Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/hclJG5Xdb6XnuZQMcTgr85wPcbI.roa
File: hclJG5Xdb6XnuZQMcTgr85wPcbI.roa (raw, json)
Hash identifier: eAkwf7aEWTpY91zYIXuKq5r2MEFWXSu63vZm36V+zzY=
Subject key identifier: 85:C9:49:1B:95:DD:6F:A5:E7:B9:94:0C:71:38:2B:F3:9C:0F:71:B2
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56F0669560BECD9A425A77CA05E7CBF
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/hclJG5Xdb6XnuZQMcTgr85wPcbI.roa
Signing time: Mon 01 Jan 2024 14:30:36 +0000
ROA not before: Mon 01 Jan 2024 14:30:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200533
IP address blocks: 85.14.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:06:69:56:0b:ec:d9:a4:25:a7:7c:a0:5e:7c:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85c9491b95dd6fa5e7b9940c71382bf39c0f71b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:46:ba:3a:d5:16:d7:03:61:03:4e:03:64:
46:b9:45:15:ce:f1:2e:d1:b7:cf:ac:f9:57:03:6c:
9b:f5:83:fe:f8:73:12:f1:17:f0:53:ee:a3:e0:20:
7c:8a:35:2d:2d:61:be:be:4e:20:05:7c:25:0b:00:
bd:70:14:17:cb:1d:a8:f1:c5:f6:4f:0e:17:19:3b:
a7:a5:45:6c:02:cd:1f:6f:6a:6c:fd:b2:75:ee:41:
6a:4c:c3:b0:66:a6:82:ee:1d:93:59:9f:4e:bb:3c:
54:6e:13:88:42:a3:29:06:2a:db:83:f8:00:40:9f:
02:55:76:be:c1:ad:4f:1b:ee:6b:8d:a2:44:50:0a:
57:3b:58:97:ed:31:45:9f:90:60:38:75:bf:26:3d:
d7:22:ca:55:f8:24:96:cd:7a:f9:8d:78:da:f7:7e:
e6:ad:a5:5a:a4:39:aa:80:36:cb:ca:6f:4d:7a:4f:
56:56:4a:8e:c1:03:82:c4:8f:c4:cd:60:10:fb:2f:
bc:ab:84:a9:ea:08:b5:ab:36:01:f0:45:d9:a3:ea:
ee:97:0b:9a:90:58:55:e5:20:2a:91:bb:a7:0c:bc:
35:e5:a5:ea:9a:d3:a2:48:58:71:d0:c2:e1:45:9d:
91:66:65:90:d5:2a:4a:92:8d:f4:0f:89:d1:f7:3b:
b7:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C9:49:1B:95:DD:6F:A5:E7:B9:94:0C:71:38:2B:F3:9C:0F:71:B2
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/hclJG5Xdb6XnuZQMcTgr85wPcbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.14.7.0/24
Signature Algorithm: sha256WithRSAEncryption
49:e3:15:60:89:e7:92:aa:73:55:5f:27:36:a6:ff:66:e9:f5:
d5:41:90:85:a2:92:5c:a7:36:b1:f3:9d:e2:53:bd:7c:00:66:
69:7f:cb:94:13:40:bc:5d:cf:3a:1d:fe:73:10:e2:66:db:66:
49:1c:c4:dd:b6:a7:9c:2e:52:ee:0d:36:05:f8:e0:a3:37:3b:
b6:82:9d:2a:aa:58:04:8b:67:5a:db:d6:25:ff:60:c5:6d:bd:
d2:15:73:bb:1e:0d:37:ad:0c:69:92:2a:8e:d3:be:16:34:fb:
60:9a:16:03:2d:aa:3a:09:ea:5c:ea:00:8e:3a:4e:51:c1:0e:
2d:b3:f1:12:4a:d5:11:61:a8:eb:cf:30:d2:74:b2:30:4e:69:
cc:91:db:f1:c9:dc:a0:1a:70:e6:f5:05:a4:aa:ef:54:fa:ea:
75:38:06:0c:6a:3e:f6:e2:02:52:61:31:0a:ac:a7:e0:25:11:
d7:d1:be:62:89:5e:4d:24:df:50:a3:b8:36:7d:2e:f6:c6:d7:
a0:d6:d6:5d:8d:4f:6b:16:b2:68:08:a5:08:86:2e:2d:eb:ca:
2a:8b:7e:56:b0:0d:db:5b:9c:75:19:b2:5a:b7:ce:36:19:24:
d1:67:23:a7:5f:7b:4b:d0:58:28:5d:7f:4e:5d:37:85:13:d9:
45:04:3b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:53:09 2024 by rpki-client on console-ams.rpki-client.org