Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/HWK-SEcShUxHw6Glkc7IiogVzHI.roa
File: HWK-SEcShUxHw6Glkc7IiogVzHI.roa (raw, json)
Hash identifier: 0Ago7m/W/ecEXcdoQUZQEBGWLb/4rNbqwNqfHm6rb6g=
Subject key identifier: 1D:62:BE:48:47:12:85:4C:47:C3:A1:A5:91:CE:C8:8A:88:15:CC:72
Certificate issuer: /CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Certificate serial: 018CC3B6F1040902C37AD1C2E94786CFA731
Authority key identifier: 6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/HWK-SEcShUxHw6Glkc7IiogVzHI.roa
Signing time: Mon 01 Jan 2024 06:29:55 +0000
ROA not before: Mon 01 Jan 2024 06:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204810
IP address blocks: 89.150.47.0/24 maxlen: 24
89.150.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:f1:04:09:02:c3:7a:d1:c2:e9:47:86:cf:a7:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea2be3732f6efd59c7de5ab03072a012c71b5ed
Validity
Not Before: Jan 1 06:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d62be484712854c47c3a1a591cec88a8815cc72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:25:45:0c:1c:f2:c7:58:46:d6:f0:03:41:
cf:0f:91:14:ae:f0:71:dc:e4:b0:2c:48:03:95:05:
97:6a:53:5e:2a:76:bc:fe:70:2a:4c:3e:de:9a:57:
e9:ef:8a:a6:67:4c:23:25:6e:3b:9c:33:f0:1b:37:
93:38:26:bc:f1:2a:bc:51:6a:7f:ed:51:4c:fd:9b:
f8:ec:79:2e:11:11:9d:e8:77:be:a6:b7:28:fb:52:
8d:98:81:5a:2c:4e:71:8c:a6:3f:6f:36:a0:66:ac:
c2:74:02:42:33:3d:e4:66:7c:4e:3a:78:a5:ac:d7:
6b:e3:9f:65:7f:2e:46:6c:86:8b:bb:f6:bb:be:9a:
2a:50:84:47:1f:9c:1b:6a:1e:31:89:41:52:45:6c:
d7:f8:3d:86:c9:02:17:f3:00:08:82:51:e5:35:8a:
f6:d6:8d:81:75:1d:8b:8e:49:8a:8a:60:60:ae:34:
5f:32:8b:f4:51:03:1f:29:ea:34:72:08:96:a4:70:
5d:7c:c9:9e:9f:85:73:18:22:35:bd:58:79:de:00:
be:3c:ea:d9:31:fe:7c:65:35:41:33:a8:1e:a8:28:
5d:8d:8c:18:57:ca:f9:7a:2b:d4:26:16:ff:75:d2:
37:ab:99:99:c1:75:c4:c0:af:db:73:b8:3b:01:e4:
ba:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:62:BE:48:47:12:85:4C:47:C3:A1:A5:91:CE:C8:8A:88:15:CC:72
X509v3 Authority Key Identifier:
keyid:6E:A2:BE:37:32:F6:EF:D5:9C:7D:E5:AB:03:07:2A:01:2C:71:B5:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqK-NzL279WcfeWrAwcqASxxte0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/HWK-SEcShUxHw6Glkc7IiogVzHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/16ba11-773b-4e7e-b0dd-13086ecff9d5/1/bqK-NzL279WcfeWrAwcqASxxte0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.150.46.0/23
Signature Algorithm: sha256WithRSAEncryption
34:f9:9b:51:ee:94:ef:9a:12:77:ac:ab:12:1e:96:a2:2a:d6:
0d:bb:f9:bb:9b:79:8f:87:fc:b4:51:92:65:6a:af:5a:45:5e:
6f:cf:36:c8:e4:1b:0c:49:fb:7e:a1:6c:65:81:73:06:00:ba:
95:e1:6e:27:44:0f:60:6a:18:46:00:bb:1d:af:ce:ad:b9:1f:
84:d9:14:31:90:5a:12:83:a9:41:5e:f6:c0:55:d6:86:5f:49:
4f:01:d9:0d:c4:3b:e3:e0:1b:6f:33:65:ec:b4:3a:51:35:68:
83:38:83:cb:ec:67:7c:30:ea:c4:07:93:d6:61:1a:0d:36:fa:
2c:09:28:86:a6:71:fc:13:7d:9e:8a:22:22:0a:46:5d:e5:52:
54:18:e6:33:d0:c8:be:47:a3:5e:1c:3a:27:4a:72:ef:4d:aa:
f8:78:4d:33:53:f3:71:8e:db:a4:ca:4f:4e:08:01:50:b6:f5:
9c:3c:3b:04:3e:fe:d4:37:b4:70:3c:d5:2f:52:b0:7b:77:cb:
44:1c:a0:47:6c:1d:39:cf:1b:7f:ac:90:a2:d7:24:b9:98:c9:
95:e1:60:a8:70:f0:fb:72:f3:2d:32:9f:67:a0:ef:c0:86:ef:
5b:ea:a8:fe:50:d3:76:d8:a0:b3:af:ee:1c:89:4f:20:91:07:
3c:77:d6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:09:18 2024 by rpki-client on console-ams.rpki-client.org