Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/HpICkbUrWrDypbQtSZbQ7yoPQS0.roa
File: HpICkbUrWrDypbQtSZbQ7yoPQS0.roa (raw, json)
Hash identifier: tkzkLecd+8asM5wE5yNYG3HO/5Ec4QQleKhkFMEw6xY=
Subject key identifier: 1E:92:02:91:B5:2B:5A:B0:F2:A5:B4:2D:49:96:D0:EF:2A:0F:41:2D
Certificate issuer: /CN=e5de0de73e73874bbc66738805d373cab833b7a5
Certificate serial: 018F760712CC32E9A97B9985D1B7E9BB7ECC
Authority key identifier: E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/HpICkbUrWrDypbQtSZbQ7yoPQS0.roa
Signing time: Tue 14 May 2024 07:35:25 +0000
ROA not before: Tue 14 May 2024 07:35:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.137.156.0/24 maxlen: 24
2a10:a100::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 01 Jun 2024 22:03:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:76:07:12:cc:32:e9:a9:7b:99:85:d1:b7:e9:bb:7e:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5de0de73e73874bbc66738805d373cab833b7a5
Validity
Not Before: May 14 07:35:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e920291b52b5ab0f2a5b42d4996d0ef2a0f412d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:04:d3:72:44:a0:2b:ac:16:e6:0f:a6:84:9d:
6e:80:77:53:47:60:4e:2f:d0:a7:24:3b:c7:f3:12:
e0:0f:7b:39:82:92:b6:e2:61:64:d6:1f:39:1d:b7:
5a:6a:a3:43:b9:a1:23:f3:bf:a3:f7:15:1a:cf:ff:
8d:ae:05:4b:f3:e0:6a:4a:b6:81:af:73:a6:54:fc:
e4:b9:aa:df:eb:fb:46:92:41:79:98:8a:bc:60:1d:
c2:4f:f9:62:84:bb:e8:a3:3d:a9:95:65:24:7f:fb:
27:ba:bd:f3:70:c0:da:13:b9:74:3e:a0:d8:14:57:
eb:84:19:97:cb:43:06:dc:5d:8e:2f:ac:f8:c7:d8:
0b:ef:88:6a:8a:b0:da:df:7a:3a:6d:e1:f5:a5:82:
d2:5b:67:96:b9:14:90:c1:e8:82:8a:95:75:7a:28:
11:8f:7e:f9:98:54:15:08:17:8d:87:22:dc:da:70:
bb:d5:9d:7f:bf:5d:05:c2:89:2d:94:d0:60:25:cb:
e3:d8:02:54:b1:28:1f:cd:de:fb:8b:b1:e7:63:fd:
06:a1:d3:d7:e8:a3:43:5e:58:b6:d2:8d:ea:a1:01:
be:36:a3:24:d0:09:bc:9d:65:3e:96:62:8f:36:c1:
03:89:52:2c:34:cd:a4:7c:25:aa:7c:e7:64:8d:74:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:92:02:91:B5:2B:5A:B0:F2:A5:B4:2D:49:96:D0:EF:2A:0F:41:2D
X509v3 Authority Key Identifier:
keyid:E5:DE:0D:E7:3E:73:87:4B:BC:66:73:88:05:D3:73:CA:B8:33:B7:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/HpICkbUrWrDypbQtSZbQ7yoPQS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/55b9d7-f703-45fe-8b63-10534c67bbb8/1/5d4N5z5zh0u8ZnOIBdNzyrgzt6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.137.156.0/24
IPv6:
2a10:a100::/48
Signature Algorithm: sha256WithRSAEncryption
a2:46:fc:29:88:7b:07:93:16:87:d4:36:26:e0:16:5a:d1:96:
d7:13:9e:3c:16:7a:75:10:03:b4:78:eb:26:d5:e7:7e:cd:b3:
f6:9c:2b:08:21:44:68:72:d9:92:96:d9:ba:9e:a2:a0:66:ad:
4e:4d:28:05:8f:a4:b5:89:22:c4:28:9e:71:a5:38:e6:1b:1e:
64:7d:bd:78:3c:c3:9b:42:f4:bc:ac:87:21:d5:d2:d4:1c:be:
c3:44:2b:87:5a:67:6b:97:22:7f:5c:b7:32:b1:fa:25:27:4a:
ee:83:44:d0:98:ee:cd:9c:ec:d0:41:44:f1:18:22:e2:f9:39:
82:16:f7:1d:68:be:f4:77:8d:6d:27:74:98:78:76:8c:39:7e:
ca:d5:c0:5c:d9:0c:6f:29:80:eb:54:d3:93:42:c4:5b:53:fa:
25:95:19:47:2e:cb:26:74:54:ea:d8:c2:19:74:6e:e7:d6:fa:
e6:5c:0c:56:42:ef:ff:3f:a5:67:50:e7:31:df:7e:a0:8f:c5:
ba:03:b7:ef:4d:95:d3:49:30:23:c7:eb:57:ae:21:a8:44:22:
c0:91:8e:db:04:e3:df:90:5f:fa:00:e0:09:67:28:ab:90:44:
5b:d3:12:3c:b6:ca:1e:36:f0:5d:89:e0:dc:a2:59:f3:7f:82:
fc:4d:c4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:00:30 2024 by rpki-client on console-fra.rpki-client.org