Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/h8hMAL0GKRBTFoJDQgo8opfSZho.roa
File: h8hMAL0GKRBTFoJDQgo8opfSZho.roa (raw, json)
Hash identifier: Xo0IH7V4CFOHnmhD0d5fbw3JnkHbu9Xg8tKR9fdUJE0=
Subject key identifier: 87:C8:4C:00:BD:06:29:10:53:16:82:43:42:0A:3C:A2:97:D2:66:1A
Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Certificate serial: 018CC64A75573D6D80DF07FB48B334D13CCE
Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/h8hMAL0GKRBTFoJDQgo8opfSZho.roa
Signing time: Mon 01 Jan 2024 18:30:17 +0000
ROA not before: Mon 01 Jan 2024 18:30:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2.255.190.0/24 maxlen: 24
2.255.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:59:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:75:57:3d:6d:80:df:07:fb:48:b3:34:d1:3c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190
Validity
Not Before: Jan 1 18:30:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87c84c00bd06291053168243420a3ca297d2661a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:47:3c:ce:ff:dd:08:b2:57:68:fd:b6:b4:1f:
0e:f6:41:7d:a3:bc:0b:f7:1c:b6:fb:3a:00:13:b6:
3d:3c:7a:8c:fb:af:24:0d:dd:6b:e0:56:56:c5:ec:
32:90:ef:86:14:56:b7:57:ea:79:0c:f0:53:aa:ad:
25:f1:41:9a:00:1b:db:af:24:78:c5:9e:f3:23:50:
3c:f5:7f:e7:0d:c7:0d:65:1e:65:68:d0:ef:6a:86:
da:1a:ef:7f:66:1f:4d:76:de:da:c7:51:f5:96:2a:
a0:f1:91:35:48:f5:3c:8d:ca:cb:01:5a:dc:b7:9e:
f1:45:8c:a0:70:fb:4d:91:df:a1:5e:66:dd:96:e0:
21:01:07:9e:8c:c3:74:8f:77:9f:df:6f:17:0b:f8:
54:b4:b7:ca:5d:be:bc:2f:85:a0:bc:b3:7a:2d:0e:
94:27:e9:36:20:9c:0d:b0:b4:51:eb:44:e4:1f:fa:
b4:5d:d1:1e:e6:76:a0:c6:b4:0b:6c:0e:19:da:3c:
02:74:48:60:a1:e5:e3:7c:d0:21:eb:8e:9c:be:c3:
e8:a6:bd:0c:d4:8b:59:91:3d:26:13:be:5d:dc:d2:
25:3e:9c:69:09:7e:46:ad:9f:ba:77:1f:8a:1c:4d:
2c:0b:b1:11:76:e4:6e:19:f4:aa:0d:a8:28:d1:d9:
15:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C8:4C:00:BD:06:29:10:53:16:82:43:42:0A:3C:A2:97:D2:66:1A
X509v3 Authority Key Identifier:
keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/h8hMAL0GKRBTFoJDQgo8opfSZho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.255.190.0/23
Signature Algorithm: sha256WithRSAEncryption
a3:d4:4c:9a:d6:86:0d:5d:7a:ba:46:ba:9d:6f:b1:48:8e:05:
7f:b8:cc:23:50:da:0c:c2:d9:32:89:af:23:66:02:f4:9a:68:
88:2d:30:f2:59:61:18:9a:b3:34:ec:f5:a5:37:97:16:ee:ab:
3a:58:25:a4:de:f7:2a:f6:af:0a:35:6d:94:a4:2e:be:ac:1b:
ab:0e:69:60:62:91:4c:fb:c2:f1:e9:9f:f4:a5:36:22:bb:58:
43:ba:6f:e6:06:81:f1:4b:91:e0:aa:d1:0b:a0:97:96:66:3f:
79:61:5a:ea:dd:08:02:56:34:1b:b6:0b:15:14:8d:03:21:47:
20:d3:64:f1:73:1a:ce:ab:9b:8c:a2:af:62:f6:26:fd:62:f4:
3c:68:17:f3:61:65:ee:9b:5e:51:23:55:73:0a:f3:dd:14:7b:
ac:28:cb:9d:b8:90:db:f8:aa:d8:20:7c:7f:36:0c:a5:2e:b6:
7d:6e:4f:79:1c:f0:68:2b:8c:e0:47:8b:21:1a:62:bf:04:08:
5e:01:f9:05:db:8c:2f:cc:bc:15:ad:ff:eb:87:40:18:27:14:
77:28:84:49:da:d7:12:23:47:7f:02:99:21:fd:ee:8a:a1:79:
bf:3a:73:5c:11:e8:72:02:21:c0:b6:68:88:ce:ba:ef:11:05:
f8:ee:b1:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 22:20:48 2024 by rpki-client on console-fra.rpki-client.org