Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/hqvma0CeTJ45ea_X-SICQbfpbo8.roa
File: hqvma0CeTJ45ea_X-SICQbfpbo8.roa (raw, json)
Hash identifier: wstfGNkdmR/Hbz0Coj3w2o5zGiNn3d72J9FkS/Tuy9Y=
Subject key identifier: 86:AB:E6:6B:40:9E:4C:9E:39:79:AF:D7:F9:22:02:41:B7:E9:6E:8F
Certificate issuer: /CN=66feef09c450990af34779ce701be6cd54b3d924
Certificate serial: 018CC9BC9613B710BCF2933BE9343FD73036
Authority key identifier: 66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/hqvma0CeTJ45ea_X-SICQbfpbo8.roa
Signing time: Tue 02 Jan 2024 10:33:48 +0000
ROA not before: Tue 02 Jan 2024 10:33:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1299
IP address blocks: 83.168.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:51:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:96:13:b7:10:bc:f2:93:3b:e9:34:3f:d7:30:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66feef09c450990af34779ce701be6cd54b3d924
Validity
Not Before: Jan 2 10:33:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86abe66b409e4c9e3979afd7f9220241b7e96e8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:85:e3:6c:00:76:6c:70:2b:1a:24:5b:56:57:
ef:9e:dd:f7:92:9c:71:da:f6:9e:61:fd:eb:9b:5d:
ae:7f:20:0f:91:75:d8:13:3a:f1:2a:00:28:9f:6e:
cd:0a:c9:dc:cc:bf:e8:f7:90:a4:e6:31:0a:2b:23:
df:fd:ed:05:c1:05:48:ca:4c:8d:3f:76:61:de:bf:
23:f8:04:88:05:fc:d1:56:ba:cf:d3:29:d8:73:6d:
5a:a4:a2:b4:8b:b8:a5:9b:85:86:41:7d:7f:96:e9:
77:48:63:f6:16:31:36:dc:7c:34:ff:85:88:ad:40:
1f:02:66:0c:50:f8:0b:2e:88:d0:de:6c:05:f0:1e:
fd:26:b8:4e:0f:a0:c6:bd:6e:df:7f:37:3a:1b:a8:
4a:3a:9f:ef:f0:39:2d:55:b9:8f:98:76:3f:44:45:
f1:7b:36:d5:2b:84:a0:99:3b:be:09:59:fd:24:ab:
74:ed:11:7b:71:20:f0:48:d7:d1:f3:5a:5f:bf:1d:
c6:f1:b4:f4:26:88:6c:b8:7d:11:fb:b5:7a:1f:e4:
d6:a4:16:e5:0f:00:1f:2b:e9:cd:af:fa:b6:91:9f:
c0:67:15:ad:23:f7:f6:b8:f9:33:50:5d:50:c6:9e:
ee:5c:bf:49:f3:76:d6:03:96:72:ac:b1:6c:e9:41:
bf:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AB:E6:6B:40:9E:4C:9E:39:79:AF:D7:F9:22:02:41:B7:E9:6E:8F
X509v3 Authority Key Identifier:
keyid:66:FE:EF:09:C4:50:99:0A:F3:47:79:CE:70:1B:E6:CD:54:B3:D9:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/hqvma0CeTJ45ea_X-SICQbfpbo8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a1597b-6ef2-4430-aa56-82451f33f4ca/1/Zv7vCcRQmQrzR3nOcBvmzVSz2SQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.168.124.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:c3:b3:74:bd:7b:bd:da:cc:eb:1e:c0:6f:80:2e:ed:e0:19:
ed:ad:31:5e:c5:d6:5a:c7:92:25:06:4e:8e:e0:27:eb:57:c5:
d5:29:b1:68:43:5f:03:db:46:9a:61:ae:8d:d2:79:61:c7:bf:
0e:ac:37:f7:ab:83:a8:bf:f2:e1:98:e4:60:b6:96:0e:cc:16:
41:4a:6f:a5:38:29:de:a1:bf:b7:64:8e:b7:75:b3:97:9f:9e:
ca:d7:9e:95:86:55:1f:16:e8:91:4a:36:40:d2:94:cf:c2:b6:
8f:f5:82:0a:57:3a:2b:17:59:16:7e:32:6d:5a:3e:fe:57:93:
ce:3c:25:82:68:17:74:1a:8a:a0:82:9a:31:07:58:5f:96:1c:
f2:c6:f4:3d:a2:17:f5:33:d2:a1:cc:91:68:c5:77:38:84:cd:
7f:6a:60:f6:a8:cb:e2:1a:b7:31:e0:cc:67:87:0a:d1:80:e9:
5b:a0:e2:15:c0:f6:eb:5c:9d:38:f0:84:5c:10:8f:7c:cf:0f:
32:a4:d4:2e:d4:83:1f:40:7d:f3:46:e1:d7:2b:3b:fe:5b:3e:
b5:3c:e5:01:94:43:b2:d1:f0:84:0e:fa:e4:50:8f:d5:d2:c8:
49:f4:d8:68:29:1a:3b:5f:79:22:15:d9:85:75:53:da:5a:6e:
a9:d5:48:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 18:32:56 2024 by rpki-client on console-fra.rpki-client.org