Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/HFO1YSvy1ae3yh-u3iZMGhK8zW8.roa
File: HFO1YSvy1ae3yh-u3iZMGhK8zW8.roa (raw, json)
Hash identifier: PB1mbjC1w0tPGiDKlIYHzpOd1Y9rvK8gURaTBX+3Ukw=
Subject key identifier: 1C:53:B5:61:2B:F2:D5:A7:B7:CA:1F:AE:DE:26:4C:1A:12:BC:CD:6F
Certificate issuer: /CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Certificate serial: 018CC7273EDEB4FF8E42AF243EFF3C6B30B9
Authority key identifier: 27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/HFO1YSvy1ae3yh-u3iZMGhK8zW8.roa
Signing time: Mon 01 Jan 2024 22:31:27 +0000
ROA not before: Mon 01 Jan 2024 22:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216314
IP address blocks: 91.204.77.0/24 maxlen: 24
91.204.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:03:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:3e:de:b4:ff:8e:42:af:24:3e:ff:3c:6b:30:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a7d1f0d73fe481c2188d28def0e858e715697e
Validity
Not Before: Jan 1 22:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c53b5612bf2d5a7b7ca1faede264c1a12bccd6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:dc:78:f7:29:0a:f7:8e:57:2a:06:bf:0f:53:
41:df:e7:75:e0:65:3c:3c:71:ad:f1:d6:77:1b:84:
3f:32:51:75:95:ba:4e:e3:e1:5b:5d:1b:34:ab:7b:
31:34:f6:c0:7c:7e:42:e7:68:a7:e7:91:8b:67:f5:
e2:b0:2d:9d:18:39:17:e0:d2:d4:43:b9:ef:bd:02:
a1:e3:0c:13:55:a7:5e:46:43:eb:d7:be:5f:1d:e4:
65:5a:11:04:ae:b9:60:98:d3:dd:0d:9b:24:89:27:
2e:80:77:fa:87:7c:c2:b6:5c:80:21:43:45:f3:90:
c1:fe:80:e5:57:2e:0a:8e:06:fe:0b:30:af:4e:8e:
6f:11:1c:4c:ea:f8:75:8c:3e:43:8f:ae:e9:b8:78:
01:93:e5:4e:ae:e3:49:23:8f:32:36:f6:4a:6e:ac:
e9:58:7b:92:9e:27:dc:93:ce:17:8b:32:9d:3a:46:
3a:7b:70:07:af:67:ea:8a:89:45:bf:cd:7c:89:9f:
00:8a:b7:a5:22:b3:13:48:64:72:7c:fd:9a:ec:4a:
cd:ef:34:1b:18:e3:f5:c3:9e:68:08:bb:92:bb:0b:
33:97:74:63:a7:38:50:0e:36:21:91:7b:b8:be:61:
68:b5:7e:0e:9d:a2:97:79:5e:1f:ba:07:97:0f:a3:
02:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:53:B5:61:2B:F2:D5:A7:B7:CA:1F:AE:DE:26:4C:1A:12:BC:CD:6F
X509v3 Authority Key Identifier:
keyid:27:A7:D1:F0:D7:3F:E4:81:C2:18:8D:28:DE:F0:E8:58:E7:15:69:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/HFO1YSvy1ae3yh-u3iZMGhK8zW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d82ef6-836a-47c7-a6c1-d6eaafc6b4f5/1/J6fR8Nc_5IHCGI0o3vDoWOcVaX4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.77.0/24
91.204.79.0/24
Signature Algorithm: sha256WithRSAEncryption
24:b3:9c:e6:db:3e:02:05:6d:68:d1:ef:74:19:2a:37:2c:2e:
87:68:a3:7b:10:55:42:70:d7:56:da:d7:fd:9b:be:f4:a4:c5:
24:fa:ec:cc:0c:07:d2:df:01:4a:a1:94:d7:0e:19:f0:88:11:
41:5b:23:f1:d9:d6:dd:4a:8a:ac:a0:b6:86:b9:bb:5c:c3:64:
62:af:25:10:40:fa:78:4b:ed:11:d3:db:86:78:b2:6b:42:2c:
89:89:50:a7:37:61:a1:aa:ec:4f:bb:bc:ed:66:8e:19:3e:cb:
6b:50:91:c0:92:13:d8:a7:4b:5b:a4:30:93:32:af:87:bc:c8:
98:98:61:72:9f:ff:79:8a:3f:53:c7:52:0e:cf:00:a8:5c:43:
d1:b9:c1:ce:88:47:33:11:6f:5c:26:ee:7e:4d:c5:22:56:0f:
6e:4b:b5:d1:14:25:51:6e:af:0d:e6:a1:b8:91:9b:fd:b1:a7:
2e:5d:26:f2:ae:b4:dd:c4:3e:a3:30:60:1d:ee:ca:66:dd:7c:
20:59:5c:3c:19:0b:4d:f8:0d:15:e0:6f:bc:2e:6b:46:88:ad:
8d:0a:5a:00:87:51:3d:0b:8c:28:84:40:ef:68:92:a3:79:d2:
de:73:e4:92:72:69:5e:7d:83:e6:9c:bb:ff:a6:cf:ef:72:d6:
2d:b2:83:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:28:07 2024 by rpki-client on console-ams.rpki-client.org