Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/HO9kjgkyYNBz2zCAwYWaHLiMXeY.roa
File: HO9kjgkyYNBz2zCAwYWaHLiMXeY.roa (raw, json)
Hash identifier: BsNB48b6dfafnMvBJJPQCGBHwogCYwQm7oqsEfHLjjk=
Subject key identifier: 1C:EF:64:8E:09:32:60:D0:73:DB:30:80:C1:85:9A:1C:B8:8C:5D:E6
Certificate issuer: /CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Certificate serial: 018CC9BBB839C37A4E16A7F6C8AC684BB1E7
Authority key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/HO9kjgkyYNBz2zCAwYWaHLiMXeY.roa
Signing time: Tue 02 Jan 2024 10:32:51 +0000
ROA not before: Tue 02 Jan 2024 10:32:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204114
IP address blocks: 185.25.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:b8:39:c3:7a:4e:16:a7:f6:c8:ac:68:4b:b1:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Validity
Not Before: Jan 2 10:32:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cef648e093260d073db3080c1859a1cb88c5de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b4:65:2f:29:b9:5b:3c:c1:97:4e:36:da:c7:
20:19:61:a9:ee:38:b9:28:77:f6:f7:fa:63:4f:1b:
76:9d:8b:d8:46:07:6f:26:b7:f2:ef:37:6a:86:b1:
e8:51:17:8f:0e:8a:5e:bd:14:5d:74:be:25:29:69:
c0:ce:16:24:ee:a0:f9:76:52:1b:8b:9d:4e:d0:dc:
55:13:07:6f:e1:4b:20:f1:80:e7:b7:e0:01:97:05:
29:f1:81:96:6c:a5:91:29:e2:5a:95:96:5a:55:a1:
95:b5:f9:84:ad:7e:77:81:26:d0:c0:bf:25:b2:e8:
0b:be:bf:da:4c:4b:6e:3d:42:86:5b:b0:60:19:c4:
9f:20:22:e5:5e:97:d4:7d:18:f4:5f:c5:cd:be:59:
76:61:ee:c3:db:54:9d:e4:25:15:44:f4:9b:3b:59:
8e:5d:55:9a:24:1e:9e:06:dd:8b:56:8d:c9:6c:5b:
b0:0e:b0:d6:ef:8b:e2:9f:ca:f6:33:aa:cc:e4:10:
ef:c2:b3:1c:62:65:bc:ab:24:49:de:9a:7b:ec:82:
bb:7a:9f:92:3d:5b:4d:5d:6e:83:b2:d5:8e:4a:c0:
c6:e5:f6:69:6f:51:dc:3d:23:5d:ea:15:f7:0d:2b:
e4:3e:25:6b:e9:ca:28:33:45:8b:03:50:ca:dc:e0:
8d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EF:64:8E:09:32:60:D0:73:DB:30:80:C1:85:9A:1C:B8:8C:5D:E6
X509v3 Authority Key Identifier:
keyid:21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/HO9kjgkyYNBz2zCAwYWaHLiMXeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.25.113.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:c3:12:03:9a:9c:96:e3:29:2e:d2:32:f6:67:65:a4:bb:c4:
41:ce:5c:a1:2b:d1:16:2b:b8:25:e9:23:a6:b8:27:2b:6a:35:
c1:54:3f:26:89:b7:ea:a2:a5:25:ea:26:2e:c2:3a:67:47:30:
8f:7c:fa:53:03:32:64:26:3e:1c:62:58:6e:eb:df:03:db:c1:
a9:95:e8:ab:7d:13:1e:43:c5:9a:db:11:5c:fc:a9:9f:2b:e7:
7c:36:06:ad:a6:28:ad:8d:07:f3:c5:f3:d6:1b:88:13:82:1e:
b8:a2:0c:fc:5e:13:45:26:9d:7f:71:9f:a1:c3:85:79:b1:97:
6e:7c:d1:22:6d:a6:9e:65:14:05:8d:4e:3d:a8:06:8b:c5:50:
28:9d:8c:18:84:63:b3:b5:0c:2b:3f:e1:38:5b:97:38:30:44:
b5:8a:48:f0:72:24:e3:75:7c:14:b8:2b:6c:a1:a7:f7:26:54:
6e:97:2b:1f:04:f9:bd:b7:98:1e:53:b1:79:b1:b7:32:c9:69:
db:2c:95:d9:9f:9b:38:28:f8:ee:53:93:42:f3:4b:3c:e4:30:
b5:9e:58:8f:c5:d8:66:df:64:95:b3:de:58:5b:be:0b:5e:79:
c0:21:e9:6f:77:d9:e9:ae:de:ce:20:93:6e:1b:8d:b7:5c:ad:
3c:3c:20:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 10:56:49 2024 by rpki-client on console-fra.rpki-client.org