Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/hxUYqrWVKAOMWD_6pCrGH0A3jVk.roa
File: hxUYqrWVKAOMWD_6pCrGH0A3jVk.roa (raw, json)
Hash identifier: O63z7HBnWoql9o6l8WaWVYwbugnAyu2kF8egfDAIAIM=
Subject key identifier: 87:15:18:AA:B5:95:28:03:8C:58:3F:FA:A4:2A:C6:1F:40:37:8D:59
Certificate issuer: /CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Certificate serial: 018CC79534A389DF6E3250EF95F644B75343
Authority key identifier: 22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/hxUYqrWVKAOMWD_6pCrGH0A3jVk.roa
Signing time: Tue 02 Jan 2024 00:31:33 +0000
ROA not before: Tue 02 Jan 2024 00:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205052
IP address blocks: 151.248.94.0/24 maxlen: 24
151.248.92.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.mft
rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:34:a3:89:df:6e:32:50:ef:95:f6:44:b7:53:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f2c2e7bc1da54d919ca5b5941d378892b2ccb2
Validity
Not Before: Jan 2 00:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=871518aab59528038c583ffaa42ac61f40378d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:ed:ce:6b:87:35:63:ef:11:e7:b9:55:ec:
b2:83:f5:cc:42:b7:f2:6a:fe:30:83:97:04:15:35:
2d:4a:34:3d:96:e8:bb:78:3f:66:b3:69:8b:3c:0e:
6c:32:7e:9d:b9:05:6e:13:57:2a:32:3c:4f:3b:9a:
f4:e4:9b:04:51:ca:52:f7:87:ad:79:8b:3c:26:37:
3b:02:44:ab:53:4d:bc:81:1d:ae:f3:78:3c:f5:b2:
e3:b3:2d:97:38:ab:e2:50:86:c0:cb:ed:18:e7:e7:
3e:67:f2:27:2a:24:24:d8:ae:d4:43:45:23:5f:de:
d9:7d:e5:68:9a:c5:b4:a9:23:8d:47:3a:08:63:fa:
d9:90:a4:b3:c9:fe:5f:d9:81:b0:b7:01:84:54:af:
83:b4:27:d1:5c:c7:4d:a4:56:34:cf:b3:32:d8:15:
fa:10:ed:f0:ee:aa:57:0b:22:c1:23:f3:87:18:36:
27:1f:45:d7:cf:fe:23:c4:97:3f:0d:9b:a8:c6:ed:
c0:e4:39:25:ee:c6:37:37:72:80:84:7b:38:ee:12:
16:81:b5:8c:f8:b7:0b:3b:a7:79:49:89:75:a2:3b:
19:a0:4f:91:8e:e6:99:fc:85:13:ff:f3:3e:89:29:
56:1e:8b:06:95:33:96:46:5b:ab:68:0b:48:c7:40:
c6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:15:18:AA:B5:95:28:03:8C:58:3F:FA:A4:2A:C6:1F:40:37:8D:59
X509v3 Authority Key Identifier:
keyid:22:F2:C2:E7:BC:1D:A5:4D:91:9C:A5:B5:94:1D:37:88:92:B2:CC:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvLC57wdpU2RnKW1lB03iJKyzLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/hxUYqrWVKAOMWD_6pCrGH0A3jVk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/602530-6d22-46f1-8e05-02def6e84c91/1/IvLC57wdpU2RnKW1lB03iJKyzLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.248.92.0-151.248.94.255
Signature Algorithm: sha256WithRSAEncryption
33:2c:fe:25:86:b2:ee:67:b1:31:66:6b:2b:7f:5a:ba:67:8a:
aa:82:61:83:09:fb:42:bf:a2:39:fe:a6:44:25:1e:ba:ca:1b:
f6:e7:d5:42:75:e1:19:d6:93:f9:50:03:75:dc:a3:12:9f:d7:
28:74:2a:22:4f:d9:a7:d2:fb:79:a6:d4:ad:f0:09:4e:0a:44:
11:1c:3a:ca:ab:36:18:48:23:e7:c9:a9:bc:22:9f:40:66:3e:
75:c5:e6:de:f2:08:60:12:53:09:0b:49:0e:eb:f7:42:c0:f4:
ea:a8:01:8d:cb:b5:64:a2:ac:58:65:17:0f:c4:ee:97:e8:3f:
c6:9e:9b:b7:97:09:b2:6e:99:88:c2:b6:a7:e6:13:4e:d3:7e:
44:e0:df:83:2d:33:0e:39:87:5f:c8:e9:ba:b9:65:8a:5c:ba:
a7:2b:cf:a2:77:07:8f:26:8c:66:5d:1e:6b:5b:fb:7a:26:df:
df:29:87:45:50:a9:ef:d6:af:61:ce:31:d5:00:6f:97:7b:36:
7d:f4:88:01:10:bc:8d:db:8f:c1:59:1c:cf:78:a0:4b:17:6b:
c7:e7:e6:dd:a5:84:31:54:5a:ab:a6:34:2e:8a:4d:dc:3f:66:
eb:78:9e:5d:a8:2b:a6:91:2f:94:96:5d:26:a5:29:c5:bf:d0:
48:11:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:16:22 2024 by rpki-client on console-fra.rpki-client.org