Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/hFmHzXMJgZgK9WVgdRaeWFTrANM.roa
File: hFmHzXMJgZgK9WVgdRaeWFTrANM.roa (raw, json)
Hash identifier: V+Vns+ygFzxMFigQRDTZn8aSlWZhkRAAObqRC6Pp+YQ=
Subject key identifier: 84:59:87:CD:73:09:81:98:0A:F5:65:60:75:16:9E:58:54:EB:00:D3
Certificate issuer: /CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Certificate serial: 018CC8016EA0284DD308E66323050691FCF4
Authority key identifier: EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/hFmHzXMJgZgK9WVgdRaeWFTrANM.roa
Signing time: Tue 02 Jan 2024 02:29:46 +0000
ROA not before: Tue 02 Jan 2024 02:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211402
IP address blocks: 5.182.172.0/24 maxlen: 24
5.182.175.0/24 maxlen: 24
5.182.173.0/24 maxlen: 24
5.182.174.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 19:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:6e:a0:28:4d:d3:08:e6:63:23:05:06:91:fc:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee7450b230172e3e8ad35288110ef8abd24ff92d
Validity
Not Before: Jan 2 02:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=845987cd730981980af5656075169e5854eb00d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:e7:7b:e4:9d:14:82:c1:c1:14:b1:b0:15:
79:79:00:12:77:bd:e2:a3:2c:90:16:45:b5:77:ad:
01:e1:95:33:66:74:7a:3f:65:f1:b2:85:ba:fc:8c:
90:46:50:70:f9:7a:fd:74:01:00:f2:6f:7a:70:63:
05:f3:8f:5f:5c:1e:56:03:c2:82:7a:67:9a:bc:10:
4b:8c:23:40:41:17:e1:50:c4:bc:48:d9:69:d9:6e:
0e:3a:f1:22:51:33:7b:11:5a:ac:88:8f:4c:b9:8a:
99:f7:df:f9:24:0a:5a:0b:8a:8b:a3:c0:13:bb:47:
90:68:40:02:04:3b:76:fb:4d:f9:90:62:09:b0:3e:
8b:71:df:87:c7:ec:fd:7b:ce:3d:58:10:2f:77:94:
e1:0e:8b:f2:59:cd:09:25:ba:94:dc:21:ab:ec:03:
39:fb:b5:9e:7c:dd:0e:29:4b:81:68:5a:70:b7:0a:
98:6e:24:e0:df:33:7a:92:bc:39:b2:56:8f:a2:7a:
e1:51:01:2f:1c:65:50:e0:91:27:db:9b:c5:a9:90:
25:1a:48:b7:f8:08:80:94:b1:be:0c:f6:1b:a2:c6:
67:8a:e5:79:4a:14:9a:17:2f:a3:a8:9d:f3:f5:6d:
2e:8c:73:cc:3a:8e:65:5b:2d:86:40:a3:82:29:96:
e8:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:59:87:CD:73:09:81:98:0A:F5:65:60:75:16:9E:58:54:EB:00:D3
X509v3 Authority Key Identifier:
keyid:EE:74:50:B2:30:17:2E:3E:8A:D3:52:88:11:0E:F8:AB:D2:4F:F9:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7nRQsjAXLj6K01KIEQ74q9JP-S0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/hFmHzXMJgZgK9WVgdRaeWFTrANM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/2e257e-df64-4668-863b-f4dea86929ae/1/7nRQsjAXLj6K01KIEQ74q9JP-S0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.172.0/22
Signature Algorithm: sha256WithRSAEncryption
6a:8d:a9:51:a3:84:aa:48:ca:8c:07:97:61:65:44:cf:36:6b:
25:fd:43:a0:57:bb:14:a8:bc:60:d3:27:b1:93:31:66:b8:9a:
91:91:88:54:60:fa:2c:e4:04:1b:b9:d7:9c:68:d5:27:b8:d5:
a5:8b:4e:0e:e4:7b:0a:50:7e:92:27:0c:2a:1e:e2:e1:6e:f8:
0d:b4:26:96:e7:97:63:99:b7:51:e6:2f:e2:59:81:51:af:69:
a7:59:5b:82:9a:e6:ac:6c:f3:ab:23:26:6e:ee:2c:66:70:46:
85:24:6b:b1:cd:a0:28:18:e4:1b:61:ab:be:30:77:bb:1b:04:
5f:c9:e9:94:a9:33:f3:f7:25:93:1b:0f:3e:c4:92:52:60:1b:
23:7a:16:92:83:ed:f1:e8:34:0a:f7:98:22:9e:b9:31:90:f5:
de:06:0e:47:68:1a:8e:c6:37:7b:61:24:1c:c2:28:7c:ac:6a:
0e:45:3f:b8:6d:db:87:7c:ab:1a:cd:54:26:af:5b:dc:9c:07:
8f:c9:6b:d9:0d:f4:1a:77:6b:68:b5:f2:4d:e4:fa:c6:c0:47:
b6:c1:67:2d:37:06:8b:6a:b1:f9:57:93:c2:cb:2f:9a:8c:7d:
fb:ce:5f:92:2e:32:0b:2a:d9:8e:93:a8:05:92:72:d9:17:37:
7f:0c:4a:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 22:53:16 2024 by rpki-client on console-ams.rpki-client.org