Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/HYpc0LP3evUl3wEkOGL-i6J-XaA.roa
File: HYpc0LP3evUl3wEkOGL-i6J-XaA.roa (raw, json)
Hash identifier: gLWRbOA4d0QlaGuWcjpNtE3JKYnnzdKjgDE425GA/Xc=
Subject key identifier: 1D:8A:5C:D0:B3:F7:7A:F5:25:DF:01:24:38:62:FE:8B:A2:7E:5D:A0
Certificate issuer: /CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Certificate serial: 018CC64A0601F8D9E2CEE1D2CF20CA0F80EC
Authority key identifier: B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/HYpc0LP3evUl3wEkOGL-i6J-XaA.roa
Signing time: Mon 01 Jan 2024 18:29:49 +0000
ROA not before: Mon 01 Jan 2024 18:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50738
IP address blocks: 95.140.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:06:01:f8:d9:e2:ce:e1:d2:cf:20:ca:0f:80:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ea8936f8e53063b4b3bdf0f3b15b2ae667ef13
Validity
Not Before: Jan 1 18:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d8a5cd0b3f77af525df01243862fe8ba27e5da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:74:63:82:71:56:95:cb:a8:d3:d5:0e:ac:d4:
49:37:4a:ba:23:81:5c:9e:7d:92:c5:79:58:2d:78:
d9:18:8d:85:07:6b:21:b2:1b:ce:1d:7e:7c:ea:d0:
ae:a8:e0:15:81:bb:36:38:c7:19:a3:b0:37:f1:a9:
11:aa:14:09:f5:a1:4e:7c:fb:7a:bd:76:35:c8:a4:
2c:e4:2d:ae:c9:a6:75:76:de:07:78:b0:74:71:4e:
8f:f4:c0:2e:a1:8f:cc:5c:6b:2c:b9:85:a9:5f:10:
de:b0:59:0e:73:f9:69:9e:fa:54:87:6f:64:8f:96:
e0:e4:ed:90:c5:13:92:64:b2:e3:26:09:62:aa:ee:
7a:26:2f:61:b1:15:59:49:b5:54:0a:06:95:c4:77:
e4:39:e6:80:d7:b3:cc:bd:72:ba:e0:dd:df:67:0c:
11:4c:8e:50:98:32:b9:04:42:57:24:8e:e4:39:94:
e0:ef:82:af:28:cb:37:ad:7b:54:ad:84:0d:ab:b7:
89:a1:50:bc:91:4e:2c:b3:b2:b9:e0:4f:e5:7a:ed:
ed:fe:42:2c:5b:66:3b:8a:63:97:29:d8:d4:d7:cb:
ad:93:2d:53:58:0f:4b:27:91:dc:13:51:e0:e2:41:
59:f3:8a:99:e5:43:6e:27:b6:56:4c:6e:15:a6:6d:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8A:5C:D0:B3:F7:7A:F5:25:DF:01:24:38:62:FE:8B:A2:7E:5D:A0
X509v3 Authority Key Identifier:
keyid:B9:EA:89:36:F8:E5:30:63:B4:B3:BD:F0:F3:B1:5B:2A:E6:67:EF:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ueqJNvjlMGO0s73w87FbKuZn7xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/HYpc0LP3evUl3wEkOGL-i6J-XaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/ec29e2-3440-409a-986a-b250997fc75d/1/ueqJNvjlMGO0s73w87FbKuZn7xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.148.0/24
Signature Algorithm: sha256WithRSAEncryption
82:be:51:66:b2:99:4d:ee:67:11:20:5a:fc:58:aa:7c:d4:f2:
bb:76:26:43:25:96:e1:4c:b9:1f:9a:6e:4b:31:3a:61:94:0d:
4a:98:f8:eb:fc:49:9e:12:42:89:ef:72:96:60:60:1b:14:d8:
03:1c:07:5e:ff:e8:4a:7a:2e:ec:c0:32:e5:d4:0a:2d:c9:0b:
43:54:52:94:41:3a:95:59:83:30:69:5d:d0:b9:65:f4:fa:d1:
05:3c:2f:c7:e3:24:eb:fd:62:ac:e2:6a:2f:11:d8:15:8f:09:
2c:28:29:dd:44:aa:7f:bd:74:7d:09:2a:f5:40:b3:4b:4e:22:
ec:e6:6d:26:eb:27:13:49:40:c3:f0:a6:63:d8:1d:b0:77:d3:
c7:32:c9:3b:0c:c8:8f:fc:a4:17:bd:14:11:a2:1f:f7:40:0a:
f9:e9:e9:5d:6e:1c:17:2a:91:fc:2b:98:ad:c6:d0:d1:b1:fe:
41:66:d3:2b:93:ab:3d:c3:e2:d5:d6:d2:55:d4:e0:0d:dd:19:
8e:7b:86:bb:c2:3d:ac:44:73:88:bf:21:aa:81:27:c4:fd:dd:
db:b0:3c:1e:93:2c:a8:a0:56:95:89:b5:af:0e:64:3e:90:53:
1e:cb:92:c3:12:82:9f:12:3c:36:fe:5c:b8:08:96:e8:f3:01:
bf:2d:f5:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 11:01:57 2024 by rpki-client on console-fra.rpki-client.org