Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/HJHcMIZqPJLeDPt19N_SrMjFf2k.roa
File: HJHcMIZqPJLeDPt19N_SrMjFf2k.roa (raw, json)
Hash identifier: cR7dgdB6TOtl3bd3y/XTr9GuJcu3GdA1Cp2LWDd61w0=
Subject key identifier: 1C:91:DC:30:86:6A:3C:92:DE:0C:FB:75:F4:DF:D2:AC:C8:C5:7F:69
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 018CC5DC6BD6B977937EF01746924FDD1E52
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/HJHcMIZqPJLeDPt19N_SrMjFf2k.roa
Signing time: Mon 01 Jan 2024 16:30:06 +0000
ROA not before: Mon 01 Jan 2024 16:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204372
IP address blocks: 45.12.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6b:d6:b9:77:93:7e:f0:17:46:92:4f:dd:1e:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 1 16:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c91dc30866a3c92de0cfb75f4dfd2acc8c57f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:1b:c1:ed:96:41:2e:7b:90:11:e6:0b:82:0c:
e4:5f:cb:b2:19:3a:ef:29:df:12:26:e6:d0:d7:bd:
fe:7d:98:61:bd:63:fe:72:1d:e4:9c:91:1c:8d:bd:
de:c9:ad:e1:07:70:7c:c8:3a:bc:19:c2:e3:52:ed:
96:c8:34:39:fd:3a:18:c7:79:31:23:8e:62:d4:1a:
f1:86:59:a7:6c:1d:12:51:3e:19:5a:89:fc:c5:a3:
51:ba:b4:07:62:0f:e1:1a:b1:d6:5e:26:b0:eb:f9:
ef:42:35:e1:3b:ba:e7:14:d8:a2:5b:b6:46:39:8c:
97:6d:da:1c:1d:3a:fc:55:e5:31:38:9b:32:0a:73:
ff:17:af:63:76:7c:e9:c9:6f:ca:d5:01:d1:bd:0e:
af:5b:f0:da:ce:ec:c3:0c:84:63:ec:e4:41:0c:79:
e3:cd:be:8a:91:6d:e2:eb:28:8f:05:87:ff:10:18:
7d:9a:af:63:a6:87:94:40:62:8d:ba:06:c6:c6:62:
8a:a4:5f:9f:43:02:81:5a:d9:9f:5e:40:a7:e6:e1:
bb:c0:e1:ba:7b:f7:91:d0:8a:e2:19:66:61:a0:53:
7c:73:72:78:bc:51:33:64:32:df:05:7a:a4:b0:74:
b7:92:3b:43:b3:f6:58:ce:9c:86:14:d4:89:a3:2d:
eb:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:DC:30:86:6A:3C:92:DE:0C:FB:75:F4:DF:D2:AC:C8:C5:7F:69
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/HJHcMIZqPJLeDPt19N_SrMjFf2k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.185.0/24
Signature Algorithm: sha256WithRSAEncryption
68:d3:90:fd:c2:31:1b:e8:2c:be:fe:61:32:d7:82:ac:dc:41:
b5:66:21:45:5d:58:1c:0e:bf:cd:68:b8:8a:e3:39:25:6f:55:
ab:c3:91:a5:30:bf:7b:9a:43:33:df:55:3d:04:95:f8:32:95:
2c:79:bb:a6:55:75:6c:69:9d:97:d9:a1:2c:fa:c7:3b:2b:58:
97:7e:47:c1:03:80:1c:d0:3a:8f:ca:94:82:45:68:0f:8d:64:
81:26:eb:c8:c5:f1:5a:f4:64:4b:86:99:1c:81:ff:7a:35:e6:
78:bd:19:57:dd:18:91:ed:a4:b3:87:42:62:67:b6:d8:12:4a:
a3:11:58:28:f8:56:cc:f1:79:b7:55:1f:dd:92:93:d8:5f:23:
b2:16:4c:9f:f7:d8:ff:a4:b2:92:ba:66:c0:5f:5a:18:8d:e7:
3d:3e:f3:4f:1c:23:7e:00:4e:14:cf:91:0d:cf:28:b0:1a:3a:
89:d5:5c:25:5c:53:78:c9:cf:e9:48:61:76:0f:f9:e6:56:33:
e5:12:13:d1:ea:43:a8:80:bb:99:0d:75:c3:00:73:f8:a0:67:
03:7d:f8:49:93:b9:ea:a1:7d:99:4f:0d:8d:f7:da:a7:07:d4:
38:4d:9f:62:0b:d7:2a:fc:2c:bb:52:02:47:6c:aa:3b:c9:f5:
44:86:63:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:51:58 2024 by rpki-client on console-ams.rpki-client.org