Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/9HpHhquVdEEEEhcWj3SAZfYVu80.roa
File: 9HpHhquVdEEEEhcWj3SAZfYVu80.roa (raw, json)
Hash identifier: 6bn+FOnXSH+QhwzrJ5f3r2UGjgBCBNjg/38sY6yDW3M=
Subject key identifier: F4:7A:47:86:AB:95:74:41:04:12:17:16:8F:74:80:65:F6:15:BB:CD
Certificate issuer: /CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Certificate serial: 018ECB16678EEF86367CF020E1B0641357B5
Authority key identifier: 08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/9HpHhquVdEEEEhcWj3SAZfYVu80.roa
Signing time: Thu 11 Apr 2024 02:57:06 +0000
ROA not before: Thu 11 Apr 2024 02:57:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16242
IP address blocks: 185.15.137.0/24 maxlen: 24
193.247.85.0/24 maxlen: 24
2a12:5a40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cb:16:67:8e:ef:86:36:7c:f0:20:e1:b0:64:13:57:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=082b303cb49e73e2d2a404583d5f8377ceb02545
Validity
Not Before: Apr 11 02:57:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f47a4786ab957441041217168f748065f615bbcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:6d:8b:56:8e:53:69:0c:97:d3:cd:8b:8a:3e:
83:af:c9:0f:dd:fa:e5:96:8e:71:74:a2:2a:29:7c:
cf:8d:b7:ba:d3:bc:44:58:44:82:93:77:a7:6e:31:
29:2b:79:73:3f:1c:7a:5c:0c:e1:bb:1b:ec:ad:a8:
e9:49:36:47:0e:f4:cc:c2:bb:d2:4e:69:c5:eb:64:
54:22:61:ed:df:86:52:83:55:57:cf:14:ff:a7:f8:
ac:fe:db:35:53:71:b3:fa:42:df:72:60:43:84:32:
d8:e6:2e:bd:4d:ad:99:27:a3:59:0b:99:a2:de:dc:
a2:89:e6:31:cf:9c:f1:db:03:73:fd:ee:f0:95:24:
4c:fa:a4:eb:97:ce:9d:77:d1:50:44:e6:3b:26:65:
26:d4:9e:aa:43:0f:31:e4:c2:76:2f:b9:cb:dc:55:
6a:fe:27:f2:6a:9b:ce:ee:49:c0:c7:87:eb:1f:a1:
5c:db:9a:ee:73:37:7d:65:95:91:09:f8:b0:cd:8d:
37:e2:ba:12:a3:4f:ce:7d:7f:a4:9e:fb:cf:c8:ba:
5e:7c:08:f5:62:37:66:a4:93:21:af:96:63:13:96:
64:1d:62:e1:2e:f7:4a:20:4f:89:c6:99:7e:5a:62:
10:32:dd:2d:ef:2e:a9:01:99:db:8a:c6:07:e8:bb:
3c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:47:86:AB:95:74:41:04:12:17:16:8F:74:80:65:F6:15:BB:CD
X509v3 Authority Key Identifier:
keyid:08:2B:30:3C:B4:9E:73:E2:D2:A4:04:58:3D:5F:83:77:CE:B0:25:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CCswPLSec-LSpARYPV-Dd86wJUU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/9HpHhquVdEEEEhcWj3SAZfYVu80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/340eb5-7be0-4bc9-bf2d-b473ce7807ca/1/CCswPLSec-LSpARYPV-Dd86wJUU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.15.137.0/24
193.247.85.0/24
IPv6:
2a12:5a40::/29
Signature Algorithm: sha256WithRSAEncryption
4d:9c:b7:8b:b6:91:87:b3:55:54:9c:f4:ed:94:96:2f:33:88:
3f:2d:44:21:f2:66:34:82:d3:be:85:10:42:2e:40:dd:1d:15:
60:1d:45:be:f5:48:a4:ca:d6:2a:5b:ee:ea:d1:b6:ab:c1:c5:
dd:23:86:24:db:e6:4c:6b:04:57:9e:df:5e:e0:cf:4d:be:ed:
f9:8f:6c:26:7b:92:3e:24:59:0d:fd:23:af:ec:f0:e6:50:0a:
b9:40:a4:16:9d:71:83:66:58:81:74:13:2a:89:1f:b0:ce:0a:
94:ec:dc:a8:9b:e0:27:1b:3a:fc:5d:03:7e:90:09:23:93:5e:
b2:b3:38:53:a3:29:31:df:90:98:50:47:0f:3b:d7:e1:d3:25:
31:06:65:2e:26:62:0f:76:fe:99:6b:7b:0d:aa:32:95:f0:a9:
5d:95:f4:6c:d0:85:36:26:a3:0c:ff:be:4b:0a:16:f7:c5:bd:
04:b6:85:db:5b:ad:6d:4a:2c:b7:4c:72:89:6d:65:2d:64:04:
a0:94:46:cf:8d:67:b7:67:e3:1e:78:64:37:16:49:15:e8:81:
97:93:2d:b5:69:74:5d:d8:2f:f0:5c:37:28:04:a4:86:3b:d3:
41:54:16:d1:8c:c1:ed:be:e0:e8:ed:54:3b:70:54:9b:51:f5:
8e:8b:67:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 00:40:49 2024 by rpki-client on console-fra.rpki-client.org