Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/HyeDvTAVvAioLL7bNu6p9j1X4-U.roa
File: HyeDvTAVvAioLL7bNu6p9j1X4-U.roa (raw, json)
Hash identifier: 3BMBVCzJBojOx/meF3/jYltUSf00J+SfuK3w4a/K5xM=
Subject key identifier: 1F:27:83:BD:30:15:BC:08:A8:2C:BE:DB:36:EE:A9:F6:3D:57:E3:E5
Certificate issuer: /CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Certificate serial: 018CC8DF1A1F7A3B8DC120884C09B3696C10
Authority key identifier: 81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/HyeDvTAVvAioLL7bNu6p9j1X4-U.roa
Signing time: Tue 02 Jan 2024 06:31:53 +0000
ROA not before: Tue 02 Jan 2024 06:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8412
IP address blocks: 45.12.96.0/23 maxlen: 24
45.12.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.mft
rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Jun 2024 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:1a:1f:7a:3b:8d:c1:20:88:4c:09:b3:69:6c:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81cdc17dad03bcb9bc34a9e377ab2070852dca65
Validity
Not Before: Jan 2 06:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f2783bd3015bc08a82cbedb36eea9f63d57e3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:80:fa:f4:ea:9e:d8:e0:7e:bf:fe:4e:f5:
93:11:d9:c0:7f:da:b3:73:fc:23:87:9d:73:da:cd:
2c:6c:f6:22:40:d4:21:55:39:91:56:e7:d4:d4:df:
e1:3f:ee:31:ff:a0:43:c8:d5:92:f3:16:da:36:21:
0f:82:14:58:7a:e5:4e:7d:47:cb:c2:dd:23:87:7c:
f8:ba:df:d7:12:1b:5b:d1:c5:ff:20:da:f7:09:b8:
96:7a:fa:a4:5f:69:ae:5e:c8:7b:3c:63:f5:b8:b5:
d8:6d:7d:16:84:2e:35:66:ad:e3:0a:c2:89:c5:01:
38:d9:ed:d7:31:71:50:98:50:cf:b0:60:c8:94:7f:
ae:6e:5f:de:95:52:55:8b:bd:aa:ee:8d:49:6f:14:
65:0c:ff:ab:ea:d6:44:30:65:ac:f5:e3:1a:b3:cd:
cc:98:36:82:48:a1:86:67:ea:44:ee:bd:ed:14:58:
4d:8f:98:fa:d7:38:9f:c4:e1:d0:3f:f3:10:7c:68:
40:21:64:21:6c:2a:25:90:44:a3:e9:c3:2c:21:91:
08:88:f0:be:3a:63:13:ae:01:a1:81:3e:e7:8d:b0:
af:53:c0:07:aa:46:cf:ea:f3:29:9e:e6:11:e8:49:
a3:e0:ad:5f:53:2c:80:9c:65:93:48:f8:a1:d8:0d:
c5:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:27:83:BD:30:15:BC:08:A8:2C:BE:DB:36:EE:A9:F6:3D:57:E3:E5
X509v3 Authority Key Identifier:
keyid:81:CD:C1:7D:AD:03:BC:B9:BC:34:A9:E3:77:AB:20:70:85:2D:CA:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gc3Bfa0DvLm8NKnjd6sgcIUtymU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/HyeDvTAVvAioLL7bNu6p9j1X4-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/efc9f1-bec3-4771-b480-0184e81aead9/1/gc3Bfa0DvLm8NKnjd6sgcIUtymU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.96.0-45.12.98.255
Signature Algorithm: sha256WithRSAEncryption
72:35:7c:bb:0e:6e:23:ad:bb:2b:82:50:c6:91:25:96:03:1e:
8a:03:3f:46:1a:b1:31:d1:85:47:63:b8:7c:88:4a:7f:c1:c1:
11:ae:54:32:22:ef:a3:d8:55:a0:3b:70:81:28:dc:8d:39:11:
62:b2:75:83:1e:dd:79:0e:f6:5b:e4:c9:69:44:2e:c9:ef:a2:
3c:c3:16:5e:f7:69:3d:6f:b0:75:0e:69:ce:2c:98:d1:0c:b8:
c7:0f:09:1b:1c:85:5c:8c:a7:70:30:7a:46:5a:5c:9b:dc:0c:
b4:72:2e:8e:08:6d:6d:d7:ea:3b:74:72:13:38:bc:85:18:5c:
c4:2f:fc:84:33:dc:a8:61:8a:7b:d5:a6:53:aa:ff:78:39:91:
98:35:36:9c:91:23:79:23:b7:44:35:64:e2:17:1c:01:d5:7a:
91:04:6a:0e:d0:85:a4:e7:a3:52:52:a9:11:5c:0e:44:b8:0c:
e5:f1:77:2f:7e:10:0f:ad:ff:ea:2f:7f:22:c0:d8:9a:b4:21:
e1:13:eb:15:6f:09:57:33:02:91:0c:45:37:1e:a1:11:2b:c7:
22:30:b3:25:14:9b:0b:1e:2c:cc:d3:5c:1c:f2:ba:be:cd:e0:
7b:0f:12:5e:b0:73:c6:d7:ed:65:1e:16:68:03:ca:c0:5c:8a:
8c:99:c0:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 14:28:47 2024 by rpki-client on console-ams.rpki-client.org