Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/HXjIPSd3XBDCGIPD6BTinMvx9co.roa
File: HXjIPSd3XBDCGIPD6BTinMvx9co.roa (raw, json)
Hash identifier: Gn+J0vPDPUhvJU64yf0JrTDe5w0I8PvHvEqP+c1WRDw=
Subject key identifier: 1D:78:C8:3D:27:77:5C:10:C2:18:83:C3:E8:14:E2:9C:CB:F1:F5:CA
Certificate issuer: /CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Certificate serial: 019198F906AAD8A061424175B31E2E0F4136
Authority key identifier: 51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/HXjIPSd3XBDCGIPD6BTinMvx9co.roa
Signing time: Wed 28 Aug 2024 12:32:22 +0000
ROA not before: Wed 28 Aug 2024 12:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13000
IP address blocks: 109.197.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:98:f9:06:aa:d8:a0:61:42:41:75:b3:1e:2e:0f:41:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51bfb46353bfcccff9412dcbdd480f19b4c98397
Validity
Not Before: Aug 28 12:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d78c83d27775c10c21883c3e814e29ccbf1f5ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8f:93:7a:30:eb:a3:97:1e:f9:be:8a:88:bc:
80:70:35:e0:9a:60:d3:b8:e1:1f:54:66:98:6b:06:
36:9b:21:22:59:93:84:c4:8b:21:7c:95:91:3b:cb:
85:93:bc:cf:17:59:f7:9d:1d:f0:06:72:45:51:de:
25:8f:55:c0:fe:e1:5b:a2:f7:73:35:7c:b3:de:63:
21:1a:24:3a:28:1d:0f:bc:3d:91:99:fb:f0:3c:28:
14:d9:a6:f1:a4:86:6a:bd:ee:de:a9:37:15:91:29:
de:80:01:ed:27:93:9c:c3:16:c1:a7:fc:45:5f:4b:
85:90:98:99:f6:c8:10:94:00:bc:d0:78:8e:16:46:
e3:73:aa:7e:55:2a:5f:86:3d:9b:e6:b6:86:bd:a8:
a7:ce:a6:dd:5e:65:26:0f:e7:1b:a9:8b:c3:65:86:
19:4b:90:a1:79:a7:24:3a:78:90:80:10:df:b2:0f:
b4:bd:44:06:37:0f:b7:63:6b:18:aa:f5:03:67:55:
c7:db:37:ee:18:c1:0b:6c:ff:00:17:e2:85:6b:87:
57:46:f8:18:02:aa:e3:98:6b:a8:18:7f:bd:80:71:
12:b3:ae:9e:c0:5e:2c:7f:3d:99:6e:f7:3f:75:71:
35:ac:84:86:02:3b:0c:fb:f1:17:3b:47:cd:bb:0e:
f4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:78:C8:3D:27:77:5C:10:C2:18:83:C3:E8:14:E2:9C:CB:F1:F5:CA
X509v3 Authority Key Identifier:
keyid:51:BF:B4:63:53:BF:CC:CF:F9:41:2D:CB:DD:48:0F:19:B4:C9:83:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/HXjIPSd3XBDCGIPD6BTinMvx9co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/d92557-8c46-482c-91a8-c1e974bed12e/1/Ub-0Y1O_zM_5QS3L3UgPGbTJg5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.33.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:6c:f8:bc:8d:42:ab:9d:b8:23:00:84:a5:f9:47:3d:bf:33:
c7:df:42:f1:aa:7c:70:9b:a5:73:37:dc:5e:d8:57:ac:00:e6:
05:88:06:66:ad:b4:9b:02:61:d2:a2:30:b8:ec:8a:45:10:9d:
46:7e:ee:c7:6f:71:0c:d4:b9:ca:ab:60:82:18:23:fc:03:c0:
6f:cb:90:6a:57:8b:20:e0:6f:79:12:10:5d:52:b4:68:7b:5f:
8c:c7:87:07:80:42:b1:18:6b:38:f6:7c:5f:72:6b:5f:43:a8:
d1:fc:45:4f:9d:b3:28:94:8f:13:5b:08:a2:ca:14:e2:e8:cd:
ae:f8:db:7b:28:0b:84:81:2b:46:b1:ca:c3:72:40:eb:cc:a8:
fd:4e:80:da:c1:e9:dd:74:a0:ee:b4:44:bb:8b:01:e0:08:c4:
88:ee:b5:14:6d:c9:32:4c:dc:09:77:72:1a:55:3c:46:25:cf:
33:15:9e:5c:0b:0f:df:52:d0:36:7c:bc:21:09:c5:eb:92:22:
46:62:7f:17:68:db:f8:b2:e8:93:77:10:ad:ed:53:9e:28:f0:
97:ff:30:43:e1:2f:cd:68:9b:5e:0c:09:04:d5:d2:d3:4a:5d:
3c:62:3a:16:7c:1f:7b:7e:23:84:31:71:08:4c:1a:51:23:9b:
6e:7b:25:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:45:24 2024 by rpki-client on console-ams.rpki-client.org