Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/rHgHaIdKOkbf6WYxs3m2wWkJTNs.roa
File: rHgHaIdKOkbf6WYxs3m2wWkJTNs.roa (raw, json)
Hash identifier: ZH9aoy62Ts/KQX0bH9yiK/enq8IEQ9yB25YxaGVvrFk=
Subject key identifier: AC:78:07:68:87:4A:3A:46:DF:E9:66:31:B3:79:B6:C1:69:09:4C:DB
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 018E66D0F55F5B5C51B24C0B281347767205
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/rHgHaIdKOkbf6WYxs3m2wWkJTNs.roa
Signing time: Fri 22 Mar 2024 15:39:14 +0000
ROA not before: Fri 22 Mar 2024 15:39:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49581
IP address blocks: 193.111.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:66:d0:f5:5f:5b:5c:51:b2:4c:0b:28:13:47:76:72:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Mar 22 15:39:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac780768874a3a46dfe96631b379b6c169094cdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:17:69:17:2a:1f:06:8f:05:b4:8d:be:da:1b:
98:b5:c1:76:7e:a8:7d:4e:12:1a:46:4e:5c:ac:b3:
f4:fa:51:e2:32:61:fe:3c:de:d8:a4:a2:72:a3:fe:
9d:07:9f:cd:90:17:d4:96:0a:73:f0:dc:8b:ba:19:
ba:9a:a4:e6:75:db:78:9b:e2:2c:e7:7b:98:26:1f:
e3:a7:9c:e2:5e:40:d9:7e:ba:99:90:84:5d:f9:cd:
49:c6:e0:88:6f:76:f7:f3:64:02:f9:26:77:2f:c1:
51:03:ea:3c:2a:00:3a:7c:41:e3:31:e3:55:b0:ff:
80:91:2b:20:ae:f6:a7:5c:a9:2a:ec:28:4d:00:5c:
a9:04:ad:7c:c7:3b:57:b1:f0:61:61:48:78:9b:76:
4b:46:d1:63:e1:66:29:0a:0a:0c:52:df:57:02:66:
94:d2:17:43:66:88:4c:5e:18:98:a0:35:b5:ec:0e:
b6:a4:e5:20:7c:ce:b0:c0:6c:13:e8:73:1f:f3:9a:
ec:50:3b:71:08:79:a3:79:72:fb:70:23:5c:17:f6:
41:00:48:a0:09:aa:dd:ed:81:01:71:90:21:e4:79:
a3:0b:85:24:c8:a1:23:0a:92:27:e4:fb:2a:9f:2a:
97:df:b3:f2:4f:ff:bb:82:10:e7:e4:3f:cb:5c:42:
08:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:78:07:68:87:4A:3A:46:DF:E9:66:31:B3:79:B6:C1:69:09:4C:DB
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/rHgHaIdKOkbf6WYxs3m2wWkJTNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.111.250.0/24
Signature Algorithm: sha256WithRSAEncryption
83:8a:74:c6:4f:b3:23:7e:a4:d0:a2:21:17:3f:10:ac:99:b2:
12:8a:08:82:0c:50:48:93:c6:7d:44:42:70:74:73:92:ed:dc:
f2:51:0b:a2:c3:69:42:99:87:ae:6c:c0:ae:ac:a7:7c:2e:07:
37:5b:65:30:2d:b3:77:9f:95:c8:d6:d7:73:98:30:e5:cc:ee:
a9:44:60:6d:38:1d:0f:af:cc:a1:f3:f1:89:ff:f3:70:3d:1c:
11:84:3f:dc:e0:25:2a:15:a5:c4:61:6a:02:74:ee:9f:1f:b5:
2e:fb:3d:40:1f:2c:79:4f:8b:47:ee:4b:3a:5d:f1:8d:5a:c3:
9b:41:e9:48:c8:91:6f:2b:03:e1:4f:8a:e6:2a:20:55:dd:c8:
26:c0:85:d6:af:c7:c8:5b:f3:9d:88:81:cb:bc:87:8e:f8:99:
99:6f:c7:0f:9e:bb:c4:8a:6d:cd:06:2f:b4:77:02:63:a8:5b:
25:6d:7d:2c:d5:36:82:fd:32:6c:d5:b7:42:48:a1:e1:d8:1a:
c4:92:31:06:f2:62:2a:e3:37:a7:e9:28:89:a6:4e:37:15:ce:
eb:a9:ce:bc:ca:82:74:46:da:6c:99:0a:c7:e3:15:56:1c:91:
bc:bf:c1:ce:a1:1f:3d:b0:ab:e3:e6:2e:10:72:e0:e3:13:74:
46:1c:43:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:38:14 2024 by rpki-client on console-fra.rpki-client.org