Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/HQ4t1CSuPhhWf2sKVrhm8ZLTsAk.roa
File: HQ4t1CSuPhhWf2sKVrhm8ZLTsAk.roa (raw, json)
Hash identifier: gLe6Rel21AQqgNlotBeKJENGTOC08zVA1BbwIF3bRyE=
Subject key identifier: 1D:0E:2D:D4:24:AE:3E:18:56:7F:6B:0A:56:B8:66:F1:92:D3:B0:09
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 018CC7946ADA7D24DDDF9063D4A776C57110
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/HQ4t1CSuPhhWf2sKVrhm8ZLTsAk.roa
Signing time: Tue 02 Jan 2024 00:30:41 +0000
ROA not before: Tue 02 Jan 2024 00:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29802
IP address blocks: 147.136.64.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 10:04:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:6a:da:7d:24:dd:df:90:63:d4:a7:76:c5:71:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 2 00:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d0e2dd424ae3e18567f6b0a56b866f192d3b009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:78:a3:0b:cf:b2:cb:11:b1:5f:e7:cf:14:d2:
4e:90:66:c5:b1:bd:4b:4b:cd:94:75:02:26:ed:af:
7c:39:f8:46:02:c9:3f:05:2b:0b:53:1e:cc:88:47:
ff:a2:2c:6d:55:f8:20:c9:5e:b1:5f:e4:dd:48:f9:
12:92:00:0c:09:de:c2:39:cd:1b:3c:92:60:f7:e4:
eb:45:ae:38:2d:a2:82:ab:8f:e8:40:4d:52:c5:7e:
3d:ce:1d:d2:00:34:28:85:7b:59:c0:d0:19:54:d4:
56:a8:74:8d:f0:91:c6:37:c3:94:9b:a7:32:29:9b:
4f:f7:c0:8e:ec:e4:b1:3f:77:15:bc:9b:75:52:82:
dd:aa:78:73:9e:89:d6:64:cf:c4:e5:f0:41:69:59:
7b:37:fa:a5:3d:f8:2b:21:51:8a:a7:81:60:34:de:
45:d1:ad:d4:1d:8f:d0:a4:97:37:da:57:fd:75:74:
20:1d:fb:8b:e9:5f:20:b0:ff:ff:41:40:f1:45:52:
1b:09:32:d4:d0:83:a3:27:ff:fa:e6:6d:b8:31:14:
b7:46:31:47:3b:af:68:9d:6a:d8:b8:01:0c:b2:f8:
e6:d5:23:ad:85:2f:21:f4:be:b3:ec:83:99:ca:59:
2d:bc:df:c9:dc:27:dc:13:4d:35:9a:39:45:63:03:
09:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0E:2D:D4:24:AE:3E:18:56:7F:6B:0A:56:B8:66:F1:92:D3:B0:09
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/HQ4t1CSuPhhWf2sKVrhm8ZLTsAk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.64.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:82:e4:c6:3a:ab:76:61:a7:5b:71:3e:b7:fb:61:11:8f:03:
79:0e:ce:44:a0:d2:ad:c8:af:a7:d2:e7:97:89:ca:37:1b:15:
3f:33:58:f8:5b:04:75:37:3a:7d:be:01:73:f2:fe:ea:1d:e1:
ce:40:29:c0:0b:88:fb:14:2d:24:05:f4:a5:13:0d:d4:d7:82:
60:55:79:01:e9:d3:1f:4a:6c:17:13:3b:06:ac:25:d1:21:f4:
0d:69:71:f0:79:63:1b:44:6f:0d:85:35:49:46:59:9f:a2:8e:
df:99:11:d8:7c:03:be:55:6d:91:c4:0c:97:c0:62:79:90:bb:
ad:21:98:ef:a5:8d:2b:a4:f1:76:bf:4a:a3:d0:88:f6:59:1e:
56:a5:b3:a0:9c:c1:63:e8:bf:4b:90:74:17:a6:60:e6:78:6c:
3c:4a:6a:23:8a:67:fb:e4:bc:a8:c7:d8:9c:b9:a2:68:07:02:
5b:b7:40:b0:08:03:3b:a6:96:1e:e3:47:b4:f1:78:45:b2:00:
7d:8b:8c:e8:4c:96:83:1f:37:d5:8e:6f:c5:c7:3d:66:eb:c5:
56:9a:4a:cd:22:2e:50:c7:42:bb:54:74:d4:62:cc:ac:e9:74:
5a:3f:21:3d:ba:50:03:38:a5:ac:02:1c:3a:10:e0:31:f0:98:
11:6f:4e:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:28:38 2024 by rpki-client on console-ams.rpki-client.org