Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/HnEWmQ4FsLGGlD26Fi5jFydjpUE.roa
File: HnEWmQ4FsLGGlD26Fi5jFydjpUE.roa (raw, json)
Hash identifier: KsfSjksVt9k9vVVvfuxp4X2lQ0lkQFfGGhD3QESMA6Q=
Subject key identifier: 1E:71:16:99:0E:05:B0:B1:86:94:3D:BA:16:2E:63:17:27:63:A5:41
Certificate issuer: /CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Certificate serial: 018CC9BBFFDB76AEEA6AFAE082DB10241751
Authority key identifier: 23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/HnEWmQ4FsLGGlD26Fi5jFydjpUE.roa
Signing time: Tue 02 Jan 2024 10:33:10 +0000
ROA not before: Tue 02 Jan 2024 10:33:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1853
IP address blocks: 193.170.0.0/15 maxlen: 15
78.104.0.0/16 maxlen: 16
193.171.1.0/24 maxlen: 24
185.154.40.0/22 maxlen: 22
2001:628::/29 maxlen: 29
2001:67c:1864::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.mft
rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 01:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:ff:db:76:ae:ea:6a:fa:e0:82:db:10:24:17:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23d8448c5cb90398e4c285cec9c0f4766ac931df
Validity
Not Before: Jan 2 10:33:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e7116990e05b0b186943dba162e63172763a541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:81:b7:cf:4d:3a:a0:af:a6:81:ed:ac:b1:30:
d9:03:a2:4a:a7:d0:8b:a6:eb:f3:c9:6b:35:9f:ea:
d7:4a:11:47:b1:b3:48:93:d6:c7:0f:81:6d:77:6f:
bf:ba:4b:f1:45:65:8b:a5:66:af:16:75:50:3b:4b:
f1:2b:1e:16:8e:fc:52:28:7d:e7:4a:da:85:60:d7:
0b:8e:ac:6e:e0:4d:4f:b9:5c:6c:02:ef:0f:f8:d6:
33:bb:a0:74:06:98:e7:f5:de:3c:92:86:d0:21:36:
53:1b:0b:b4:2d:49:10:18:be:d0:d4:78:90:46:f2:
47:f6:27:29:1b:86:e6:ec:d7:f1:2d:a3:23:8b:01:
88:a3:47:47:46:86:17:4b:54:50:99:cb:61:14:04:
65:b0:bf:bb:76:1b:57:f6:d2:d8:b1:05:44:69:16:
1b:59:1c:3e:b1:24:12:c1:cc:d0:da:79:1f:ec:f0:
25:17:ee:d0:78:33:4c:14:e7:04:4d:38:33:15:8b:
77:39:d1:96:f8:90:17:5f:fd:ce:80:e8:a0:5d:cd:
8e:28:3a:26:97:83:4b:68:3b:65:8c:09:5d:0b:af:
de:09:69:aa:db:99:b3:36:c8:1f:ed:3a:23:45:3e:
1f:ac:69:67:42:83:5b:07:44:a8:74:55:c3:bb:b3:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:71:16:99:0E:05:B0:B1:86:94:3D:BA:16:2E:63:17:27:63:A5:41
X509v3 Authority Key Identifier:
keyid:23:D8:44:8C:5C:B9:03:98:E4:C2:85:CE:C9:C0:F4:76:6A:C9:31:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I9hEjFy5A5jkwoXOycD0dmrJMd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/HnEWmQ4FsLGGlD26Fi5jFydjpUE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/f4a80d-f5f7-4522-b9b5-f772a0139016/1/I9hEjFy5A5jkwoXOycD0dmrJMd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.104.0.0/16
185.154.40.0/22
193.170.0.0/15
IPv6:
2001:628::/29
2001:67c:1864::/48
Signature Algorithm: sha256WithRSAEncryption
ae:44:19:13:4b:bb:d0:3a:69:26:6b:50:83:ef:82:41:76:79:
1a:01:13:6b:49:1a:04:b4:be:11:f9:f1:fe:70:99:61:ab:34:
5b:12:c7:9a:e8:a6:69:8d:fc:81:7f:5b:e4:c1:47:64:60:2b:
c0:df:b3:9b:8a:f4:9a:1c:2c:4f:3f:b4:a8:f8:27:3f:37:2c:
cf:e2:bc:15:2b:9e:7e:b9:e8:e2:e5:f1:e1:57:63:8b:08:21:
20:cb:1e:af:58:6d:bf:a3:71:53:63:c6:06:34:e3:d3:c6:b3:
dc:e4:4d:80:c9:1c:8f:cd:dd:56:be:b2:8c:2c:bc:f9:d0:7a:
4f:e1:b5:2d:ed:0d:26:dd:df:da:0d:d1:21:74:55:a5:30:c0:
49:1d:c2:77:d1:a1:35:19:5b:67:a0:ae:4d:7f:50:98:0a:54:
b9:81:4a:0a:1f:8e:03:3d:c6:eb:2c:73:0b:48:fc:30:8c:7d:
73:43:a7:70:69:5c:45:48:a9:b3:78:b1:db:ea:64:7e:25:8d:
9b:78:9f:b9:7c:9c:e7:cd:ee:6e:63:f2:b4:cd:9f:7c:d9:98:
28:7b:33:4d:88:cb:62:ff:06:69:c6:2f:55:67:7f:c2:29:c9:
44:2d:55:e2:50:a7:b9:88:89:7b:38:a4:d2:5d:f7:99:0b:69:
c9:cd:6d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:44:27 2024 by rpki-client on console-ams.rpki-client.org