Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/hX8uJk_v6tudSIdW2lQXIGdFh8c.roa
File: hX8uJk_v6tudSIdW2lQXIGdFh8c.roa (raw, json)
Hash identifier: GE5QJyORMYSkbkSXhypV3DBh/1uQTgIMOGtRU6TA85g=
Subject key identifier: 85:7F:2E:26:4F:EF:EA:DB:9D:48:87:56:DA:54:17:20:67:45:87:C7
Certificate issuer: /CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Certificate serial: 018CC2DAE3BC5894691D3FA1751C34678054
Authority key identifier: 1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/hX8uJk_v6tudSIdW2lQXIGdFh8c.roa
Signing time: Mon 01 Jan 2024 02:29:34 +0000
ROA not before: Mon 01 Jan 2024 02:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 45.159.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e3:bc:58:94:69:1d:3f:a1:75:1c:34:67:80:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fc5955940bbd7555df0a2e417379fc447ef0cdc
Validity
Not Before: Jan 1 02:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=857f2e264fefeadb9d488756da541720674587c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6c:59:cd:46:84:8a:dc:63:01:c4:ef:19:8f:
bd:2b:4b:b8:1b:25:a0:f5:af:3b:93:f8:3e:41:83:
db:ba:9e:21:a9:40:a1:be:30:47:f7:af:70:35:2d:
ad:72:56:31:e3:36:71:84:1c:5a:a7:0e:4c:17:0f:
6b:64:18:33:d4:f4:cd:6d:db:77:41:4b:89:5a:88:
19:10:ce:06:cf:29:e1:57:21:31:f9:46:43:7a:23:
cf:a9:1c:03:21:93:4d:ca:ed:80:91:89:ba:67:98:
33:75:c3:cc:c8:83:b0:ab:0a:a3:83:8c:c7:5c:32:
48:54:bd:fb:e7:31:46:79:72:94:2f:4c:62:1d:2a:
ed:ab:96:54:83:1d:43:76:32:95:4b:28:99:95:1c:
83:32:5f:26:d5:59:a8:c9:bd:8f:77:9e:0c:aa:85:
6f:31:dd:07:8e:24:9f:c0:83:c5:af:2f:19:64:3d:
90:fa:c9:f2:6b:03:70:31:b9:79:a3:96:cc:de:31:
34:e9:36:de:72:4a:3d:a4:40:b4:ca:81:85:47:eb:
f7:66:95:ad:7a:e8:6f:b8:b2:f5:cc:c6:3a:5b:75:
a4:1a:a4:2d:a6:3c:ba:29:38:05:05:8f:49:f0:f5:
18:63:d4:c5:d6:97:4c:d6:0d:fe:25:7f:52:8e:5f:
dd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:7F:2E:26:4F:EF:EA:DB:9D:48:87:56:DA:54:17:20:67:45:87:C7
X509v3 Authority Key Identifier:
keyid:1F:C5:95:59:40:BB:D7:55:5D:F0:A2:E4:17:37:9F:C4:47:EF:0C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H8WVWUC711Vd8KLkFzefxEfvDNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/hX8uJk_v6tudSIdW2lQXIGdFh8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1c8896-7be2-42cd-911f-2fdb7ab65d52/1/H8WVWUC711Vd8KLkFzefxEfvDNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.159.120.0/22
Signature Algorithm: sha256WithRSAEncryption
b4:e3:09:b8:40:2c:db:f9:5f:c3:b8:1d:a8:c2:66:89:b9:77:
b4:be:e2:37:f3:09:af:f1:20:3a:4d:a0:a2:31:7a:2b:d3:07:
08:08:fe:b5:32:1d:df:67:72:f2:6b:8f:7a:74:24:fb:9e:71:
38:1d:68:85:71:72:eb:f0:18:60:39:cf:94:1a:a8:9c:bf:4e:
17:74:5e:9d:a9:5a:69:39:87:b7:e4:f9:23:71:54:0b:1c:bc:
32:a2:50:e9:b4:f0:5a:42:87:cd:91:63:5d:16:84:89:72:93:
41:8b:2f:ad:dc:cf:cc:66:ca:6f:76:ee:7b:48:af:01:f2:e9:
4a:f3:da:d6:93:27:30:59:51:df:f8:23:12:fb:2c:6b:c0:e1:
29:79:b8:c2:e4:3d:ca:11:2f:37:86:a0:11:c2:e8:52:a8:bf:
64:12:b1:0a:bf:7c:ad:25:fe:7b:dc:8b:46:72:f7:73:7f:8e:
53:1f:f3:62:6e:ca:42:08:83:bc:85:eb:64:7e:7f:2c:0c:8d:
23:9c:54:09:55:67:33:a1:75:85:87:3f:f0:17:94:e3:bf:4f:
00:6e:19:fd:f8:f1:77:fe:ed:a8:46:6f:9c:82:61:ed:3b:f5:
ba:67:7a:e9:8c:c5:bc:f3:24:a0:84:5b:99:e5:7a:f5:ad:63:
b6:87:59:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:43:30 2024 by rpki-client on console-fra.rpki-client.org