Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/HXn51sWo6NnltS1Y7Ot_v0fMPRg.roa
File: HXn51sWo6NnltS1Y7Ot_v0fMPRg.roa (raw, json)
Hash identifier: 04vzFPUNmO1JTV7jZZM4HElKEHWMiVBovolXVk8s0X4=
Subject key identifier: 1D:79:F9:D6:C5:A8:E8:D9:E5:B5:2D:58:EC:EB:7F:BF:47:CC:3D:18
Certificate issuer: /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial: 018CC8714883C848279C38C9AC1C5650CA67
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/HXn51sWo6NnltS1Y7Ot_v0fMPRg.roa
Signing time: Tue 02 Jan 2024 04:31:56 +0000
ROA not before: Tue 02 Jan 2024 04:31:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61317
IP address blocks: 146.255.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 25 Nov 2024 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:48:83:c8:48:27:9c:38:c9:ac:1c:56:50:ca:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Validity
Not Before: Jan 2 04:31:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d79f9d6c5a8e8d9e5b52d58eceb7fbf47cc3d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:18:16:96:0b:98:d6:19:32:88:af:85:0a:
d0:80:6a:cd:cb:d6:6b:03:3b:54:09:f7:13:88:44:
68:ee:48:de:7c:a3:90:59:d6:ba:f6:bb:77:b2:32:
61:e7:64:4e:00:25:7e:ff:3a:12:32:21:0a:0a:32:
6b:54:ba:4e:9f:f3:a2:69:71:d0:8f:9f:31:30:44:
ab:f8:37:8c:0d:50:b2:f3:f1:67:23:d5:03:cf:6d:
0d:8a:9b:9b:2b:8f:17:9f:85:64:4e:96:4d:cf:04:
39:b6:9f:55:43:d5:7f:f7:62:ac:0b:03:2c:e7:38:
4d:3e:d2:8a:fd:4b:06:68:a7:31:a2:b6:1e:c0:83:
4a:cf:d8:7b:18:1b:8d:3a:18:16:55:c5:c4:be:de:
bb:76:f9:6c:7a:aa:29:4d:51:7e:11:c6:b5:af:78:
1d:fc:33:8f:6a:14:c7:cd:e7:12:3e:04:aa:1c:45:
42:01:db:98:ea:27:90:64:b4:26:a8:5a:e4:5b:57:
98:e9:04:e4:01:7b:20:15:a7:56:f1:c8:93:ec:f4:
f3:40:ce:7f:99:c3:71:cb:ed:85:f5:1c:92:aa:ae:
ff:b3:ec:25:fe:0f:15:c7:06:bc:66:8d:ea:72:b5:
4d:14:e8:fa:d2:74:41:54:9f:26:5f:bd:64:20:ab:
59:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:79:F9:D6:C5:A8:E8:D9:E5:B5:2D:58:EC:EB:7F:BF:47:CC:3D:18
X509v3 Authority Key Identifier:
keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/HXn51sWo6NnltS1Y7Ot_v0fMPRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.189.0/24
Signature Algorithm: sha256WithRSAEncryption
78:59:3e:7e:47:a7:9e:dc:60:c0:5f:e3:2a:85:d3:db:02:36:
cb:19:76:ef:ea:2f:44:fa:df:38:2b:f0:8b:3c:f1:6f:e2:ab:
b8:fd:28:95:b8:1c:49:bd:b2:9e:13:10:c6:b4:89:03:15:4c:
11:31:4e:7f:52:66:1a:09:5f:37:05:af:3c:0c:fc:66:ec:a2:
47:e7:80:c9:13:e2:f6:28:e6:d4:94:3f:06:3e:c4:33:31:7b:
e8:6d:74:cb:fb:42:d8:ea:45:94:27:8f:20:3f:aa:40:50:2c:
80:41:1e:20:f7:fa:f2:56:08:6c:f2:3e:47:50:96:c5:e8:72:
e2:c9:ad:00:60:cd:f2:b4:95:ea:51:92:27:52:6b:5d:29:00:
a7:7b:cb:35:44:6e:91:63:56:27:91:ab:99:b8:8b:c2:1e:c9:
d9:9e:73:75:27:6e:ad:94:31:f4:1d:44:2b:1b:ab:46:1c:25:
60:be:56:f2:02:67:94:32:7d:08:4d:4e:90:74:70:ff:9f:3a:
a6:85:a4:92:6a:3f:5f:df:6f:da:33:52:aa:80:28:b5:2e:2f:
9e:8d:92:0c:fb:ab:f8:80:3c:a9:7d:f1:f9:a8:b8:c0:2e:82:
ad:79:c7:39:d6:22:68:0b:09:12:23:26:2e:9b:bd:6c:4a:e6:
6d:8a:e3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:25:08 2024 by rpki-client on console-ams.rpki-client.org