Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/hwyASXpaMFYiNjgADt25bvnjQus.roa
File: hwyASXpaMFYiNjgADt25bvnjQus.roa (raw, json)
Hash identifier: kTHisCsATnwUnAhW51j6JitWa/bfiANnQlHlOA3PJIY=
Subject key identifier: 87:0C:80:49:7A:5A:30:56:22:36:38:00:0E:DD:B9:6E:F9:E3:42:EB
Certificate issuer: /CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Certificate serial: 018CC94E6FB2D59E91BEEA6C07DBF837575F
Authority key identifier: DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/hwyASXpaMFYiNjgADt25bvnjQus.roa
Signing time: Tue 02 Jan 2024 08:33:29 +0000
ROA not before: Tue 02 Jan 2024 08:33:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47574
IP address blocks: 185.248.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6f:b2:d5:9e:91:be:ea:6c:07:db:f8:37:57:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcef58d4cfa35543f8488a2756e6924e647b4589
Validity
Not Before: Jan 2 08:33:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=870c80497a5a3056223638000eddb96ef9e342eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a4:f1:6e:7c:fe:b9:da:5d:ac:e6:d1:e7:cd:
c8:98:53:13:09:e8:a1:60:e5:a1:39:42:fa:5d:dc:
a5:0e:49:16:39:92:01:ad:46:9c:a5:a5:62:79:05:
a1:e7:42:eb:72:41:77:fb:83:a4:3a:2d:4e:84:23:
12:2e:6d:d0:26:ad:bb:3d:15:4d:ce:72:9d:0f:5c:
79:70:e3:2f:73:3f:b3:3b:58:ec:fc:2d:92:07:db:
c5:ac:1a:9f:1c:c3:55:9d:6b:27:43:94:f9:7e:3d:
c3:45:8c:39:4e:ae:8a:63:0c:e5:8b:a7:8d:ac:14:
34:9b:a3:a7:55:4e:9d:34:5a:7b:39:04:c4:95:c2:
ac:23:1b:b0:99:01:92:1b:77:f8:99:ca:cb:2a:6a:
1e:f8:3b:fa:bf:89:fc:30:2b:81:5f:b5:2e:0a:93:
44:c1:98:b7:e3:43:7e:79:2d:c5:1a:85:96:bf:f5:
19:3e:b3:8c:7a:1b:b9:9b:dc:8a:51:26:16:fc:76:
ba:ad:43:5b:ee:a2:5d:b5:46:c3:d9:62:63:05:d6:
1a:33:1a:ad:40:a0:1d:93:0a:7a:d7:59:53:93:2b:
de:7a:18:0d:b1:f8:cd:66:cd:cd:8c:39:fe:cc:60:
b6:09:91:b5:2c:b2:61:8f:76:b4:3d:83:9a:92:a3:
f4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:0C:80:49:7A:5A:30:56:22:36:38:00:0E:DD:B9:6E:F9:E3:42:EB
X509v3 Authority Key Identifier:
keyid:DC:EF:58:D4:CF:A3:55:43:F8:48:8A:27:56:E6:92:4E:64:7B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3O9Y1M-jVUP4SIonVuaSTmR7RYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/hwyASXpaMFYiNjgADt25bvnjQus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/3O9Y1M-jVUP4SIonVuaSTmR7RYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.136.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:9a:e5:6a:cd:d2:10:fb:8e:55:04:3a:9f:92:4b:18:16:e3:
92:a5:d9:51:1e:31:82:c8:12:71:41:bb:be:a4:f4:49:6f:e0:
55:92:36:48:6b:c9:41:d7:c8:7d:6b:c4:b2:a4:07:7d:2d:6b:
d5:24:ca:8a:80:ce:3c:03:f5:c9:35:97:ec:d9:1e:2e:91:36:
ba:d2:bc:02:98:1a:b1:ab:05:b7:cf:fd:fa:2e:64:5c:33:4a:
5c:aa:da:a0:b6:bd:11:85:41:70:d0:11:6c:75:1e:49:d5:f0:
bd:6f:64:bb:ac:2f:a5:ef:38:6c:6d:bc:a3:a6:95:fe:11:4f:
a8:9f:76:a8:a2:84:94:58:c3:1c:12:20:8f:be:d7:24:61:b2:
52:3e:9c:7f:03:bd:53:fa:b6:a3:34:0c:b7:f1:a5:6e:bf:29:
84:7b:33:3f:2d:cb:04:84:c7:e8:f4:b4:38:d9:b8:ac:ec:e8:
e4:63:1d:cd:88:97:6a:ce:c5:aa:ea:b3:35:aa:74:2f:5b:7b:
9d:88:f8:f7:e9:85:1e:fc:0b:bd:07:91:d2:bf:4e:da:74:4b:
b7:a0:7b:59:ba:82:47:b5:23:17:db:97:b5:71:79:b9:2c:60:
3f:9e:e6:98:93:c7:c6:bc:d2:88:5e:7d:f2:64:ea:49:ef:5a:
16:97:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:00:17 2024 by rpki-client on console-fra.rpki-client.org