Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/RUsbFdQsKc20MnfycrNppaYsI_8.roa
File: RUsbFdQsKc20MnfycrNppaYsI_8.roa (raw, json)
Hash identifier: JfI+Yj0QCMi2vj3YJiIFcj3bNHKhv/uT6O7bHvGq0PQ=
Subject key identifier: 45:4B:1B:15:D4:2C:29:CD:B4:32:77:F2:72:B3:69:A5:A6:2C:23:FF
Certificate issuer: /CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Certificate serial: 018CC26D3BF47E77B00B286BE49B712641B3
Authority key identifier: 1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/RUsbFdQsKc20MnfycrNppaYsI_8.roa
Signing time: Mon 01 Jan 2024 00:29:47 +0000
ROA not before: Mon 01 Jan 2024 00:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209842
IP address blocks: 94.154.144.0/22 maxlen: 22
2a09:c500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:3b:f4:7e:77:b0:0b:28:6b:e4:9b:71:26:41:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f120d7e49c9f3bf313d96531adfa7eaae805761
Validity
Not Before: Jan 1 00:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=454b1b15d42c29cdb43277f272b369a5a62c23ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:95:12:d2:09:13:d8:9e:61:da:04:ec:dd:95:
f0:8d:d3:57:12:be:c1:97:4d:70:28:54:14:6a:9f:
b3:16:90:6e:6b:89:e3:02:c1:e9:65:8f:6a:84:c1:
06:01:90:9b:ef:ca:c3:a2:4d:55:49:be:aa:b2:b6:
3e:cf:2e:0f:f4:db:90:25:3a:45:cf:1e:7c:60:55:
c3:1c:49:71:bc:3a:1f:91:e8:f4:7a:71:9c:c9:c2:
d3:e9:1c:df:c0:ad:d4:2a:ba:75:f4:d2:45:c9:c8:
07:40:64:c2:86:34:7a:e2:cc:6a:6c:7f:19:c3:ea:
08:02:59:09:48:d7:80:52:11:4f:a9:81:b4:d9:0f:
2e:11:0c:3b:e1:bb:9e:45:0e:aa:67:0a:dc:d6:de:
eb:16:ff:07:f4:fd:b5:d1:b1:22:03:60:2c:02:2e:
5d:08:7b:07:28:1c:83:90:ff:4d:24:17:78:d3:8a:
e8:98:a8:12:ad:f6:33:44:89:2e:e0:46:d4:b1:bb:
f1:75:5b:eb:1a:21:f9:77:95:b9:3e:c3:df:42:af:
38:78:42:df:40:4d:ab:ef:b4:20:0b:53:70:a5:22:
3a:d1:8b:27:28:38:02:5c:e7:d6:3f:b1:2d:79:39:
ee:f7:a5:55:c5:2f:90:59:1b:db:d1:20:a6:89:1c:
bb:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:4B:1B:15:D4:2C:29:CD:B4:32:77:F2:72:B3:69:A5:A6:2C:23:FF
X509v3 Authority Key Identifier:
keyid:1F:12:0D:7E:49:C9:F3:BF:31:3D:96:53:1A:DF:A7:EA:AE:80:57:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxINfknJ878xPZZTGt-n6q6AV2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/RUsbFdQsKc20MnfycrNppaYsI_8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ac5ff9-e19e-4ad0-8c5a-b272778909d9/1/HxINfknJ878xPZZTGt-n6q6AV2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.154.144.0/22
IPv6:
2a09:c500::/29
Signature Algorithm: sha256WithRSAEncryption
82:1f:e0:21:c6:3b:1d:92:4d:dd:ce:47:ff:7e:73:a5:76:c9:
09:50:0b:31:e8:ae:4f:97:c8:2d:4b:50:bc:f5:6f:ec:22:d4:
d6:b2:d1:1c:54:c5:53:ad:a3:8f:2c:34:b6:ba:ec:00:42:88:
f1:da:14:e6:03:9f:bc:f3:d0:28:0f:40:14:e2:55:57:69:f9:
73:ed:64:4d:0f:13:ab:40:3d:35:94:d7:03:aa:0e:92:5c:e7:
44:2f:2f:61:2d:e6:a5:7a:2d:f8:b4:04:2b:0f:ef:8b:16:24:
a9:cc:97:94:36:66:31:51:59:18:c6:f4:e8:b5:6a:ba:05:1d:
2f:0c:ae:39:cc:d7:92:f0:ba:9d:52:11:7a:e5:c6:ba:5d:a2:
55:5a:58:66:ae:6a:37:39:1c:79:75:f3:72:b7:b2:7c:5a:e5:
41:ee:c0:7d:85:0f:78:04:60:61:17:01:0e:63:89:53:d5:da:
80:48:95:25:cf:12:d3:8e:6d:7a:3d:f0:53:f1:31:fa:6d:3e:
4d:2f:ed:69:08:b9:9a:4e:c9:df:1b:9e:24:54:f4:eb:49:4e:
c0:95:60:f5:80:eb:90:a3:e6:04:f3:bd:07:8c:bc:3f:3c:4d:
cf:1a:79:17:61:dd:06:a8:7d:12:6a:6c:f6:57:1a:ce:79:7b:
a7:7d:c2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:07:51 2024 by rpki-client on console-fra.rpki-client.org