Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/HsXcVNHtiBPUerBBo5sn3Dkmb7g.roa
File: HsXcVNHtiBPUerBBo5sn3Dkmb7g.roa (raw, json)
Hash identifier: ZTrd09OPuhWdg1CLFGNeNOZ9TdXdmDwAXpOxb/8IHyU=
Subject key identifier: 1E:C5:DC:54:D1:ED:88:13:D4:7A:B0:41:A3:9B:27:DC:39:26:6F:B8
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 018E4E0B92C0C2A662C2AE56BF4F11D3DA4C
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/HsXcVNHtiBPUerBBo5sn3Dkmb7g.roa
Signing time: Sun 17 Mar 2024 20:12:45 +0000
ROA not before: Sun 17 Mar 2024 20:12:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206425
IP address blocks: 194.36.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.mft
rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:4e:0b:92:c0:c2:a6:62:c2:ae:56:bf:4f:11:d3:da:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Mar 17 20:12:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ec5dc54d1ed8813d47ab041a39b27dc39266fb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:60:7f:17:72:3d:b9:91:f1:b3:b0:bb:85:a1:
8c:8d:ec:62:4b:ba:df:03:7d:5a:b1:47:f4:24:9a:
c6:47:a3:bf:56:3d:ac:9c:28:80:04:a1:f5:37:cb:
13:1e:14:9f:a4:ee:13:39:75:d2:14:6f:31:31:17:
18:06:59:57:47:f0:51:41:71:5d:4d:a7:32:03:61:
d3:ad:1f:99:90:cf:2a:32:36:30:c8:1b:aa:2d:14:
90:f3:52:9f:c4:cd:c6:ae:b4:fc:f4:1b:d8:84:d3:
d0:24:61:1f:22:72:e7:e7:79:0f:43:d1:a3:96:47:
37:74:fa:62:dd:71:60:c3:cd:6f:77:fb:6d:52:fe:
22:a4:2b:f6:d3:52:d7:98:06:4c:e3:bf:07:b8:55:
05:52:bc:25:3e:f6:b6:3e:77:02:a3:51:3c:3c:10:
ae:10:98:94:d5:3d:f0:93:ea:ce:9e:2e:34:e8:16:
51:39:0d:3f:87:38:e5:d1:0a:74:70:01:8d:d7:93:
65:28:24:0a:80:85:0e:79:c1:0d:bd:a3:32:a7:e0:
24:2a:a6:c6:87:28:29:2d:82:4e:c6:35:88:58:59:
01:ac:e2:de:48:78:3b:20:68:39:4c:89:82:7c:2d:
25:c0:47:20:7e:5f:79:8a:3a:2f:32:20:cb:14:a2:
bf:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:C5:DC:54:D1:ED:88:13:D4:7A:B0:41:A3:9B:27:DC:39:26:6F:B8
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/HsXcVNHtiBPUerBBo5sn3Dkmb7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.177.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ce:5e:8c:01:8e:9c:a0:48:b9:e6:33:1c:28:c4:3f:3b:b6:
4b:ee:99:80:bb:e0:da:f3:af:b0:3b:71:7e:64:0b:d5:3b:04:
32:38:8e:dc:e8:9f:77:d1:2a:35:da:d8:42:01:93:fc:26:82:
15:dd:2f:eb:45:d2:ec:57:da:82:e8:7a:82:6f:3a:df:05:f5:
11:43:cd:ec:a8:1e:0a:56:dc:e9:ca:fc:5c:07:03:6f:d3:01:
0c:82:8c:8b:19:71:2c:51:48:cd:de:ca:4d:fd:59:c6:74:f1:
10:63:9c:73:a8:90:34:81:0d:b6:46:3d:58:b4:64:2b:03:77:
c4:e4:7c:42:5b:4b:f7:7d:30:12:e9:6c:17:f9:86:e6:db:6c:
8b:3b:28:d1:04:23:18:bc:11:2e:7d:74:6e:80:a7:0d:b9:85:
cf:90:6e:ab:f7:2b:d1:b2:d8:ea:65:ef:f2:92:29:f2:5d:1d:
fa:df:6f:16:69:b6:a2:2d:e7:a3:5b:57:72:53:90:53:1a:82:
b3:8c:ef:0f:54:57:ac:e1:7a:c3:b6:77:0a:38:0c:f3:2c:a4:
2e:e4:95:79:ed:c3:13:52:bc:ad:d0:1f:2e:ab:20:ae:dc:d7:
ff:a4:d2:ec:33:f5:2b:df:99:75:04:a0:20:31:8f:01:fd:c0:
13:17:94:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:08:52 2024 by rpki-client on console-fra.rpki-client.org