Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/hhI6jqIi9OqIA2OmfFmwwGSMec4.roa
File: hhI6jqIi9OqIA2OmfFmwwGSMec4.roa (raw, json)
Hash identifier: NdSKUwlGopzIj9mDEV6mGaTBZ7JV2mlPQUT7a7nLwKE=
Subject key identifier: 86:12:3A:8E:A2:22:F4:EA:88:03:63:A6:7C:59:B0:C0:64:8C:79:CE
Certificate issuer: /CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Certificate serial: 018CC7958B5CB677A83E1AB048522FFD22EE
Authority key identifier: CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/hhI6jqIi9OqIA2OmfFmwwGSMec4.roa
Signing time: Tue 02 Jan 2024 00:31:55 +0000
ROA not before: Tue 02 Jan 2024 00:31:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201190
IP address blocks: 185.47.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:8b:5c:b6:77:a8:3e:1a:b0:48:52:2f:fd:22:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd8313e41e646a09cd01e2e6f4739d3bd236c4ff
Validity
Not Before: Jan 2 00:31:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86123a8ea222f4ea880363a67c59b0c0648c79ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:28:ec:d7:97:de:b3:4e:56:24:14:98:80:1a:
12:78:73:87:b4:82:a5:89:ce:8d:08:06:21:cf:71:
6c:37:d9:c6:2d:8f:5c:6f:2e:b4:27:ea:2b:a1:44:
28:a1:88:27:5b:5b:2d:f3:f2:c4:01:d7:b1:e0:2c:
1d:d7:bd:1e:02:d2:e4:95:9b:3b:2e:5d:5e:5f:eb:
e5:25:d8:f4:dd:d7:a2:4c:a1:f9:8e:91:4b:05:d5:
c2:d3:d5:ee:2c:f5:09:bd:85:d6:4e:cc:ce:16:6e:
b8:aa:50:95:6f:7a:42:e4:fe:fa:ab:b1:2a:4e:e9:
4d:a9:8c:33:d6:35:00:e7:52:74:e0:cd:93:8f:e1:
51:ba:0d:12:53:45:c1:97:98:a2:00:4f:85:83:39:
86:5a:a0:f1:47:1f:42:4e:7e:dd:b4:e6:b6:d6:92:
fc:58:92:6c:62:28:eb:a9:13:5c:fb:94:80:3e:f9:
c2:d4:9b:54:3e:ac:e4:a0:d5:1a:37:d8:7e:6f:2f:
32:3b:2b:c5:2b:73:51:ec:93:fc:94:f0:00:db:e1:
c9:a0:38:5d:32:86:92:44:55:86:9e:43:62:5c:28:
46:73:e5:e2:d8:9a:85:f2:51:03:f8:90:96:15:8f:
35:60:6a:23:ab:24:79:b4:ad:4f:0e:0e:81:63:78:
eb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:12:3A:8E:A2:22:F4:EA:88:03:63:A6:7C:59:B0:C0:64:8C:79:CE
X509v3 Authority Key Identifier:
keyid:CD:83:13:E4:1E:64:6A:09:CD:01:E2:E6:F4:73:9D:3B:D2:36:C4:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zYMT5B5kagnNAeLm9HOdO9I2xP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/hhI6jqIi9OqIA2OmfFmwwGSMec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/zYMT5B5kagnNAeLm9HOdO9I2xP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.47.54.0/24
Signature Algorithm: sha256WithRSAEncryption
14:ff:79:7c:ff:ae:e5:35:ba:01:bf:5b:1a:fb:67:b2:aa:9b:
97:9d:49:ef:a6:92:ac:fb:a6:b9:ad:88:db:9d:d3:10:6d:2a:
e8:b2:a8:26:f8:00:b8:5d:85:cf:a8:cf:94:74:41:53:68:75:
65:2c:70:6f:19:f9:10:2a:33:1c:cc:bf:f4:93:8e:2a:70:89:
b8:a0:26:ec:a0:2f:97:c3:33:2e:59:ba:82:ee:38:b4:f6:73:
32:bb:23:e3:60:3c:10:31:55:fa:15:bc:d3:b7:49:1b:e5:82:
d8:d2:f6:38:8a:60:7a:7d:48:3a:70:45:19:c9:5a:63:c2:57:
b8:48:1d:ea:47:4d:5d:9e:4f:95:d5:10:64:d0:b0:ec:ac:f1:
11:5c:69:43:c7:a6:ee:6f:e2:7d:22:cc:7b:a5:0a:d3:40:63:
02:db:cf:a0:63:3b:23:11:70:dd:17:5a:3a:4c:5e:69:6a:90:
df:2f:15:6d:91:cd:4f:a3:24:fb:0c:28:b1:b8:0b:60:ba:6e:
3b:d0:77:48:17:b3:02:a8:5e:96:3e:d0:f9:0e:7b:26:27:99:
e8:4b:81:16:13:50:6c:66:0e:ef:44:d6:9c:a7:fc:b1:ab:22:
55:64:33:1a:5b:0e:11:eb:0b:2b:82:ec:89:da:4a:3d:ca:96:
e0:62:d3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:27:48 2024 by rpki-client on console-ams.rpki-client.org