Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/Hy8Sh2lI7S-ldbZ2tnCnqpnwLKk.roa
File: Hy8Sh2lI7S-ldbZ2tnCnqpnwLKk.roa (raw, json)
Hash identifier: p6w8QlmY2RrGh/n+37Y9M0Ufj3rlfBXdGPPg0lRWvys=
Subject key identifier: 1F:2F:12:87:69:48:ED:2F:A5:75:B6:76:B6:70:A7:AA:99:F0:2C:A9
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 018EF4AF31F15E38CD24CE6044DA29029020
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/Hy8Sh2lI7S-ldbZ2tnCnqpnwLKk.roa
Signing time: Fri 19 Apr 2024 04:48:25 +0000
ROA not before: Fri 19 Apr 2024 04:48:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203451
IP address blocks: 185.92.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f4:af:31:f1:5e:38:cd:24:ce:60:44:da:29:02:90:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Apr 19 04:48:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f2f12876948ed2fa575b676b670a7aa99f02ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7b:82:63:e3:06:5b:e0:d5:7f:41:e7:9d:aa:
96:7e:84:a6:7a:1d:8e:92:5c:2d:46:ad:e4:8a:41:
77:22:d3:0f:da:32:9d:b1:3e:19:79:1e:30:e0:2c:
a8:ae:c9:a7:07:69:f2:a0:b1:a0:03:32:3d:df:5b:
b6:a4:88:fb:3d:14:0c:40:74:ce:94:7b:67:49:65:
06:74:35:03:3f:f8:de:82:b2:0d:b7:05:d9:bd:58:
5f:19:30:4c:51:dc:b8:0b:be:59:1a:39:97:cb:6d:
68:cd:a2:e8:9c:9e:16:5c:10:bb:14:37:34:90:ca:
db:10:47:d3:d2:e8:4d:76:a2:10:1d:11:91:43:3b:
98:54:56:66:73:38:3c:37:f3:c9:d3:36:25:ff:73:
f9:e8:7a:40:e9:65:e4:3a:23:d8:01:9f:01:a4:96:
65:aa:1b:c1:d2:0b:5d:27:ad:02:9e:f2:1b:1f:df:
0b:0a:8c:3e:59:c2:00:1d:49:39:92:c5:78:51:fc:
50:89:3f:31:4c:58:d1:86:60:2e:ff:2d:50:2d:34:
d5:54:44:e7:c8:6b:2e:2e:ee:41:22:77:09:9a:a6:
50:e4:e2:a2:ec:37:cb:79:6e:ba:9d:7f:7d:94:90:
14:8f:4b:d5:70:5b:28:95:c5:e1:32:80:98:bd:da:
c5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:2F:12:87:69:48:ED:2F:A5:75:B6:76:B6:70:A7:AA:99:F0:2C:A9
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/Hy8Sh2lI7S-ldbZ2tnCnqpnwLKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.92.139.0/24
Signature Algorithm: sha256WithRSAEncryption
45:6d:29:e1:a8:31:5b:01:2c:24:87:d9:23:95:15:5e:b4:fa:
c4:a6:2d:73:d2:fe:14:61:c6:1b:4e:41:dd:e9:b3:42:d7:5d:
f2:37:e5:5b:aa:72:03:18:23:c6:73:9b:be:d4:09:a1:d5:2f:
ff:6f:f9:c8:2a:4b:c2:79:ab:f7:fd:2e:41:3e:01:f0:88:b3:
a3:83:ad:9b:d5:df:f4:0c:b9:78:bf:79:cc:ab:ce:05:80:be:
2d:6b:ff:cd:d2:0b:a6:9e:3b:c9:63:2f:14:ec:56:53:6b:41:
ca:44:57:67:46:57:32:f1:38:74:ec:db:00:e8:c4:24:ba:e7:
5c:a9:66:37:47:31:64:0a:0a:ed:93:10:dd:e8:2c:4b:ba:3b:
17:4c:13:5b:3a:8b:d3:c6:a4:ac:72:b9:21:68:40:84:b0:23:
a6:7c:bd:a3:fa:46:71:a0:25:03:1e:78:e9:72:fb:7d:ff:48:
03:b4:c9:68:34:95:f7:f1:b2:df:e8:d6:de:07:23:f7:c4:41:
4e:c4:ae:37:49:90:93:7c:83:83:1e:43:5d:be:e9:44:18:f1:
8b:57:1d:c3:19:73:4a:77:ce:b3:c5:89:de:16:09:e6:ec:f3:
29:4c:96:7f:0a:57:35:65:1f:66:31:ce:0b:7c:0a:f0:e5:a3:
35:f7:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:04:16 2024 by rpki-client on console-fra.rpki-client.org