Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HKreq4hxmYL1GBL1rW1GO2Q7gCA.roa
File: HKreq4hxmYL1GBL1rW1GO2Q7gCA.roa (raw, json)
Hash identifier: HV2Ohw4IgVGcvSwisuXEEzhpc4Pg1lg53/u3MFm/Fuk=
Subject key identifier: 1C:AA:DE:AB:88:71:99:82:F5:18:12:F5:AD:6D:46:3B:64:3B:80:20
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018CC34967AA8D901EE1749CABE79B7402A8
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HKreq4hxmYL1GBL1rW1GO2Q7gCA.roa
Signing time: Mon 01 Jan 2024 04:30:16 +0000
ROA not before: Mon 01 Jan 2024 04:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 270564
IP address blocks: 89.213.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:67:aa:8d:90:1e:e1:74:9c:ab:e7:9b:74:02:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jan 1 04:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1caadeab88719982f51812f5ad6d463b643b8020
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:42:9b:41:15:08:0a:69:d6:d7:04:93:dd:74:
76:bf:65:87:8f:4f:27:a2:26:56:1c:25:d2:dc:63:
87:be:f9:d2:2a:18:eb:bc:ff:0b:50:8a:08:7c:09:
64:d7:e5:35:e9:f5:bd:d6:33:a0:83:fa:b6:1d:88:
13:6e:0f:4c:d2:74:a1:5a:49:a6:23:0a:34:10:07:
6c:1f:c6:0e:15:28:f0:9d:ad:33:92:ac:c6:c6:7e:
c2:24:5d:90:a7:30:27:65:b4:e7:c9:d8:30:ba:ad:
83:e4:db:f7:a6:62:eb:e8:83:df:db:bb:1c:7b:8b:
f2:d5:f5:27:81:4d:ad:ef:1c:35:27:e6:14:2f:da:
5c:8e:97:aa:2a:04:b4:14:f2:2c:b8:d7:55:bc:d8:
40:22:43:97:a2:22:5d:a1:88:4d:4e:cc:72:13:96:
72:19:75:40:53:e4:47:87:d6:d8:3b:8d:bb:1f:66:
80:8c:b1:34:18:87:4d:0d:90:04:94:db:33:ca:7e:
34:ea:f3:4c:8f:32:10:21:65:6a:ce:da:e7:84:1f:
20:b5:73:23:4b:51:49:f5:fd:52:7a:c3:6b:ee:90:
69:c4:0a:9e:b2:99:a0:4c:3c:50:b8:eb:e8:5a:67:
28:c6:39:38:b2:6c:13:61:9c:e3:02:d8:c8:81:6d:
d5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AA:DE:AB:88:71:99:82:F5:18:12:F5:AD:6D:46:3B:64:3B:80:20
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/HKreq4hxmYL1GBL1rW1GO2Q7gCA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.142.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:22:f7:65:7b:d3:dc:45:c4:42:cc:ff:9b:73:8b:df:2c:67:
10:b2:5a:97:7c:23:fc:10:e4:30:21:f2:5d:67:8f:11:68:38:
fe:9e:72:a2:12:b1:5b:d5:5e:50:d9:98:ed:b5:bb:21:d9:84:
8c:6a:9f:88:f0:59:bf:1f:31:e9:5f:91:a9:54:aa:5b:58:99:
33:7d:98:e2:4f:84:29:22:77:59:f1:30:e0:0d:3f:e9:ac:4b:
a4:b5:46:c8:ee:95:14:29:2d:19:57:1c:1f:1f:d9:70:d2:6e:
56:27:f3:7c:b8:7e:83:f5:11:c5:64:f6:32:fa:4b:d2:0d:d6:
56:7e:24:df:fc:63:47:af:37:35:77:78:4e:3f:c2:57:d1:8c:
8e:72:a5:de:20:1d:c9:fd:f6:ef:aa:b9:15:9c:33:8c:59:43:
ba:d5:11:5a:0a:ea:24:2e:de:45:35:e2:12:89:c7:0a:bf:39:
f0:4b:93:58:31:2e:63:ae:29:b5:29:d1:32:a7:c6:87:e6:7c:
7a:eb:63:25:5a:f6:b9:62:38:38:8d:07:cb:8a:c3:49:5f:59:
f1:07:d4:c5:b5:27:55:2f:20:fb:59:48:c4:29:c2:34:b3:64:
7f:ee:09:42:2d:cc:bd:1e:5e:91:70:a4:31:e9:a1:5f:98:1a:
25:69:1c:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 15:40:25 2024 by rpki-client on console-fra.rpki-client.org