Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/HYtlY-2j_vSeX_uq2SGHzBognak.roa
File: HYtlY-2j_vSeX_uq2SGHzBognak.roa (raw, json)
Hash identifier: 2HncDdj5ZCAS6DrPCX1fVuqXTSr2hGtL+sP3suTpTwg=
Subject key identifier: 1D:8B:65:63:ED:A3:FE:F4:9E:5F:FB:AA:D9:21:87:CC:1A:20:9D:A9
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 018CC50109E2BE6E982A5D36C7C9875055C6
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/HYtlY-2j_vSeX_uq2SGHzBognak.roa
Signing time: Mon 01 Jan 2024 12:30:28 +0000
ROA not before: Mon 01 Jan 2024 12:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197743
IP address blocks: 31.3.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:09:e2:be:6e:98:2a:5d:36:c7:c9:87:50:55:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 12:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d8b6563eda3fef49e5ffbaad92187cc1a209da9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:8b:ed:d5:11:05:2d:78:3d:cb:e5:68:6b:ab:
00:95:ef:88:a9:f4:26:bb:26:91:54:95:fd:aa:3d:
84:a7:87:96:29:b6:0b:b8:e4:32:56:ff:7d:78:e0:
fd:25:42:f0:0e:b1:38:78:38:f0:3f:0a:cf:16:b0:
72:97:a3:4d:04:5d:5a:33:d7:d5:5e:89:f9:4d:76:
3a:6a:d0:37:b6:74:b9:3f:6f:92:ea:b9:22:22:7e:
bf:18:27:cc:f3:e6:3f:06:b4:c9:62:d3:cc:a4:96:
be:7d:3a:97:3f:ce:c9:56:5c:e6:cc:a9:8d:78:83:
67:c6:b9:0e:f0:ab:ad:5f:30:94:1d:32:b2:f8:f1:
9d:93:25:8d:4c:b4:da:3f:b1:64:b1:c0:e3:bd:c4:
17:f1:fd:1b:b2:3c:81:71:d1:e0:d5:c1:15:23:16:
79:17:f3:23:9c:b5:47:42:9a:e3:32:b4:ae:91:a2:
8c:57:ef:bc:58:c0:27:8f:48:7c:2b:89:94:53:86:
ed:43:b9:2c:4d:35:19:ae:e7:18:d6:3c:1a:ce:7e:
37:22:99:35:fc:5e:3f:c3:67:3b:f7:64:da:9b:47:
5c:8a:65:48:56:64:71:c4:4a:cd:35:3e:df:6d:60:
a9:94:05:c1:6a:24:88:76:fe:b6:3d:c6:1f:fd:b2:
f5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8B:65:63:ED:A3:FE:F4:9E:5F:FB:AA:D9:21:87:CC:1A:20:9D:A9
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/HYtlY-2j_vSeX_uq2SGHzBognak.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.192.0/20
Signature Algorithm: sha256WithRSAEncryption
9a:95:ed:e2:17:79:b2:74:58:13:be:1d:1c:d2:86:91:3c:f4:
0a:db:70:ad:1f:be:8b:cb:7c:5f:f5:c5:95:37:cc:7a:b7:72:
dc:cb:6b:33:00:a1:80:1a:6f:f4:4c:7c:21:7f:b5:3e:7f:b4:
65:68:bd:dc:43:3b:1d:50:7c:ad:29:b9:46:1e:8d:d4:7a:46:
84:18:af:d5:bc:bd:29:f8:ba:e7:a8:39:ac:63:03:cb:50:ae:
8c:68:c4:29:ea:7e:f8:f2:1a:79:f0:19:32:0a:a6:5b:47:c4:
d0:e1:92:ee:87:3e:32:e7:a5:4b:59:dc:9b:67:42:0d:98:2a:
55:af:ba:8e:eb:24:d4:31:a3:71:40:42:5c:18:b5:94:4d:cd:
75:02:14:13:49:82:57:59:a4:97:b7:85:79:0c:70:7e:5a:75:
aa:5c:48:cb:a1:8a:c8:df:62:80:db:9a:6e:f9:50:9c:71:b6:
06:c9:8b:3d:81:62:dd:7f:22:6d:9c:89:b5:a7:c7:4e:5a:1b:
3c:15:30:83:de:bd:83:cf:8d:29:fd:e3:38:f1:e8:1f:45:c9:
9e:bc:0d:fc:48:f3:5d:bd:cb:70:59:a5:2f:64:4e:6f:cd:45:
dd:1c:18:d6:9c:e6:2a:3d:a7:bf:b7:e8:1d:ca:16:49:97:c6:
f1:91:3d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:58:00 2024 by rpki-client on console-ams.rpki-client.org