Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/hszZIyCnRFkqaHAsGfWDAdCd-vY.roa
File: hszZIyCnRFkqaHAsGfWDAdCd-vY.roa (raw, json)
Hash identifier: 8jKpCb9bvCJduDjXwr1OjcD0a7fdkB1ysD2VBMsDOxo=
Subject key identifier: 86:CC:D9:23:20:A7:44:59:2A:68:70:2C:19:F5:83:01:D0:9D:FA:F6
Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial: 019010BCE98336D1833FC8F227ED53F93332
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/hszZIyCnRFkqaHAsGfWDAdCd-vY.roa
Signing time: Thu 13 Jun 2024 08:35:34 +0000
ROA not before: Thu 13 Jun 2024 08:35:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198709
IP address blocks: 176.114.232.0/21 maxlen: 21
185.237.140.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:10:bc:e9:83:36:d1:83:3f:c8:f2:27:ed:53:f9:33:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
Validity
Not Before: Jun 13 08:35:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86ccd92320a744592a68702c19f58301d09dfaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:da:31:14:40:33:f4:af:33:7e:c4:c4:c3:
db:a3:a2:8e:1b:10:bc:76:23:01:ae:03:f3:5e:e5:
90:7c:7c:e8:11:1f:91:15:f8:d1:98:b5:e4:cc:41:
c2:ef:9a:af:94:ac:95:16:62:80:a4:69:7a:84:95:
ee:e2:56:4c:11:43:90:2e:f7:e3:3f:37:02:5b:71:
33:ca:d8:32:cd:4a:92:1d:20:df:ce:3c:12:60:df:
29:d5:6c:ba:6f:27:6c:a0:17:d2:4a:96:68:4b:21:
cf:bd:aa:d8:5d:c8:22:33:e2:ab:43:ca:09:ed:a7:
e7:f4:a0:28:79:92:8c:c4:9b:da:8a:ed:dc:98:57:
7a:6f:ac:12:40:25:22:0e:01:03:e4:88:77:6b:62:
c2:40:81:85:52:fd:2d:f2:72:47:0a:fd:39:57:2a:
47:f1:1a:e7:9c:22:a2:00:af:d3:de:39:54:a5:dd:
d9:68:cc:70:8c:26:b5:02:e9:ef:58:0c:d7:9d:1d:
e2:dc:95:85:8f:3c:5c:9e:94:33:55:92:43:a0:28:
b7:4f:21:e3:58:a3:41:c3:a5:6a:83:45:61:d8:8c:
18:5e:9d:c3:e4:fe:49:ca:25:94:8b:e8:6b:3f:84:
e5:9a:1c:48:49:6e:d0:dd:05:09:56:37:75:95:15:
37:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CC:D9:23:20:A7:44:59:2A:68:70:2C:19:F5:83:01:D0:9D:FA:F6
X509v3 Authority Key Identifier:
keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/hszZIyCnRFkqaHAsGfWDAdCd-vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.114.232.0/21
185.237.140.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:95:21:17:5b:de:83:ce:1e:23:b8:aa:0e:ab:1f:6b:8b:58:
82:10:db:5a:18:96:c6:94:1b:60:94:da:06:08:35:19:0a:74:
77:b3:07:7e:7a:b1:1d:25:30:9a:24:45:14:a1:44:06:a6:ac:
2e:62:86:3c:54:c8:76:b7:9d:d1:f2:26:c4:ee:b8:09:11:3d:
f9:6f:2b:e6:e6:90:6a:9d:cd:aa:f4:02:0a:98:fe:5c:c0:0d:
83:05:db:f1:12:04:e6:28:78:dc:27:16:ad:fc:46:21:17:97:
a5:6c:bb:3d:54:18:f0:0e:3a:69:72:33:da:c4:36:71:98:e7:
2d:ab:0b:59:14:57:d3:e0:0a:d8:ae:d8:84:21:bf:77:36:da:
67:15:99:fe:1b:ca:19:b4:16:e0:10:46:43:29:26:75:89:8b:
0d:55:2e:87:d3:53:16:dc:d7:51:79:b4:2c:c9:17:53:7f:58:
76:75:77:42:5c:0a:89:41:1a:18:12:74:f0:56:a0:29:ba:c2:
0d:ad:4a:0e:fa:8f:9c:8c:04:6e:c2:9d:c4:fb:ed:3b:9e:2e:
57:61:cc:23:16:f0:74:ea:71:3b:8e:ac:66:63:1a:a6:f4:9f:
55:80:57:67:16:10:7f:ea:05:97:b3:01:f0:c1:55:0f:1a:0d:
14:8b:46:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:37:03 2024 by rpki-client on console-ams.rpki-client.org