Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/H3EvvZ-1NtlMpcu8A23zGRXm6uI.roa
File: H3EvvZ-1NtlMpcu8A23zGRXm6uI.roa (raw, json)
Hash identifier: SYDB9EaJOGhLNol0d1b4oOV6J9DEo/tDRN6C2pREWho=
Subject key identifier: 1F:71:2F:BD:9F:B5:36:D9:4C:A5:CB:BC:03:6D:F3:19:15:E6:EA:E2
Certificate issuer: /CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Certificate serial: 018CC56E7D6030D42DDF66FA3891DEFF5FA8
Authority key identifier: 5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/H3EvvZ-1NtlMpcu8A23zGRXm6uI.roa
Signing time: Mon 01 Jan 2024 14:30:01 +0000
ROA not before: Mon 01 Jan 2024 14:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6730
IP address blocks: 194.33.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.mft
rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:7d:60:30:d4:2d:df:66:fa:38:91:de:ff:5f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a8a52dc998f1148c078290bdbb4d3cdc3f03cbc
Validity
Not Before: Jan 1 14:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f712fbd9fb536d94ca5cbbc036df31915e6eae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f0:b2:bd:d1:67:2f:ff:ba:59:a6:d4:ea:cc:
8b:8f:ff:23:33:e5:16:b3:b6:90:79:5e:8f:ee:5e:
e8:0a:d8:89:7f:e4:44:3b:9f:e7:bc:bf:7c:d8:02:
61:34:31:10:ee:85:15:6e:de:ad:f9:80:7e:3f:8d:
08:b4:31:a2:94:09:16:3e:35:28:d4:e6:54:9e:e1:
f4:95:ba:f7:47:33:79:49:8b:ce:f3:24:54:5d:56:
cb:37:9a:59:d1:4b:f2:17:5c:d1:34:44:a1:24:7e:
0e:a7:56:81:a6:5d:15:ad:57:21:b9:d5:dd:10:84:
7e:db:c3:df:db:c5:33:72:d0:4d:bb:fa:e8:93:51:
d0:da:f4:4d:6d:f1:10:0c:1f:0e:4c:6a:ea:75:03:
f8:3f:b4:f2:18:8d:fe:dd:d4:f8:92:3a:c8:9a:d1:
29:31:9f:c4:f3:70:8e:5f:dc:57:d1:4f:53:17:ed:
87:22:96:8f:89:24:6f:b6:81:34:51:ff:91:8d:e2:
8c:67:42:af:4b:ef:1d:cb:32:d1:f3:6b:fe:c2:70:
78:cb:b9:8d:fa:9d:75:18:f6:57:9b:08:81:bf:f2:
3f:06:82:76:20:a6:e6:fc:34:a0:5c:e1:d0:ef:a4:
f7:ef:c8:fd:1e:4a:b7:06:94:a9:69:5b:46:b1:d2:
f2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:71:2F:BD:9F:B5:36:D9:4C:A5:CB:BC:03:6D:F3:19:15:E6:EA:E2
X509v3 Authority Key Identifier:
keyid:5A:8A:52:DC:99:8F:11:48:C0:78:29:0B:DB:B4:D3:CD:C3:F0:3C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WopS3JmPEUjAeCkL27TTzcPwPLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/H3EvvZ-1NtlMpcu8A23zGRXm6uI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a3d825-d7a7-47cc-a0ca-9666edeee1e3/1/WopS3JmPEUjAeCkL27TTzcPwPLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.186.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:8b:fc:04:d6:4e:b9:84:75:99:f9:df:ef:6f:49:79:ff:b1:
64:f2:9e:6a:a9:2c:22:2d:58:56:b7:f7:12:aa:cd:bb:b4:01:
4f:97:72:75:be:82:fe:ed:76:9e:e5:c7:e0:34:11:81:93:e4:
75:b7:24:ec:bb:86:62:79:f7:45:cf:b5:84:e6:69:44:9c:33:
97:38:34:4f:c6:0e:20:bb:ed:f4:d1:ce:d8:e5:1c:a9:99:cd:
d4:51:0b:60:b5:cb:12:ba:db:4c:7b:04:c3:ee:6b:0c:d7:69:
fe:a9:08:cf:5e:62:55:4c:39:ac:c3:0a:70:20:81:11:1b:bd:
a4:ce:9b:b1:87:fe:f6:41:4e:49:a7:6c:aa:8f:aa:ee:21:ba:
25:03:9b:e0:60:f3:61:05:ca:46:eb:ef:46:0d:9b:05:43:c8:
36:39:c0:2d:c2:9d:f2:99:18:9d:94:eb:66:3b:7c:b0:68:1a:
44:33:a7:aa:d5:52:9c:73:1a:78:ae:27:72:a7:3e:ed:d3:ed:
2e:96:e9:f0:19:1a:ee:a6:ae:07:2c:76:aa:d4:4c:c9:21:c4:
52:23:37:c4:7d:46:bd:c9:a0:ed:16:23:a9:0a:51:10:05:43:
d9:03:4d:14:30:9a:3f:f8:71:26:1b:29:cd:19:8f:ae:b5:61:
28:55:6a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:45:47 2024 by rpki-client on console-ams.rpki-client.org