Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/HgIlTz6nPd-HCmJnwfXU85OtRFY.roa
File: HgIlTz6nPd-HCmJnwfXU85OtRFY.roa (raw, json)
Hash identifier: PVqbnjF0wCA+pCqhDa/DtzORlSeakDRgfSSAjqsEUgY=
Subject key identifier: 1E:02:25:4F:3E:A7:3D:DF:87:0A:62:67:C1:F5:D4:F3:93:AD:44:56
Certificate issuer: /CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Certificate serial: 018CC2DB19718EE3E880737B4DDD786618CD
Authority key identifier: 96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/HgIlTz6nPd-HCmJnwfXU85OtRFY.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59771
IP address blocks: 185.205.24.0/22 maxlen: 24
185.205.24.0/24 maxlen: 24
185.205.26.0/24 maxlen: 24
185.205.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:19:71:8e:e3:e8:80:73:7b:4d:dd:78:66:18:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96d7ba651403d18dddb7a74b20ddc21deb94220e
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e02254f3ea73ddf870a6267c1f5d4f393ad4456
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ce:78:39:0a:d6:3a:ed:c9:82:cc:23:e5:29:
12:83:be:62:ec:f4:ad:ee:b0:8f:67:87:b6:4e:a3:
38:f5:33:8a:13:cd:47:1e:71:03:72:3b:5e:ad:92:
8e:7d:f9:7c:01:48:42:e0:f4:9b:6a:a2:4f:fa:1e:
c6:c3:26:fd:d1:74:65:c8:2f:1e:b8:cb:8d:22:91:
76:69:b0:1f:7d:2b:e2:a0:00:19:f9:3c:02:9e:46:
45:5c:15:39:82:ec:93:f0:86:5c:39:fe:62:bd:79:
04:e1:8d:b8:70:5a:a5:5e:d1:cc:d3:67:fa:41:7b:
76:82:63:9e:a9:4e:7e:95:fa:4e:8c:40:4c:9d:a5:
5a:40:cc:24:7b:93:a9:5f:47:24:40:5f:26:42:73:
ac:e1:91:75:4a:6e:72:80:2f:03:f8:4d:fe:84:18:
5d:6c:ed:9b:41:57:59:8f:d5:10:c1:d0:a6:67:51:
1f:f4:4f:7d:7c:7e:ba:d2:75:1c:b0:96:1f:a2:ac:
d6:d3:47:ae:3a:f9:67:45:41:50:c4:df:1f:50:a9:
c0:4a:59:1a:9a:7c:0e:13:65:59:6e:29:f0:ad:0d:
4d:47:93:ab:9d:4c:04:0f:57:a2:4e:ee:7c:ba:d7:
80:ab:7b:25:ef:bc:69:a3:c2:80:27:89:79:2c:73:
32:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:02:25:4F:3E:A7:3D:DF:87:0A:62:67:C1:F5:D4:F3:93:AD:44:56
X509v3 Authority Key Identifier:
keyid:96:D7:BA:65:14:03:D1:8D:DD:B7:A7:4B:20:DD:C2:1D:EB:94:22:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/HgIlTz6nPd-HCmJnwfXU85OtRFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/0d33c9-6a84-4ce3-81b0-418af90acb8a/1/lte6ZRQD0Y3dt6dLIN3CHeuUIg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
bf:e7:75:16:d6:c2:a1:a1:45:68:fe:c4:d9:fb:3c:cb:5f:81:
e2:6c:69:f5:f9:17:dc:92:74:04:b6:7e:c4:56:26:be:81:24:
1c:de:49:5c:46:0a:9e:2f:f3:87:6b:fb:b3:88:a8:98:9c:cc:
a6:04:72:8c:cc:7a:4e:09:16:a4:55:e7:fc:30:35:24:e6:d4:
4e:8c:0d:3d:f0:19:49:c8:f4:f8:82:5e:90:9c:27:df:11:36:
50:a9:e0:de:aa:b6:5c:3a:f5:bf:bb:51:3b:26:e7:4f:35:46:
0f:a6:9f:c7:4b:a4:d3:66:2f:d8:57:53:9f:e7:34:2c:df:39:
68:b4:b3:5d:88:b9:5a:70:47:00:96:64:4f:05:ca:12:07:ea:
df:70:00:1a:f5:bc:fa:fd:f0:65:20:46:c2:76:4d:f6:60:88:
39:5a:d2:d3:7b:9e:25:e7:c0:47:c2:37:24:a6:57:b1:65:c9:
85:8a:43:80:19:59:84:6e:d1:8b:4c:c2:19:9c:45:ca:3a:a5:
ce:c1:f9:06:e4:3d:fb:99:4f:21:45:6e:bd:f8:7b:4e:59:61:
93:10:44:b9:ab:ec:11:9b:a4:80:da:1f:f4:15:5d:19:70:04:
33:83:a7:0e:d0:17:e2:30:7e:a4:74:72:90:0d:c9:ca:3b:e3:
b5:41:5b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:22:14 2024 by rpki-client on console-ams.rpki-client.org