Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/hucd3_--BZPDXqPXmJS-uK1Efpo.roa
File: hucd3_--BZPDXqPXmJS-uK1Efpo.roa (raw, json)
Hash identifier: UkVdFTC3OEjXFYZmjnHHxFJkWjzMWrlX3JHQgLM4Zvk=
Subject key identifier: 86:E7:1D:DF:FF:BE:05:93:C3:5E:A3:D7:98:94:BE:B8:AD:44:7E:9A
Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Certificate serial: 018CC50090DB0A4928371062883E667C3236
Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/hucd3_--BZPDXqPXmJS-uK1Efpo.roa
Signing time: Mon 01 Jan 2024 12:29:57 +0000
ROA not before: Mon 01 Jan 2024 12:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200205
IP address blocks: 83.139.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft
rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:90:db:0a:49:28:37:10:62:88:3e:66:7c:32:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e
Validity
Not Before: Jan 1 12:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86e71ddfffbe0593c35ea3d79894beb8ad447e9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:2c:e6:e0:f4:d8:e8:5e:bc:e1:55:91:7d:
ef:2d:5e:9d:68:7c:3e:a1:ea:36:d9:44:4f:8e:d3:
82:58:12:18:3f:d5:08:38:e6:55:09:55:28:3e:d6:
61:be:3e:05:20:c7:55:d5:17:73:13:01:fa:9a:4c:
aa:00:8b:93:61:92:b1:d8:63:98:34:d9:59:72:cb:
63:f4:bb:6b:60:9e:5d:7f:78:99:f8:cf:c0:e6:92:
50:1c:08:4e:4e:ee:86:ae:f1:ef:bb:af:ec:55:6e:
17:0c:1d:e9:e8:3c:b5:be:d4:88:0d:60:ec:63:63:
44:24:92:c5:37:52:78:c9:ed:91:1d:34:50:79:68:
4a:a0:d0:eb:75:6b:f4:3f:70:3b:b6:22:83:c1:bc:
ec:b3:a7:54:77:b8:72:65:45:ac:3f:53:33:37:28:
80:13:4f:5a:58:6a:8f:36:20:3c:06:68:ea:64:bc:
0e:07:e8:78:ad:d1:27:e8:32:a1:2d:f3:37:6d:20:
3b:b5:bb:2a:00:0b:98:f3:79:73:1b:57:db:a1:af:
f3:d5:22:61:8e:7f:3d:a4:88:ee:f1:2b:be:04:83:
ce:75:8b:f4:98:7b:9f:fb:0f:ee:03:9a:2d:a8:9d:
a9:bd:38:c9:53:5b:8f:b0:f0:f6:15:57:d3:57:84:
49:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E7:1D:DF:FF:BE:05:93:C3:5E:A3:D7:98:94:BE:B8:AD:44:7E:9A
X509v3 Authority Key Identifier:
keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/hucd3_--BZPDXqPXmJS-uK1Efpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.139.22.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f1:86:7f:0d:29:d7:a0:48:7e:d9:01:2e:b8:d2:0b:e7:5b:
6e:77:41:cd:11:d8:23:96:21:5b:ee:dc:72:dc:20:ca:56:e5:
1b:c9:8f:68:fe:eb:05:93:59:2c:d3:60:36:a0:54:46:ba:3b:
d3:39:f2:97:39:0c:ac:88:bc:7a:c5:3c:20:6e:32:fa:51:04:
d2:08:b4:b3:46:4c:e2:24:4a:39:f0:59:40:d8:c6:79:b4:54:
f5:df:c2:97:ed:de:87:10:bd:6b:e5:be:92:b3:6e:bb:2e:65:
30:ef:a8:54:5b:72:db:1e:7f:a0:4a:8e:4b:50:70:80:9b:c5:
9f:c7:38:aa:6b:0f:b3:0b:c6:a5:0e:1a:6a:10:3a:0c:01:c9:
99:f6:3e:aa:8b:93:02:fc:fc:b1:18:6c:4f:9f:ea:e2:38:01:
a2:4f:55:07:7d:52:18:40:4a:d3:19:c3:5d:8f:25:31:70:af:
70:6d:f2:35:ec:45:fd:71:df:46:75:a3:d7:77:22:d6:4b:fa:
a6:58:9e:e6:4c:e1:06:cb:39:bd:e5:cb:86:54:af:48:d3:f3:
76:71:18:e7:04:48:92:a4:4e:3b:c4:c6:1b:d3:ea:90:bb:6c:
fb:34:f9:bf:3f:cb:ca:48:c3:c1:1a:39:c0:73:86:d5:bf:93:
85:c4:8e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:14:35 2024 by rpki-client on console-fra.rpki-client.org