Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/HKJqPdNlwIvtM0f8iEoi6mczfMg.roa
File: HKJqPdNlwIvtM0f8iEoi6mczfMg.roa (raw, json)
Hash identifier: 19tKd58Z7I1n7+l/4+A9iHt4PaVuMRdyURBZIZNx9Kw=
Subject key identifier: 1C:A2:6A:3D:D3:65:C0:8B:ED:33:47:FC:88:4A:22:EA:67:33:7C:C8
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 018CC801A68EE5527730C0ACB70CD508A1B6
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/HKJqPdNlwIvtM0f8iEoi6mczfMg.roa
Signing time: Tue 02 Jan 2024 02:30:00 +0000
ROA not before: Tue 02 Jan 2024 02:30:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200020
IP address blocks: 212.114.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a6:8e:e5:52:77:30:c0:ac:b7:0c:d5:08:a1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Jan 2 02:30:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ca26a3dd365c08bed3347fc884a22ea67337cc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:c6:f8:46:e4:8f:6f:62:fa:50:c5:30:d1:
ee:fa:db:09:95:a1:03:6c:17:2f:d1:64:70:93:7d:
97:e3:46:52:82:74:c2:a7:6c:60:06:9f:8c:46:82:
28:f9:9d:04:13:59:3e:22:62:71:24:dc:60:57:d8:
ed:75:63:e3:dc:5c:d1:32:eb:34:bf:b7:2e:34:78:
72:79:06:ac:f6:04:7f:2c:61:cd:78:f3:2b:2e:aa:
c3:05:b8:ff:2b:81:ac:72:5f:d7:ce:05:c1:20:6e:
00:0d:d6:4f:0c:2e:73:5d:ae:df:df:3d:1c:ab:88:
5d:64:5c:d9:cd:a6:99:b0:1d:5d:b9:6e:29:f2:ec:
90:13:f0:9b:63:50:50:75:03:95:64:13:e7:5f:ee:
c2:af:c8:1c:b6:87:87:7b:9c:67:24:7c:cb:d9:a5:
99:01:72:92:e6:60:32:43:3d:3d:b0:d9:ee:1e:24:
ca:c4:61:ba:19:bb:fe:3c:a7:da:d5:ad:ba:5e:84:
31:95:e3:d8:b6:da:48:eb:6e:86:04:f4:ba:51:3e:
fb:7a:a0:59:0e:70:d7:c1:7a:3c:3f:51:4b:14:e9:
65:1c:7c:ee:e2:f2:f9:6f:0b:ff:df:af:68:1e:da:
f6:e6:34:7c:24:e5:fd:30:d9:a1:9b:c6:15:14:6c:
3e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A2:6A:3D:D3:65:C0:8B:ED:33:47:FC:88:4A:22:EA:67:33:7C:C8
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/HKJqPdNlwIvtM0f8iEoi6mczfMg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.114.112.0/24
Signature Algorithm: sha256WithRSAEncryption
80:f4:a5:5a:38:ee:41:af:c2:28:14:bd:c7:95:32:85:38:48:
21:a4:52:43:91:51:d3:f8:98:25:bd:fc:69:23:ec:7b:03:36:
e7:67:d1:6e:6a:9b:01:2f:96:9b:82:39:68:61:6b:6a:e0:83:
36:4b:06:fb:10:7d:64:84:10:f5:b5:43:10:65:0c:27:aa:37:
d1:02:57:a8:4d:89:cc:32:2a:cc:c4:3b:f6:94:1d:11:04:83:
08:8a:00:b6:2f:c4:d0:fc:b0:a9:6b:04:cb:d1:38:1c:68:07:
e9:fc:e2:1c:a5:9b:b3:f5:7d:28:bb:56:2f:83:8f:20:b1:46:
8f:46:71:b4:6c:bf:68:11:4b:cc:e4:a2:cf:f8:52:20:1a:69:
97:78:cf:05:c9:61:c4:2a:d1:5a:8e:f4:87:1e:62:0c:ad:91:
b2:93:3f:38:e9:7a:06:3c:7b:08:80:7c:de:3d:29:f4:b8:80:
38:95:83:21:8b:b4:9c:71:71:63:d0:96:24:cf:4e:63:e3:e8:
2d:74:a0:c4:c7:11:65:26:4d:2f:01:3e:cd:05:32:5e:e1:f7:
2b:b4:1d:68:9c:bc:99:44:6b:af:a7:6a:45:80:50:db:25:2b:
45:c9:d7:57:d8:cc:ef:03:87:3f:04:ee:74:55:83:a6:97:4f:
5b:f7:f4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:39:13 2024 by rpki-client on console-fra.rpki-client.org