Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/HKhJsJ0Y2h32XgFEInweAQaBAZU.roa
File: HKhJsJ0Y2h32XgFEInweAQaBAZU.roa (raw, json)
Hash identifier: myqgLqAsMHQo9B3qTj+atmyqmIqG8XBg7Fs0fFxfpBA=
Subject key identifier: 1C:A8:49:B0:9D:18:DA:1D:F6:5E:01:44:22:7C:1E:01:06:81:01:95
Certificate issuer: /CN=6ff362c0765afb7b9804b6d819470007b01f262e
Certificate serial: 019305C51212C237EFDF5A814731BC687E3F
Authority key identifier: 6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/HKhJsJ0Y2h32XgFEInweAQaBAZU.roa
Signing time: Thu 07 Nov 2024 08:37:01 +0000
ROA not before: Thu 07 Nov 2024 08:37:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 32611
IP address blocks: 141.113.144.0/21 maxlen: 21
141.113.152.0/21 maxlen: 21
141.113.158.0/23 maxlen: 23
141.113.160.0/21 maxlen: 21
141.113.168.0/21 maxlen: 21
141.113.168.0/23 maxlen: 23
141.113.171.0/24 maxlen: 24
141.113.176.0/21 maxlen: 21
141.113.184.0/21 maxlen: 21
2a03:9e41::/32 maxlen: 32
2a03:9e41:e101::/48 maxlen: 48
2a03:9e41:e300::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:c5:12:12:c2:37:ef:df:5a:81:47:31:bc:68:7e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ff362c0765afb7b9804b6d819470007b01f262e
Validity
Not Before: Nov 7 08:37:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ca849b09d18da1df65e0144227c1e0106810195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0e:f4:27:5c:10:d5:f0:60:04:97:ae:0b:ee:
3c:3b:6e:97:35:e0:43:f7:d6:87:36:92:40:34:b4:
e0:b8:52:95:1e:5e:1a:7f:f2:e2:f5:1e:bf:e6:07:
f4:23:c9:bf:94:fa:cb:f8:7c:09:a0:17:3c:82:67:
87:5c:0e:c9:18:0e:62:f5:81:c0:9e:75:5b:d7:5f:
8d:d1:42:b6:c2:de:9d:e1:ee:8f:5d:a3:48:f6:79:
72:2c:35:81:38:ea:57:16:7d:bc:c1:11:0b:48:be:
60:fa:31:01:75:99:34:e9:72:ac:05:1d:52:5a:0d:
eb:57:1a:38:d4:9e:0d:f5:27:ef:cf:8a:8e:96:c0:
3e:f4:ea:3a:a0:2f:6b:f5:0d:80:7c:35:6b:ef:c3:
74:b6:a3:f6:6d:9d:19:60:b9:48:08:97:fc:15:4d:
b7:92:50:18:04:2b:6b:c9:7a:9f:27:31:3a:a8:4f:
0e:25:63:59:b8:b4:c0:fc:8f:50:9e:29:72:5f:71:
fc:3c:f9:06:61:7f:72:b8:e9:ea:47:6a:8f:ef:a5:
d5:31:ca:1e:f0:cd:31:52:03:31:ee:dd:5e:af:af:
ee:e0:fd:8a:55:ac:f2:cf:f1:b2:9e:80:cc:1b:3f:
e6:e2:a7:14:aa:a5:9e:1c:46:69:9f:60:fa:05:df:
af:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:A8:49:B0:9D:18:DA:1D:F6:5E:01:44:22:7C:1E:01:06:81:01:95
X509v3 Authority Key Identifier:
keyid:6F:F3:62:C0:76:5A:FB:7B:98:04:B6:D8:19:47:00:07:B0:1F:26:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_NiwHZa-3uYBLbYGUcAB7AfJi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/HKhJsJ0Y2h32XgFEInweAQaBAZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e01190-5204-44c5-a11a-dafd74763d23/1/b_NiwHZa-3uYBLbYGUcAB7AfJi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.113.144.0-141.113.191.255
IPv6:
2a03:9e41::/32
Signature Algorithm: sha256WithRSAEncryption
32:6a:be:52:f9:c8:c0:04:7f:b1:e0:5d:29:9c:40:a6:8f:4f:
fd:73:80:10:a9:cd:22:c6:f4:c4:bc:20:3e:38:25:c0:a6:6f:
53:dd:32:8f:6e:6f:22:d7:b3:87:c1:a7:ab:e6:1a:7c:b1:c3:
d9:c4:77:92:6e:97:f2:42:ec:1e:b4:21:8f:d6:e7:6e:25:11:
59:bd:38:72:0a:ed:06:a4:0e:5c:85:be:93:62:47:a7:7d:e1:
97:4a:80:2b:b0:9e:92:07:31:38:40:c4:e8:04:6d:aa:af:ad:
e0:a3:f8:5b:66:0a:77:da:fb:00:58:f5:19:1a:35:9e:5f:f5:
a7:f7:d9:2a:90:d9:f1:f6:26:87:a6:a9:bf:ed:f9:f7:f8:8d:
e4:c5:f7:fe:0a:c7:89:3f:20:34:d2:af:57:81:d8:5b:9c:67:
de:a4:ae:fe:58:06:83:87:4c:b0:06:e7:dc:d8:c8:0b:c6:33:
50:03:87:56:b8:fc:ff:59:80:f5:54:ef:35:da:ea:8a:7d:89:
24:38:1a:d2:cf:48:57:82:e5:87:47:5e:3d:f1:e0:30:f5:8c:
ff:1c:94:4f:94:aa:69:b9:60:f1:db:80:c5:b5:b6:c1:ce:33:
c0:8a:f6:24:9f:44:68:a9:6c:7b:5c:e4:77:7d:8d:6b:b0:b1:
13:87:4a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:40:44 2024 by rpki-client on console-ams.rpki-client.org