Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/hlrZ14ZYgqX57AbqIihppE38ZTc.roa
File: hlrZ14ZYgqX57AbqIihppE38ZTc.roa (raw, json)
Hash identifier: EXmlwuD1UV7g9XwjRjWQ6Qq1GW3DIuk+fsI/m/H7AWw=
Subject key identifier: 86:5A:D9:D7:86:58:82:A5:F9:EC:06:EA:22:28:69:A4:4D:FC:65:37
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 0192041A0C6F261EB7975FAD9422D556C08A
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/hlrZ14ZYgqX57AbqIihppE38ZTc.roa
Signing time: Wed 18 Sep 2024 07:47:48 +0000
ROA not before: Wed 18 Sep 2024 07:47:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 151704
IP address blocks: 85.209.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:04:1a:0c:6f:26:1e:b7:97:5f:ad:94:22:d5:56:c0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 18 07:47:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=865ad9d7865882a5f9ec06ea222869a44dfc6537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:28:4b:06:b5:60:44:c1:38:7f:ca:e3:7f:e9:
9b:b9:2f:ee:24:73:f3:ac:cc:4a:89:07:0b:77:7e:
a1:71:e6:d6:db:7f:6d:a4:74:3e:7c:08:1d:df:d8:
85:10:a8:31:2d:1c:f0:be:84:50:9d:9c:02:e9:de:
4f:d5:85:b8:97:33:27:2a:15:e7:7c:67:66:83:80:
42:ab:0d:35:06:94:72:01:e8:16:3f:01:51:be:e9:
3c:e6:b1:68:f6:bb:e7:15:e2:49:85:a4:66:c3:02:
51:d8:f9:ae:28:dd:0a:75:c8:84:f6:0f:aa:4d:b0:
4d:61:49:0c:f0:a9:e3:cb:71:33:76:32:53:06:fd:
52:45:8e:53:f4:9b:13:24:15:4b:28:f5:a3:5b:22:
42:69:57:67:37:f6:99:3a:b9:98:0b:39:7f:aa:5b:
76:03:98:e4:05:e8:3f:cd:f7:a2:38:53:f1:f1:2b:
cc:92:e3:69:6a:95:a2:cc:f8:ed:c8:db:18:6c:86:
7e:98:9d:5c:f1:67:98:b4:f0:50:ca:56:ba:bf:44:
11:67:8f:93:91:ab:8c:3e:cc:0f:aa:1e:89:fe:71:
ed:7b:36:28:4c:f4:f5:71:49:72:b0:61:9e:ca:4f:
d0:46:b3:f0:b9:c1:7a:37:93:40:e2:bc:71:8a:91:
d8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5A:D9:D7:86:58:82:A5:F9:EC:06:EA:22:28:69:A4:4D:FC:65:37
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/hlrZ14ZYgqX57AbqIihppE38ZTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.161.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:14:c4:95:aa:df:21:e8:dd:ae:d4:46:17:5d:55:fa:94:7b:
3b:30:eb:ae:19:4e:07:3c:7a:88:35:70:09:8f:5e:6e:8e:be:
8e:23:a0:1c:ed:da:5a:29:c0:53:94:a2:05:7e:e0:24:3e:cf:
f8:f7:79:14:23:fa:8e:6a:4e:94:8c:81:1e:51:b4:1f:8f:d7:
68:49:3e:b3:90:82:06:07:c9:a1:fb:79:cc:dd:e2:0d:57:0d:
a4:c2:61:79:d4:ff:9d:97:e0:74:16:ab:15:14:e8:2e:2a:5e:
e0:d3:eb:d3:0c:a5:42:76:21:0d:36:ae:bf:d5:6a:fb:6b:a4:
a4:05:2a:e1:1d:91:e2:10:3e:cb:f2:f8:cf:ed:f1:c8:01:c6:
cf:fc:9b:b0:91:7d:dc:97:8b:81:37:01:1c:ca:2c:4d:c4:40:
25:9b:db:43:2f:fb:81:05:e4:74:c0:31:03:e9:3d:ea:fd:bf:
ff:6e:e3:21:4b:a8:cf:3a:67:7a:ce:d0:1d:71:90:e0:f9:1e:
56:4f:77:4a:8b:45:c1:53:18:f5:25:5f:a7:f9:fd:80:d5:c1:
bf:dc:1c:7b:3c:0c:02:91:54:da:98:9c:ae:77:8e:a5:8d:e7:
37:12:6a:5c:13:5c:b0:8d:32:6b:18:c9:c9:14:16:ed:e0:63:
64:2d:4a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:24:09 2024 by rpki-client on console-ams.rpki-client.org