Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hTq5dPBzhhe6LL4QwKiFm7XB7Ck.roa
File: hTq5dPBzhhe6LL4QwKiFm7XB7Ck.roa (raw, json)
Hash identifier: 4neb8VN3RlPPGkIuMcXQHCIQOj6RyoAaii0GbP7KGTU=
Subject key identifier: 85:3A:B9:74:F0:73:86:17:BA:2C:BE:10:C0:A8:85:9B:B5:C1:EC:29
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 018CC64A7DA7966B1F63644FC71C9EBC7962
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hTq5dPBzhhe6LL4QwKiFm7XB7Ck.roa
Signing time: Mon 01 Jan 2024 18:30:19 +0000
ROA not before: Mon 01 Jan 2024 18:30:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60067
IP address blocks: 141.101.200.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 May 2024 17:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:7d:a7:96:6b:1f:63:64:4f:c7:1c:9e:bc:79:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 18:30:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=853ab974f0738617ba2cbe10c0a8859bb5c1ec29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b1:87:ce:5e:da:98:9a:45:96:14:42:2b:4f:
26:50:58:b3:65:05:48:b6:f7:78:4e:12:34:a0:a6:
ee:6c:d7:f0:c2:b7:07:bf:1c:02:27:56:82:2d:06:
84:2c:92:5d:96:0d:c4:55:5b:e1:47:98:f5:7f:f7:
34:ec:9b:b9:a4:c5:9f:02:4d:a1:0d:3b:d3:c8:49:
0c:50:9e:47:10:40:d9:9c:0d:c4:21:48:57:ca:87:
0b:7b:46:3b:d8:54:da:bc:c7:bf:76:ce:7d:d0:c5:
e7:11:ed:02:f0:12:4f:26:98:f5:d8:1f:93:68:db:
51:86:1a:33:e6:45:32:10:a2:b9:14:46:c4:cb:2a:
01:fa:8d:5a:6e:6d:c5:ba:b3:03:17:99:29:30:b3:
c2:c1:00:42:59:1a:22:2c:9b:de:b3:d5:24:a6:5d:
a8:fc:9f:44:41:fe:b5:14:e7:07:84:fe:80:74:d0:
fc:5b:bb:fb:b5:63:10:74:48:23:5a:c5:fc:1a:b8:
ea:07:a8:48:97:54:91:f4:b3:c9:19:96:3e:c3:90:
e1:4f:2f:b9:f1:5b:c8:3f:1e:5d:cf:af:4f:fa:ea:
76:9c:47:bb:de:db:6d:94:ca:a8:51:1b:2a:29:d6:
e2:e6:e7:ba:d9:34:1e:0d:12:88:7a:97:02:95:29:
30:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:3A:B9:74:F0:73:86:17:BA:2C:BE:10:C0:A8:85:9B:B5:C1:EC:29
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/hTq5dPBzhhe6LL4QwKiFm7XB7Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.101.200.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:b8:0e:db:43:bd:c4:58:2a:40:8c:c8:00:c8:85:e0:09:b4:
f4:0d:f9:2d:d0:a9:16:25:69:0a:6f:7b:7a:77:d6:98:c3:d9:
5f:1b:0f:c1:49:45:73:fb:51:b6:84:4b:a9:02:f5:51:33:3d:
3b:26:db:c2:15:64:e8:56:7f:b2:1c:7e:41:9c:ff:d8:34:de:
f6:66:03:19:0c:eb:c2:da:9b:cb:a0:60:02:02:31:72:bb:96:
8e:df:6d:69:01:85:f7:23:59:17:77:c3:13:93:f2:c4:33:86:
39:f6:e0:86:46:d8:2b:e2:ae:cd:7c:3f:2e:d3:41:7f:fe:eb:
f5:9c:0c:5e:f3:5f:87:c0:b0:fd:88:6d:2a:79:d2:3a:45:8a:
6a:43:73:30:e4:f6:75:ac:61:9c:1a:27:94:00:cd:ca:7d:5f:
55:ea:90:1f:90:4b:c6:e8:d5:be:c5:69:50:49:52:b4:f5:a3:
8c:8a:36:e6:3c:2c:a9:91:91:03:86:03:84:72:7e:1f:d5:25:
ce:4d:1e:cc:b4:f5:e9:59:f3:36:2d:5a:75:59:8e:72:aa:06:
ee:a2:a6:da:68:c2:d8:23:87:e3:08:85:99:48:f9:ba:76:b0:
ac:f1:71:b3:2b:d8:af:82:f5:c9:5c:c2:cd:16:b0:a3:cf:39:
b4:bf:a0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 20:11:22 2024 by rpki-client on console-fra.rpki-client.org