Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/HTmvRW_zV4w090FgOybkUBFNRqw.roa
File: HTmvRW_zV4w090FgOybkUBFNRqw.roa (raw, json)
Hash identifier: 3MKuF40770Y8ap3+0Aj5gKYQSehLHx0XhGARpiokR2U=
Subject key identifier: 1D:39:AF:45:6F:F3:57:8C:34:F7:41:60:3B:26:E4:50:11:4D:46:AC
Certificate issuer: /CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Certificate serial: 018CC64B1232A91E85516085A89CDE5B3ED2
Authority key identifier: C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/HTmvRW_zV4w090FgOybkUBFNRqw.roa
Signing time: Mon 01 Jan 2024 18:30:57 +0000
ROA not before: Mon 01 Jan 2024 18:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31493
IP address blocks: 194.33.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:12:32:a9:1e:85:51:60:85:a8:9c:de:5b:3e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c77ff58d19af10bda4fcb0cf31e58de094bbbb48
Validity
Not Before: Jan 1 18:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d39af456ff3578c34f741603b26e450114d46ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f9:14:e7:93:06:4d:9a:78:68:a6:ca:a4:9c:
d1:e9:ff:e6:ec:b4:0f:1b:63:93:2c:27:a9:74:d6:
c7:c2:c8:81:dc:9b:94:23:93:96:45:9f:13:b6:63:
29:c4:1b:c0:6f:0e:02:9d:87:f4:f4:50:5a:52:35:
13:25:25:7d:e2:9d:f9:1b:b1:2a:78:1e:4e:3a:8b:
96:ef:90:ab:24:d5:16:48:be:34:9d:5a:9a:34:80:
24:3d:ca:e7:fa:11:04:ba:ec:ee:f6:e1:82:11:33:
34:04:10:9e:d8:04:ab:38:f9:af:8b:70:d2:e9:ff:
5c:c3:04:7f:74:32:d1:aa:9a:3d:41:b7:84:24:03:
77:dd:4e:51:a3:55:3d:f0:04:ee:6b:60:ed:75:bb:
d9:7a:71:f2:8a:6d:13:bc:5e:40:7b:2a:0d:f5:ec:
ea:11:5a:61:5d:c4:e4:57:74:40:da:d1:9d:b2:3e:
de:70:e8:56:67:75:48:87:e5:8b:c2:75:dd:d9:c9:
17:d8:7f:e0:e5:3b:df:9a:bf:9f:92:11:30:69:73:
ce:0c:6c:f5:61:b5:b4:a5:bd:c1:32:6f:2f:ff:0f:
e8:95:59:21:d0:05:4b:7f:9d:76:1c:51:ab:8f:df:
d8:f6:98:51:ab:00:36:df:99:a7:20:18:2a:1b:53:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:39:AF:45:6F:F3:57:8C:34:F7:41:60:3B:26:E4:50:11:4D:46:AC
X509v3 Authority Key Identifier:
keyid:C7:7F:F5:8D:19:AF:10:BD:A4:FC:B0:CF:31:E5:8D:E0:94:BB:BB:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x3_1jRmvEL2k_LDPMeWN4JS7u0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/HTmvRW_zV4w090FgOybkUBFNRqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/846607-00c8-401d-bcfe-0a6f8b1c654d/1/x3_1jRmvEL2k_LDPMeWN4JS7u0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.63.0/24
Signature Algorithm: sha256WithRSAEncryption
60:cf:ff:b4:c9:33:9e:be:2e:cb:7a:e3:92:54:2d:11:e0:13:
73:c9:76:ba:fa:b2:25:ec:04:dc:35:c9:95:53:06:ac:b3:13:
6f:09:dc:5e:b1:38:16:32:33:ca:84:60:bb:2e:a5:21:a6:3e:
c0:8f:98:fb:f6:9b:8b:4a:72:bb:1e:bb:d9:ca:7d:46:fc:fb:
3b:68:03:64:87:ae:bd:dd:1b:86:2d:86:19:5a:b8:c0:84:20:
9f:85:b7:3d:67:df:6f:86:b2:01:23:f1:a3:97:f4:ba:77:f7:
0f:5a:03:15:de:ae:d3:f4:bd:4b:9a:17:f6:93:a2:ad:a9:7e:
37:a1:fd:c7:00:f9:c5:10:58:b6:8f:14:a0:2a:1a:a8:de:39:
48:4a:ef:04:27:fd:a5:02:ba:7d:4d:9d:ae:ed:97:d4:28:3d:
d4:dc:ec:3f:1c:04:64:13:46:95:d8:75:38:31:fe:51:66:eb:
2c:25:46:3a:96:8a:10:f8:70:db:ef:5c:ab:0c:4f:ff:42:a6:
59:a8:4a:62:a3:d6:9c:5e:51:82:a9:ca:6a:d0:94:94:5f:16:
72:f5:ee:62:4c:06:64:c0:6c:2e:35:2e:1b:69:23:20:90:7c:
3f:43:36:45:c7:fa:b4:6e:60:3e:85:68:01:94:7b:99:ef:26:
dc:ac:42:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:08:18 2024 by rpki-client on console-ams.rpki-client.org