Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/HoLKJkGi-zgPxRe7w4bMHFkGnSs.roa
File: HoLKJkGi-zgPxRe7w4bMHFkGnSs.roa (raw, json)
Hash identifier: 4wK6QLppqp6fN1bB9p/fhdidUMNmKUaDzRuYXUeXd9w=
Subject key identifier: 1E:82:CA:26:41:A2:FB:38:0F:C5:17:BB:C3:86:CC:1C:59:06:9D:2B
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 018CC7276AE389483A57D26E98355A99D445
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/HoLKJkGi-zgPxRe7w4bMHFkGnSs.roa
Signing time: Mon 01 Jan 2024 22:31:38 +0000
ROA not before: Mon 01 Jan 2024 22:31:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201472
IP address blocks: 89.174.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:6a:e3:89:48:3a:57:d2:6e:98:35:5a:99:d4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 22:31:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e82ca2641a2fb380fc517bbc386cc1c59069d2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:cf:ae:41:60:0e:02:56:b3:4a:70:68:cd:ca:
12:e6:4a:79:44:67:aa:13:45:4a:cf:ab:20:cc:db:
9c:93:e5:10:c7:68:e4:99:74:54:73:35:32:c0:cb:
c7:c3:a5:0c:c0:f9:11:c3:66:a3:78:63:63:0a:bb:
d7:f3:18:a4:98:d7:7b:d7:70:e0:dc:e4:85:62:3a:
17:e3:60:5a:bc:70:33:8f:a6:0c:06:92:a1:86:03:
a5:b9:3b:9e:bb:25:69:3e:f1:92:3e:a8:7a:bb:b1:
05:45:1e:aa:ee:a0:d4:2c:c4:f0:bd:08:6a:0b:a5:
3f:05:32:54:75:f4:5c:f8:cc:df:e2:e6:b8:2d:9a:
62:13:84:ef:a5:a4:31:d9:a2:41:0a:96:b9:a9:0b:
7c:a8:db:41:57:61:73:6d:e9:fc:79:57:a5:1a:7f:
36:cd:9d:95:68:30:92:d9:85:59:77:f0:7d:7a:fe:
40:df:31:d0:e1:c8:17:71:da:98:33:7e:22:77:7f:
41:53:1d:1a:17:40:af:36:1e:8d:8d:84:fe:42:bc:
4c:a3:c5:f8:e1:5e:5f:86:70:83:20:ab:08:83:ff:
11:cb:fe:79:c7:27:4f:ba:1e:21:c0:63:3d:5b:92:
f7:43:e1:f6:74:f4:99:b4:82:fd:73:31:94:b6:49:
1e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:82:CA:26:41:A2:FB:38:0F:C5:17:BB:C3:86:CC:1C:59:06:9D:2B
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/HoLKJkGi-zgPxRe7w4bMHFkGnSs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.174.181.0/24
Signature Algorithm: sha256WithRSAEncryption
70:5f:e6:a8:d9:54:88:8a:e8:ae:57:2d:85:14:dc:36:88:cb:
4c:4a:f7:16:82:fc:ec:07:ef:b7:9b:5a:05:0f:eb:c3:9d:31:
5c:69:01:cb:4b:9f:22:93:c0:01:a0:56:a2:08:35:fb:5c:8c:
25:29:b1:7f:1f:82:70:ed:92:9c:88:be:50:22:bd:9b:4d:e6:
98:62:fa:b7:aa:73:ab:00:b1:e4:c1:8b:c6:c2:54:3a:73:4e:
9d:94:d5:46:46:fd:f8:71:d8:cb:4a:d2:bb:87:0b:4b:6f:4f:
fe:ed:38:da:a0:63:0b:cf:2a:4a:2d:03:29:c4:52:22:ea:33:
d7:db:15:08:39:47:32:0e:85:d5:50:3c:9a:d9:1e:8e:33:c4:
00:78:ef:69:7d:46:88:f6:d3:d9:71:a6:99:ab:8c:ea:4d:e1:
9c:c5:1d:04:a9:81:45:59:6c:50:8d:a8:1b:f4:c5:83:7d:89:
1f:5e:7c:13:6a:a4:18:0b:60:bc:b8:1d:bd:e6:ab:c5:5b:56:
8f:3d:1a:9d:0b:f9:d5:3b:15:a6:e9:91:00:a3:35:12:24:11:
f1:0f:70:6d:bc:7c:41:36:ac:82:2f:bd:14:55:f6:66:b8:15:
1a:8f:5d:66:f3:83:e1:29:09:f2:ce:24:a9:8a:f4:36:28:4b:
bb:23:56:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 07:49:19 2024 by rpki-client on console-fra.rpki-client.org