Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/HXWf38Jiyjx5HpR2GCvxfk6JGgc.roa
File: HXWf38Jiyjx5HpR2GCvxfk6JGgc.roa (raw, json)
Hash identifier: T5dBuNwCG3P98qrGOBVhUbrKza0kEQYGGAjwCTDHlLA=
Subject key identifier: 1D:75:9F:DF:C2:62:CA:3C:79:1E:94:76:18:2B:F1:7E:4E:89:1A:07
Certificate issuer: /CN=e3c85c37ad25274c712c24473e078adce732c1dd
Certificate serial: 018CC42460FC756D1A5419EDAC7D53125DD6
Authority key identifier: E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/HXWf38Jiyjx5HpR2GCvxfk6JGgc.roa
Signing time: Mon 01 Jan 2024 08:29:27 +0000
ROA not before: Mon 01 Jan 2024 08:29:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21277
IP address blocks: 185.34.16.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 10:03:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:60:fc:75:6d:1a:54:19:ed:ac:7d:53:12:5d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3c85c37ad25274c712c24473e078adce732c1dd
Validity
Not Before: Jan 1 08:29:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d759fdfc262ca3c791e9476182bf17e4e891a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:fd:9d:6c:56:3d:e1:cd:45:71:19:bc:11:
66:a8:45:84:46:9c:ae:2c:f9:7b:ab:bd:00:3d:b2:
e2:f3:4d:0d:aa:f9:82:7a:53:6f:77:17:ed:57:79:
22:30:d2:51:45:11:36:87:34:54:b6:17:73:ea:b2:
91:3b:f8:fa:98:03:e1:65:ce:a9:ec:07:d0:ed:79:
af:8a:34:2c:a2:5d:6a:8c:ac:88:21:cd:15:2b:d6:
4e:b6:67:75:f4:97:64:f0:a9:75:82:25:23:a6:da:
cb:de:21:0c:aa:25:da:75:69:fe:cb:a6:c6:ef:44:
e9:57:d2:e9:9c:d6:77:6d:80:e8:1d:5c:b5:a3:bf:
69:d6:a7:2a:bf:b5:47:98:e1:1a:b2:31:81:16:f0:
18:fa:bd:3c:c3:03:cd:8b:55:ff:eb:8f:4b:1b:4b:
75:1e:e8:49:49:1e:aa:f5:21:60:0d:37:ed:15:21:
c7:e0:8f:90:4b:e7:d8:70:3f:da:8f:bc:31:da:07:
1e:f6:db:bb:94:74:92:cf:cc:25:20:48:1d:7b:55:
27:7c:ec:ba:99:14:72:5b:40:5c:a0:31:a9:eb:c8:
f0:4a:29:59:29:17:9f:e4:81:55:f5:27:85:f6:40:
cd:c1:9e:b9:3e:77:af:dd:13:53:05:3c:85:64:d8:
da:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:75:9F:DF:C2:62:CA:3C:79:1E:94:76:18:2B:F1:7E:4E:89:1A:07
X509v3 Authority Key Identifier:
keyid:E3:C8:5C:37:AD:25:27:4C:71:2C:24:47:3E:07:8A:DC:E7:32:C1:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/48hcN60lJ0xxLCRHPgeK3Ocywd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/HXWf38Jiyjx5HpR2GCvxfk6JGgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/c6756a-1bc0-4938-8015-dce3fa3fbae9/1/48hcN60lJ0xxLCRHPgeK3Ocywd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.16.0/22
Signature Algorithm: sha256WithRSAEncryption
66:10:a0:26:c5:6a:61:f2:6d:a6:65:aa:5e:5b:a3:67:c1:b8:
99:35:a0:af:29:ba:d7:c3:21:6d:dc:89:3c:84:bf:80:25:cc:
b3:b4:d4:49:e9:ec:57:b4:6c:2e:3b:b0:14:23:df:c2:88:46:
b0:16:fc:b4:20:0a:47:b3:dc:b7:4c:7f:2a:da:c6:05:50:52:
83:ef:83:e7:74:7c:89:9b:98:67:a5:34:f6:3d:c8:9d:7f:5c:
c6:5b:6a:2a:ef:13:b1:bb:a5:bb:23:49:1b:87:4e:2d:4b:f7:
b9:9d:f5:c4:9f:07:9d:a8:87:ce:7a:0d:f8:d1:34:f0:b6:e7:
00:fd:78:6a:fc:86:73:e8:d3:db:d0:23:a7:bb:91:25:30:51:
e4:28:91:cb:6e:b4:a8:a7:b0:80:39:8b:a8:c8:7e:bf:2c:3c:
a5:20:15:4a:5d:2d:8b:30:84:55:3a:7c:be:52:e4:85:47:f3:
f7:9a:24:a8:e4:4a:64:ca:7a:20:fb:1b:8a:25:1c:b8:4e:c7:
09:c8:64:2f:a5:f8:29:e1:4b:b8:ea:82:12:f1:ba:70:52:fe:
0e:52:1f:de:34:4f:ba:d5:aa:8e:05:3a:8d:75:48:39:8f:44:
51:f1:a1:5e:86:bb:52:fd:09:c0:09:1d:86:7a:9c:92:60:74:
62:18:a5:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 17:05:04 2024 by rpki-client on console-ams.rpki-client.org