Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/hU9-mHAg23uLrOPdPYE4hJvXUcA.roa
File: hU9-mHAg23uLrOPdPYE4hJvXUcA.roa (raw, json)
Hash identifier: CWIIzYVI1WyA72E9xcF17h6Igu8m9hZn0gOqHL/Kd94=
Subject key identifier: 85:4F:7E:98:70:20:DB:7B:8B:AC:E3:DD:3D:81:38:84:9B:D7:51:C0
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 018CC801D51AEBEFD5CFDEF56ED14AB999B6
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/hU9-mHAg23uLrOPdPYE4hJvXUcA.roa
Signing time: Tue 02 Jan 2024 02:30:12 +0000
ROA not before: Tue 02 Jan 2024 02:30:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 22773
IP address blocks: 185.254.72.0/24 maxlen: 24
185.213.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.mft
rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 20:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:d5:1a:eb:ef:d5:cf:de:f5:6e:d1:4a:b9:99:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 2 02:30:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=854f7e987020db7b8bace3dd3d8138849bd751c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:f0:c1:d8:ab:c5:d0:d3:4b:f8:a8:8d:d7:8e:
27:c1:b3:00:54:ec:85:81:33:31:34:52:a3:fa:6f:
3d:ac:c5:bd:07:cb:90:bc:9b:3e:28:37:9b:38:9f:
9e:ca:b3:76:12:49:26:96:63:2f:31:6f:06:c8:4f:
8f:fc:00:83:ab:7e:26:48:3a:35:81:36:de:f1:a6:
bb:7d:20:0f:e5:4c:23:6d:45:57:d1:71:55:10:0f:
c8:b0:1f:0b:16:2d:af:a8:08:99:e2:28:e6:09:f9:
6b:52:f1:97:c8:a5:12:9c:bd:16:2a:8a:5c:29:8f:
67:14:de:50:e0:43:58:88:dd:c9:7b:6e:e2:d4:fc:
53:1a:b4:ae:51:ed:af:07:68:0b:aa:7c:2a:f4:bf:
eb:e2:c7:51:34:bc:6a:ac:5d:93:5e:7f:8d:6e:a5:
c7:c6:a7:0e:97:ad:d5:da:ed:6b:68:3b:84:3f:df:
91:cf:64:bb:a1:75:af:f0:e8:fd:90:3d:ed:85:95:
36:31:ee:37:f8:17:19:b0:1c:09:a2:83:d3:1a:0f:
29:91:bc:60:3d:30:01:78:f8:fe:6b:0d:e0:ad:24:
03:32:2d:00:29:85:03:f0:1b:97:e9:5a:f2:80:1f:
61:ba:56:0a:b2:5f:2c:23:80:05:10:e9:17:33:c2:
47:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:4F:7E:98:70:20:DB:7B:8B:AC:E3:DD:3D:81:38:84:9B:D7:51:C0
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/hU9-mHAg23uLrOPdPYE4hJvXUcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.150.0/24
185.254.72.0/24
Signature Algorithm: sha256WithRSAEncryption
84:44:83:1d:7a:59:b4:1a:ab:28:a2:44:8b:6c:b4:f8:97:b4:
12:f3:42:e6:2b:11:df:35:35:51:35:ea:f4:db:d4:eb:da:60:
b3:77:91:06:8a:73:b0:bc:5e:a7:17:d9:cf:09:d0:5c:0d:d5:
fb:33:3d:82:52:16:d0:04:c4:ec:f4:ab:f2:c6:59:b4:97:0e:
26:e7:6d:bc:d6:56:f2:3a:a9:47:08:b0:45:40:12:aa:1e:45:
8a:d3:c6:b3:9b:d0:14:f9:81:d9:19:e9:59:95:fa:20:87:e0:
71:f1:ae:fd:d0:39:2c:77:c2:7d:b8:57:75:41:f7:3d:d0:e6:
12:ea:5a:72:d0:55:f4:34:13:51:f3:22:c0:a2:d9:d2:38:04:
e1:fa:6c:aa:a6:cd:fb:16:f4:39:1e:57:ab:9f:80:85:e4:6e:
ba:9e:25:8c:da:dc:e4:ab:ff:90:97:0c:68:6e:15:5a:90:f1:
d3:55:c1:92:12:1f:52:d0:fc:5a:eb:a9:b9:7e:58:13:44:38:
80:21:22:88:f8:94:70:e4:d6:ca:72:0a:31:2d:cf:fe:d0:63:
43:f2:e4:b2:ec:f2:ec:a7:ac:35:e1:c2:fb:5a:d5:59:e0:92:
db:1c:4b:5f:f8:97:98:25:10:f1:36:24:cd:14:aa:e6:42:91:
81:9e:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 00:24:27 2024 by rpki-client on console-ams.rpki-client.org