Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/HYibsqNi5X1JqBDIbwIQKbfnMI8.roa
File: HYibsqNi5X1JqBDIbwIQKbfnMI8.roa (raw, json)
Hash identifier: 0id4guAIirYbPWmDXlUa+Nq0g/ex5YD6CtiS12jaPT0=
Subject key identifier: 1D:88:9B:B2:A3:62:E5:7D:49:A8:10:C8:6F:02:10:29:B7:E7:30:8F
Certificate issuer: /CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Certificate serial: 0191294181F9A7A7EF4FEBB8CAADCB29C70C
Authority key identifier: B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/HYibsqNi5X1JqBDIbwIQKbfnMI8.roa
Signing time: Tue 06 Aug 2024 19:54:04 +0000
ROA not before: Tue 06 Aug 2024 19:54:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58192
IP address blocks: 5.63.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:29:41:81:f9:a7:a7:ef:4f:eb:b8:ca:ad:cb:29:c7:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61046dcb185b0bfd9976628d69a189d3c3987d8
Validity
Not Before: Aug 6 19:54:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d889bb2a362e57d49a810c86f021029b7e7308f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:42:3f:51:1a:68:ca:de:29:26:57:8d:3c:
79:88:20:1d:17:7c:46:0b:a0:ba:ee:d4:e0:30:53:
63:8c:bf:4c:67:b2:4b:1c:c9:3b:1e:4d:4c:24:5a:
59:e2:dc:4b:71:5a:d0:e7:4b:43:cd:f4:4f:67:37:
69:25:0a:7b:2b:40:5b:c3:31:3c:c6:f4:5c:aa:04:
e5:ae:d1:d0:c2:5c:5d:b2:53:6b:91:04:d6:0f:47:
24:af:58:43:54:36:4b:74:94:db:98:63:d3:68:c2:
21:47:5c:ea:ed:bb:1e:46:6e:0f:e2:aa:79:4f:b7:
50:09:d3:75:0a:ff:8a:6d:ee:b4:50:a5:1a:ed:81:
a5:4b:57:b0:d7:64:73:3d:33:0d:ce:53:05:85:35:
3c:fb:9c:c5:1f:4f:16:73:cd:1f:f4:2b:56:0e:ab:
89:28:b2:f0:d9:6a:48:5e:75:6d:8d:3a:94:50:66:
35:c4:68:b2:52:10:23:6d:14:bc:a9:9c:f4:52:3a:
38:bd:42:53:55:71:bd:b7:e0:2e:73:ea:35:f7:8d:
e5:4f:d0:b7:5f:4b:60:13:4e:26:8b:4a:e0:f5:fe:
6a:de:27:f4:f9:88:f4:8a:95:f4:6a:33:e3:d9:40:
85:91:ba:22:b0:eb:07:77:eb:e9:2e:9e:3d:f9:20:
76:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:88:9B:B2:A3:62:E5:7D:49:A8:10:C8:6F:02:10:29:B7:E7:30:8F
X509v3 Authority Key Identifier:
keyid:B6:10:46:DC:B1:85:B0:BF:D9:97:66:28:D6:9A:18:9D:3C:39:87:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/thBG3LGFsL_Zl2Yo1poYnTw5h9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/HYibsqNi5X1JqBDIbwIQKbfnMI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/70757b-c758-4292-8b5c-cf1f2fa8e5f2/1/thBG3LGFsL_Zl2Yo1poYnTw5h9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.23.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:37:0a:85:eb:eb:b9:7c:11:63:2a:81:46:c0:00:57:e1:b0:
70:ea:61:60:df:20:2f:79:ae:22:4a:7a:97:5b:cf:84:8e:1f:
bf:3c:e5:e2:32:6e:bf:be:10:24:38:51:f1:62:fd:f7:8f:7e:
0b:e8:7e:f5:e0:71:51:12:87:26:79:1c:f2:26:82:c8:10:32:
48:98:53:e6:05:56:d1:2b:7c:11:26:e0:0d:78:cb:bd:79:1e:
be:e9:4b:be:d7:60:d3:e6:33:bd:94:27:2c:61:d2:98:f4:a0:
44:06:06:a9:6e:6e:f8:c3:31:c9:78:c4:6d:4c:c0:02:ef:15:
11:b0:09:5b:f2:3e:17:db:42:ff:40:1e:88:42:dc:91:d7:85:
c2:a1:fb:cf:a9:b3:b0:4b:cd:83:0d:c1:18:fd:7b:6e:90:49:
e4:8c:9c:ff:05:61:34:6b:bb:5c:68:b7:6c:9e:1f:bb:ec:43:
b9:99:ad:ec:fa:8c:ac:ec:7b:86:d0:bc:7e:2f:91:80:82:9d:
26:ed:57:b5:23:8d:90:97:c8:4c:1c:92:2a:78:87:0e:36:a9:
ea:fe:b0:1b:5a:3c:04:82:27:a4:f1:5b:93:f4:5f:70:42:75:
75:e2:ff:47:58:4d:cc:50:d2:9d:24:83:3d:e4:cd:42:00:98:
4a:98:3d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:18:42 2024 by rpki-client on console-fra.rpki-client.org