Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/IHezm1rZSws2Nnt-C_MlrveEKQU.roa
File: IHezm1rZSws2Nnt-C_MlrveEKQU.roa (raw, json)
Hash identifier: UlVwTzdNzAMLAqo2Zp5QeTRG8oCLd51dbebrhvfPKYI=
Subject key identifier: 20:77:B3:9B:5A:D9:4B:0B:36:36:7B:7E:0B:F3:25:AE:F7:84:29:05
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 018CC5DC1CAF9C9237C88471FE798C7268BB
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/IHezm1rZSws2Nnt-C_MlrveEKQU.roa
Signing time: Mon 01 Jan 2024 16:29:45 +0000
ROA not before: Mon 01 Jan 2024 16:29:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47477
IP address blocks: 193.83.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:1c:af:9c:92:37:c8:84:71:fe:79:8c:72:68:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 1 16:29:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2077b39b5ad94b0b36367b7e0bf325aef7842905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:1f:81:85:6e:cc:0c:76:40:39:d3:70:1c:8b:
19:fb:05:c4:eb:40:a9:d7:28:a9:1e:57:9d:b8:f4:
25:d8:5b:d3:d6:e3:dd:86:5b:a3:f2:df:00:63:2d:
90:64:31:65:95:05:14:79:1e:0e:73:0e:59:f9:a1:
43:8b:e9:69:05:30:d6:fd:b7:74:f4:47:e0:fb:40:
f9:16:d0:5a:d0:34:57:7a:23:d4:ac:03:0e:ae:84:
2f:6a:4c:62:d6:2a:17:fd:43:19:e2:f5:00:bb:c3:
08:79:23:8f:65:e6:c0:c0:e8:0c:6b:eb:79:82:7a:
5d:88:c3:f7:d9:0f:1e:80:c3:45:da:21:a4:13:9e:
e6:a7:09:7b:b2:e0:c8:ad:56:11:f0:7c:e6:6f:cb:
90:5c:b3:a1:10:ae:78:53:d6:2e:db:cf:97:fb:65:
3f:57:08:94:7c:51:b8:f8:ca:56:f4:18:ab:f9:f1:
ba:fa:8e:9e:e4:22:78:3a:a5:d6:32:c2:c2:1b:77:
0f:a8:ed:f0:33:25:54:2f:82:76:60:ad:4e:c4:01:
da:72:f0:13:11:88:71:b5:f3:48:8d:87:5b:2e:3b:
0d:b9:db:24:cc:4e:ec:67:84:5f:9f:dd:a4:52:27:
4a:c7:ba:26:a9:98:c6:b9:f7:f0:22:3b:59:50:c8:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:77:B3:9B:5A:D9:4B:0B:36:36:7B:7E:0B:F3:25:AE:F7:84:29:05
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/IHezm1rZSws2Nnt-C_MlrveEKQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.83.204.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:ce:25:b4:5c:2e:d8:7b:ec:67:9c:bf:40:e7:ba:c2:aa:ef:
8c:d9:00:fd:d6:75:8a:4b:af:a0:df:da:7d:6f:f6:ed:8a:b6:
d3:c2:f5:4b:31:37:43:6d:df:f9:49:d4:f5:91:3f:b2:1e:8b:
35:f8:e3:3f:1b:36:3a:8a:f8:8f:8e:dd:62:e2:eb:9d:19:4f:
14:ed:d2:6b:38:b4:d9:54:4c:3b:95:a6:1c:ee:e5:05:bd:de:
f8:ac:5b:ca:8a:78:a2:a4:81:03:d0:74:ad:67:98:2c:16:84:
46:85:87:82:91:61:02:ee:61:6c:a7:d5:2d:e2:e1:a7:95:cd:
79:8a:74:7a:50:ce:de:7c:87:ce:7a:b5:0a:03:09:98:ab:62:
7c:79:e4:ea:c7:6f:47:62:64:ce:8f:cd:85:67:1a:95:d1:d8:
d1:d3:be:ca:d6:13:6d:c0:6a:6f:25:23:50:48:06:49:c7:3d:
56:af:95:8f:fc:62:ba:28:4b:fe:09:62:ac:de:2e:57:e5:98:
43:54:e3:5c:f5:00:a0:94:a7:e8:61:8e:6c:d0:65:2d:37:90:
76:49:1e:c1:c1:fd:25:c6:0c:53:4e:fe:71:d4:71:c3:84:03:
98:f8:e4:91:3c:eb:46:e9:a6:14:6a:6d:a7:c2:ea:a4:db:9f:
7d:af:16:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:40:11 2024 by rpki-client on console-fra.rpki-client.org