3:96:2d:
bd:00:47:5f:33:a9:b3:38:52:ed:39:78:d6:75:04:
ff:cb:7f:a6:31:3a:9f:72:d7:86:fa:b3:2a:d1:01:
37:72:4c:e7:d5:31:4c:6d:30:b5:1d:f3:9b:e9:5b:
b2:77:01:af:92:41:70:0c:c8:be:c5:5f:06:4c:c3:
95:73:29:5b:f9:a8:84:15:cb:a2:51:b4:af:fd:b5:
77:7e:83:1f:c1:7a:e0:7d:d6:d6:44:cd:b6:9c:93:
4f:44:39:48:37:08:45:b3:a2:c7:fe:1f:fb:15:ca:
ca:22:c5:4a:e3:4c:bd:42:17:82:b7:ad:f4:43:8c:
f1:59:d2:8f:8f:2c:a3:a4:45:8c:16:8b:e0:57:f2:
b8:2f:cf:17:61:bf:d7:ab:28:3d:63:38:2d:a9:94:
92:c7:79:3e:e6:8d:60:f2:73:06:88:cc:76:27:f5:
11:cf:a2:76:f8:34:91:db:31:66:7c:6a:a4:2c:e4:
5e:2c:94:02:a5:a1:4a:36:05:d8:30:9e:99:7a:2f:
a0:17:cc:f3:c7:e1:3b:2c:74:91:19:4a:3a:04:7c:
51:a2:a7:29:87:6a:87:af:54:d8:a4:ef:0a:f2:9b:
69:60:c2:bb:09:47:93:fd:b5:83:d5:e6:f8:e5:55:
fa:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:79:16:5D:4A:9C:B0:A0:17:AF:7B:09:19:9D:DD:69:26:D0:28:A2
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/hnkWXUqcsKAXr3sJGZ3daSbQKKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.127.128.0/17
Signature Algorithm: sha256WithRSAEncryption
0f:54:0b:16:a5:26:3b:3b:5e:1b:37:66:36:7d:c8:d1:3b:44:
61:6a:b1:8c:9d:f1:b8:d3:5a:f4:34:88:04:ff:b8:4b:26:69:
05:02:00:f4:f7:0a:54:50:6c:8e:ea:5e:f8:b9:0b:66:3a:a4:
9e:3d:2d:81:ed:96:b8:d5:76:91:75:8f:10:f7:86:79:34:0e:
90:5c:ae:79:8a:ec:23:f2:46:32:bd:ce:37:87:02:78:48:32:
9d:18:2b:6c:28:f1:0d:e6:0d:2e:39:a0:a2:73:9b:eb:25:b3:
58:73:59:b4:e8:db:ef:2d:45:51:14:e0:c6:82:28:42:a3:80:
77:6c:f3:51:8f:00:b1:a9:ef:0d:18:c4:fd:fd:65:f9:6f:55:
a0:b3:d0:95:d1:1b:76:5b:51:0f:8a:d2:0d:dc:fd:38:23:a7:
59:d5:25:4c:fb:9f:99:11:aa:3b:a4:6d:8f:75:de:88:0b:8f:
dc:14:b8:5d:d2:4d:16:0d:48:98:ff:85:33:1b:54:b9:4c:19:
7b:5a:38:62:77:85:ab:3e:41:a1:b9:da:fc:a1:a5:0b:19:fb:
93:9e:c7:cb:f7:80:d1:84:33:8d:b0:1f:7f:75:50:4f:7b:11:
08:dc:f2:00:0c:96:b5:cb:44:d8:f5:c2:7b:39:1b:ea:f2:35:
19:06:a7:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 00:48:23 2024 by rpki-client on console-ams.rpki-client.org