Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/4hKNyrQBlU-aKnAN9Kcc0yFDZ94.roa
File: 4hKNyrQBlU-aKnAN9Kcc0yFDZ94.roa (raw, json)
Hash identifier: abH+siyDouRG1bLr6XZ8jt1Z65yHIICvT/QgEFviMpA=
Subject key identifier: E2:12:8D:CA:B4:01:95:4F:9A:2A:70:0D:F4:A7:1C:D3:21:43:67:DE
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 018CC56E876621805EE537EE7974BED3E6DD
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/4hKNyrQBlU-aKnAN9Kcc0yFDZ94.roa
Signing time: Mon 01 Jan 2024 14:30:04 +0000
ROA not before: Mon 01 Jan 2024 14:30:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21734
IP address blocks: 83.126.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:87:66:21:80:5e:e5:37:ee:79:74:be:d3:e6:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 14:30:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2128dcab401954f9a2a700df4a71cd3214367de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:96:23:8b:07:69:37:64:59:63:29:f4:5c:11:
02:89:47:d6:33:12:7c:fb:8b:a5:50:03:ad:53:70:
68:ab:4c:6c:60:7b:5d:17:38:33:ea:27:e9:f1:5b:
24:5b:9c:04:4e:79:20:af:fc:b7:e5:2d:77:15:ed:
4c:8a:76:7f:43:98:71:23:74:48:8e:72:f7:71:65:
c4:e2:aa:fe:98:25:02:98:36:c7:e2:ac:62:66:27:
ba:15:21:d0:aa:0b:6d:07:75:be:91:82:38:72:d3:
d8:5d:ae:f3:78:e8:2d:9f:fd:31:8e:ca:46:14:a1:
16:da:49:54:4b:27:1f:f5:30:c7:17:60:08:25:66:
a6:f1:40:a9:0a:c6:50:6a:3f:dd:09:b1:f5:4c:eb:
ee:8c:0f:1c:c6:43:d3:05:81:88:d9:d6:e7:bb:11:
ae:ec:68:5d:ea:3b:f5:73:5f:39:1b:fc:21:c0:3c:
e0:7b:cc:3d:aa:91:87:7f:73:11:34:8b:39:98:b2:
06:0a:03:95:2b:98:2b:b4:83:64:b0:b0:ac:bc:9a:
76:3c:44:c3:90:b9:85:01:b7:ca:c3:32:e9:23:43:
89:51:df:3c:ee:f5:5d:28:00:94:0f:22:e9:09:59:
12:89:74:44:2d:e6:ef:40:2d:6c:95:f5:18:2d:e7:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:12:8D:CA:B4:01:95:4F:9A:2A:70:0D:F4:A7:1C:D3:21:43:67:DE
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/4hKNyrQBlU-aKnAN9Kcc0yFDZ94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.126.50.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:ff:b2:be:4f:be:63:aa:25:68:64:f0:ad:1c:8e:43:33:0b:
72:67:ae:bb:fa:27:f2:56:24:2f:48:da:1c:b7:75:c5:2f:d8:
c8:57:65:8e:09:cb:04:5c:d7:51:4a:e8:e5:e5:f0:f0:2e:6b:
d7:a3:36:00:4b:5e:32:8f:b8:75:92:ee:4d:63:18:81:25:2f:
58:ed:06:5c:77:10:23:41:0f:bd:85:2c:91:7b:54:fb:2a:8e:
e4:3c:04:fe:77:f0:16:8c:4d:7d:cc:63:84:cd:06:b4:50:fe:
3d:98:b1:27:0a:7c:85:19:49:6a:b0:8b:b3:70:81:df:b8:e7:
da:de:f3:07:12:eb:92:73:13:87:9b:a7:d9:44:a3:7a:b1:97:
d4:02:7e:38:a7:ec:61:2c:ce:86:dc:c8:da:d2:d0:97:4c:3b:
f3:0a:a3:a3:8e:4e:f1:f3:1e:93:f2:d8:16:89:c9:ab:56:66:
75:90:49:bd:96:dd:cb:3e:76:3f:4d:09:13:93:13:4f:16:03:
15:d8:57:ab:4c:46:2f:46:7c:68:95:b6:ca:09:62:be:43:68:
1d:07:4b:9e:c0:ae:4d:c6:c3:24:94:13:1c:54:af:db:e5:82:
16:bc:28:2e:e9:a1:c8:b4:2e:a1:25:f2:36:98:a3:aa:06:d9:
d9:84:20:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:26:58 2024 by rpki-client on console-fra.rpki-client.org