Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/HAW0RAIP2Pn0we7vxTE0vnZYitc.roa
File: HAW0RAIP2Pn0we7vxTE0vnZYitc.roa (raw, json)
Hash identifier: ow/IQkjvTCoVlthzuAoHFSUJLQmjKMEzjfqH4Ru28tI=
Subject key identifier: 1C:05:B4:44:02:0F:D8:F9:F4:C1:EE:EF:C5:31:34:BE:76:58:8A:D7
Certificate issuer: /CN=b8d5b3d379d21162e2b522c43801fb9603988245
Certificate serial: 018CC801574DDA81A02EAF8302ECBEEDB727
Authority key identifier: B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/HAW0RAIP2Pn0we7vxTE0vnZYitc.roa
Signing time: Tue 02 Jan 2024 02:29:40 +0000
ROA not before: Tue 02 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 19905
IP address blocks: 185.243.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:03:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:57:4d:da:81:a0:2e:af:83:02:ec:be:ed:b7:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d5b3d379d21162e2b522c43801fb9603988245
Validity
Not Before: Jan 2 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c05b444020fd8f9f4c1eeefc53134be76588ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:40:3e:23:57:bd:65:9e:b4:aa:81:da:74:
d2:76:84:88:15:52:d0:a2:4f:58:63:fd:43:96:a2:
45:8f:b3:a7:17:56:33:6b:02:79:31:88:dc:0c:20:
91:2a:b9:fe:03:49:33:9f:4d:d0:f9:b0:4b:34:54:
46:82:cd:dc:8a:c7:27:32:aa:66:4a:05:62:a8:44:
f0:d4:df:95:e1:72:f3:2b:52:ee:26:58:8b:32:b1:
17:19:4a:01:9b:12:08:00:b6:8c:9b:ed:25:7e:63:
13:d5:d1:a7:58:38:de:a1:06:d3:8a:8f:78:2f:af:
5e:29:5c:2e:18:c4:b7:41:81:ab:16:fd:70:4b:7d:
ff:63:8d:f6:7d:7f:02:b2:a8:a0:49:4e:4d:c4:5f:
13:4a:b7:f4:6d:0c:de:bb:69:5f:ff:b4:b2:93:d9:
c6:ec:ac:ee:29:3a:51:4c:7f:46:bf:85:bf:3b:63:
af:51:76:c8:7b:73:a9:d9:81:f8:73:8a:b5:1c:c0:
94:0f:06:d3:34:21:30:9f:9f:15:5f:1c:99:f8:a9:
0c:60:18:6a:56:9a:7d:1b:05:7d:2c:38:e5:e7:d6:
7f:5f:61:c3:68:81:81:05:f6:33:2d:28:21:bf:43:
43:a0:05:a6:e4:80:c0:17:d8:5e:55:97:89:66:4f:
b9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:05:B4:44:02:0F:D8:F9:F4:C1:EE:EF:C5:31:34:BE:76:58:8A:D7
X509v3 Authority Key Identifier:
keyid:B8:D5:B3:D3:79:D2:11:62:E2:B5:22:C4:38:01:FB:96:03:98:82:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNWz03nSEWLitSLEOAH7lgOYgkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/HAW0RAIP2Pn0we7vxTE0vnZYitc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/ef3e43-7bf7-404f-a9a3-b3e9255d2b3e/1/uNWz03nSEWLitSLEOAH7lgOYgkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.128.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:c6:41:db:c8:12:d5:5d:28:33:b3:25:35:41:17:f7:f0:37:
08:de:14:f4:be:71:57:cb:07:dc:4b:0b:2a:99:b5:8b:6e:95:
1b:23:31:e3:81:54:11:78:a5:95:8c:1e:0f:1b:87:f1:06:de:
23:10:cf:07:15:fb:47:3f:da:ce:f7:65:08:c3:ef:33:e3:a9:
99:bc:58:94:97:9b:6d:28:c1:78:20:ed:dd:89:46:63:f5:b6:
64:4e:d2:18:e6:d2:dd:00:86:71:59:70:37:4f:e8:27:5b:4b:
1d:47:38:8c:62:74:e7:e7:cd:12:9f:c5:7a:31:dc:ce:22:25:
09:b3:52:15:f2:16:39:14:8e:46:3b:da:21:fc:33:06:6e:26:
7b:2f:6d:16:b1:04:bc:d8:3a:84:cf:f0:c8:08:64:07:de:2f:
b8:f8:12:68:84:7f:4b:40:7a:1f:a2:89:ef:39:7b:53:80:38:
59:d4:2c:9f:7a:f9:47:d4:aa:6e:68:4a:63:0b:0e:dd:a1:e1:
4a:82:de:bf:73:03:7e:07:01:07:ec:95:39:21:18:bb:bb:8e:
76:82:3d:5e:a2:1b:5b:c5:19:e0:65:a5:e7:b6:96:9e:39:aa:
d7:cf:ef:67:cc:77:4f:91:aa:13:af:24:f7:fb:21:64:30:3e:
a1:06:06:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 21:19:10 2024 by rpki-client on console-ams.rpki-client.org