Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/hTErh2bcYepzqXQ59N2aEIpJvS8.roa
File: hTErh2bcYepzqXQ59N2aEIpJvS8.roa (raw, json)
Hash identifier: oDxEdioZHv/x/1UuwqqizC+2LYeYnb3Eff+ukge4oL8=
Subject key identifier: 85:31:2B:87:66:DC:61:EA:73:A9:74:39:F4:DD:9A:10:8A:49:BD:2F
Certificate issuer: /CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Certificate serial: 018CC4254C90132B8CD5A3A319C1ED991E06
Authority key identifier: F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/hTErh2bcYepzqXQ59N2aEIpJvS8.roa
Signing time: Mon 01 Jan 2024 08:30:27 +0000
ROA not before: Mon 01 Jan 2024 08:30:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8323
IP address blocks: 193.193.64.0/19 maxlen: 19
195.150.0.0/17 maxlen: 17
195.150.0.0/16 maxlen: 16
195.150.128.0/18 maxlen: 18
2001:6d8::/29 maxlen: 29
2001:6df::/32 maxlen: 32
2001:6d8::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:4c:90:13:2b:8c:d5:a3:a3:19:c1:ed:99:1e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8f19e224c73f83c4fdd196d06608aeb3a881804
Validity
Not Before: Jan 1 08:30:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85312b8766dc61ea73a97439f4dd9a108a49bd2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ff:96:ab:85:f3:11:7c:a7:5b:a9:02:2e:e7:
64:a9:0d:c4:d4:61:6d:df:fc:58:b3:36:39:6b:96:
85:8a:ff:e1:38:21:ce:49:69:e4:49:cd:b8:41:76:
45:c1:b9:1f:6d:9a:d2:bc:60:77:84:0f:4c:f6:7d:
20:3d:3b:c4:9e:ca:b2:90:5e:42:42:31:0f:ee:8a:
83:6f:f1:1a:37:4f:06:6c:fb:3f:d3:9b:20:57:eb:
69:b8:5c:c1:ce:a9:60:ce:f2:0d:65:41:8b:7a:d6:
95:1d:c0:79:5c:d4:e7:fc:55:14:39:f2:c4:42:4d:
f5:82:59:8d:29:5a:58:ed:b8:f7:67:84:7e:21:8d:
3b:f9:57:e4:9b:64:ea:9d:d5:43:3e:f2:71:2d:52:
10:d0:12:53:1a:48:40:27:9c:7c:bb:63:8e:75:b8:
70:40:ed:50:53:81:d9:dd:55:e4:52:14:81:c3:9a:
89:28:9d:c0:b8:f1:fb:8b:c3:52:1b:ed:e6:74:96:
7d:8c:65:12:e6:94:b5:8c:38:4e:75:fa:1e:b4:49:
23:60:aa:3d:69:8e:78:d9:05:ea:ef:87:00:38:84:
e1:d0:02:68:71:85:2c:96:17:db:1c:67:99:36:b9:
d1:47:73:1d:03:67:03:19:94:53:fd:db:99:ee:cb:
ab:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:31:2B:87:66:DC:61:EA:73:A9:74:39:F4:DD:9A:10:8A:49:BD:2F
X509v3 Authority Key Identifier:
keyid:F8:F1:9E:22:4C:73:F8:3C:4F:DD:19:6D:06:60:8A:EB:3A:88:18:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/hTErh2bcYepzqXQ59N2aEIpJvS8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/f40486-2cd9-475b-bbe1-16cd8f4fb4b9/1/1-PGeIkxz-DxP3RltBmCK6zqIGAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.193.64.0/19
195.150.0.0/16
IPv6:
2001:6d8::/29
Signature Algorithm: sha256WithRSAEncryption
50:e4:b1:13:03:cc:82:f6:0a:22:04:e4:12:d0:05:41:b7:e6:
be:a8:38:4b:c0:12:05:73:0e:a1:03:97:6d:90:18:44:91:c2:
63:4b:3b:21:54:13:74:0a:d7:4d:e9:bc:33:93:c6:c0:2e:8c:
52:f9:b4:a3:06:c3:25:6a:d5:7f:f2:9f:97:89:b5:42:4a:6d:
19:e2:c1:25:18:48:51:23:8e:66:0f:c5:dd:8e:90:09:a9:46:
77:79:f2:44:4f:04:52:f6:b3:4b:91:0f:a6:a2:24:d1:8a:40:
49:73:1c:0f:6e:04:d1:5b:e5:a4:2f:16:52:43:3a:bc:45:1c:
d6:49:d8:25:9a:2a:7a:14:9e:91:71:82:6a:25:38:92:c4:5b:
90:ef:0c:53:55:b0:82:3d:66:91:a0:02:21:43:68:1f:37:55:
2a:65:ce:6b:0b:f7:0c:ff:b6:49:89:c9:93:59:7c:e5:c4:fd:
cd:26:d1:38:10:d3:78:52:8f:8e:51:00:b9:cf:17:75:0f:02:
77:12:5c:61:0e:65:2f:97:fb:2e:ca:2e:9b:73:f3:6e:bf:89:
65:be:81:64:27:36:12:e5:39:09:75:fe:c1:49:19:6a:ff:3d:
eb:1d:66:05:3d:d4:5c:80:d4:db:94:bb:40:3c:28:07:23:b5:
d7:55:9d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 01:20:15 2024 by rpki-client on console-fra.rpki-client.org