Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/HC7GX5VKiAMLgr7Bp_tXCjnfwq0.roa
File: HC7GX5VKiAMLgr7Bp_tXCjnfwq0.roa (raw, json)
Hash identifier: k8El59LjN1wBLnovGyiouNcfZk/D7s5HKkbN/D39QEs=
Subject key identifier: 1C:2E:C6:5F:95:4A:88:03:0B:82:BE:C1:A7:FB:57:0A:39:DF:C2:AD
Certificate issuer: /CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Certificate serial: 018D12995185053F38F5322CD476DD6AA3E1
Authority key identifier: 74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/HC7GX5VKiAMLgr7Bp_tXCjnfwq0.roa
Signing time: Tue 16 Jan 2024 14:07:34 +0000
ROA not before: Tue 16 Jan 2024 14:07:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 61218
IP address blocks: 95.128.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:12:99:51:85:05:3f:38:f5:32:2c:d4:76:dd:6a:a3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745e643d021ec6d21b475ae460ddedcf7e6b3f66
Validity
Not Before: Jan 16 14:07:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c2ec65f954a88030b82bec1a7fb570a39dfc2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cb:eb:c7:c8:24:5d:82:1b:ea:1e:50:0d:67:
f4:d8:58:ec:dd:5d:0d:68:42:18:09:3d:ff:86:55:
dd:5e:17:cb:7f:6f:02:bb:94:dc:10:5f:72:c5:48:
e5:58:d5:8e:7c:2f:3b:87:6b:77:66:ed:30:04:5d:
58:12:ca:09:6e:7c:5b:5b:68:e7:5a:7e:90:30:c1:
98:22:55:7b:76:4f:a6:e0:c2:d6:86:80:30:bb:0f:
f2:13:29:ec:09:19:84:85:62:a7:6b:04:dc:19:85:
41:e7:25:2c:f0:2e:80:95:1f:1f:4f:e4:81:da:9d:
02:e2:7c:cd:b6:19:44:d8:10:a0:89:04:f2:05:5e:
bf:d6:03:05:23:31:19:20:7e:e7:2c:f8:cd:cf:cd:
ee:65:fa:44:d3:41:0c:50:41:01:46:88:46:40:f0:
1a:c5:8e:f4:5c:4a:ca:00:01:7e:21:bc:4c:f9:f9:
8d:a4:f1:64:36:8a:54:fb:34:3a:40:82:53:89:30:
14:83:63:43:07:e3:7b:56:e9:be:b0:94:ba:03:de:
50:42:05:42:30:c1:41:ec:3e:a1:ae:90:b8:a1:d5:
ff:ae:72:36:51:c0:69:71:9d:f3:c4:05:a4:80:60:
7a:4f:a8:c6:3b:a8:09:5b:6a:14:70:3d:57:ea:27:
4b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2E:C6:5F:95:4A:88:03:0B:82:BE:C1:A7:FB:57:0A:39:DF:C2:AD
X509v3 Authority Key Identifier:
keyid:74:5E:64:3D:02:1E:C6:D2:1B:47:5A:E4:60:DD:ED:CF:7E:6B:3F:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dF5kPQIextIbR1rkYN3tz35rP2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/HC7GX5VKiAMLgr7Bp_tXCjnfwq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/4da5d5-3152-4f54-a0a9-a95aef9c91d9/1/dF5kPQIextIbR1rkYN3tz35rP2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.199.0/24
Signature Algorithm: sha256WithRSAEncryption
56:07:70:3c:14:24:98:d6:6e:d6:2b:86:20:3d:a3:8d:c5:93:
eb:5e:ff:4a:43:10:64:d3:0f:6d:b1:2b:ff:f3:27:52:b4:9e:
81:ae:8c:df:fa:1c:d8:de:f0:33:a8:04:3a:fc:b9:1a:ad:98:
63:d7:a4:d7:76:d7:97:2d:84:84:c4:4a:ca:db:be:fa:6f:7e:
35:4e:48:f4:8e:6f:d7:78:d1:be:37:fd:9a:d4:d7:f7:23:b5:
e4:89:64:8c:1e:55:cc:4a:be:05:a5:b2:5f:b5:b3:b3:f4:b6:
84:ba:ca:7f:d5:89:ff:48:72:14:06:bb:31:4e:aa:82:8d:16:
b3:44:86:ff:7e:67:b5:6a:5a:ed:a8:cb:60:72:ce:0e:38:b6:
a2:d9:3d:e9:10:be:be:20:39:d6:d4:fb:78:21:5d:68:30:63:
01:43:fc:cf:76:1e:27:75:cb:36:32:4c:d6:cf:80:c6:28:63:
6d:91:8d:88:81:df:25:e8:57:09:c1:fb:22:3d:fc:d2:33:c3:
76:6c:f0:46:95:8f:3a:13:d6:5c:d6:cd:12:1c:a2:85:85:d5:
82:32:d2:00:94:3d:6e:c8:92:1e:78:51:93:57:32:9a:58:40:
22:08:a9:e4:32:5d:d6:0f:f4:a9:0a:cc:4b:bf:bd:07:17:df:
f2:2b:dc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:11:13 2024 by rpki-client on console-fra.rpki-client.org