Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Hu-oZjwq7qD8bm4EaUjUPTYbK4s.roa
File: Hu-oZjwq7qD8bm4EaUjUPTYbK4s.roa (raw, json)
Hash identifier: OYxlpomXTRjsWHNi/LjXKT/84x0LmmEPV9v9BlyqYxU=
Subject key identifier: 1E:EF:A8:66:3C:2A:EE:A0:FC:6E:6E:04:69:48:D4:3D:36:1B:2B:8B
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 018CC6B948692843C3DDC9271A231AE58E0A
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Hu-oZjwq7qD8bm4EaUjUPTYbK4s.roa
Signing time: Mon 01 Jan 2024 20:31:20 +0000
ROA not before: Mon 01 Jan 2024 20:31:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210746
IP address blocks: 85.187.45.0/24 maxlen: 24
151.237.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:48:69:28:43:c3:dd:c9:27:1a:23:1a:e5:8e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 1 20:31:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1eefa8663c2aeea0fc6e6e046948d43d361b2b8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:e4:ad:41:8a:cf:76:1d:c0:56:7f:9d:d8:
15:87:0b:ee:be:6e:b8:7a:2f:dc:30:08:6d:61:3e:
8a:da:fe:4e:01:0c:3e:c9:77:6b:5c:03:27:d4:7a:
6f:8e:6a:0b:b3:21:69:9f:fe:7e:e9:8b:5a:66:09:
b8:9b:06:28:40:d6:5d:d0:a7:41:08:c0:c8:31:89:
57:98:08:a0:3c:86:06:85:0c:5a:e7:9d:7d:e0:ff:
ae:b1:85:aa:56:fb:4a:dc:a6:0f:7c:98:ae:2c:1e:
a4:7c:43:59:92:17:7f:7f:31:f5:97:8d:40:04:38:
13:69:d4:65:09:c7:99:2c:e1:ad:fc:33:93:0e:89:
6f:4a:88:1a:69:e1:8b:1b:b7:58:73:0a:a6:eb:f6:
be:e0:4f:8a:44:42:0b:cd:70:44:24:84:40:d6:15:
0b:e5:46:37:be:00:ed:7d:3f:41:d9:26:08:c0:b5:
09:73:5a:b8:f2:e1:3f:8f:7c:0e:ab:e9:89:a5:ff:
7f:76:a7:3a:1e:92:53:b0:41:7f:d0:1c:d7:c1:fa:
1f:90:ec:3a:63:d3:53:0e:13:ad:05:d9:bf:23:ec:
71:42:3d:5f:fc:d8:2c:17:34:b6:97:9d:52:f2:97:
aa:59:96:1c:6d:1a:24:6d:95:f5:cf:08:66:2e:42:
9a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EF:A8:66:3C:2A:EE:A0:FC:6E:6E:04:69:48:D4:3D:36:1B:2B:8B
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Hu-oZjwq7qD8bm4EaUjUPTYbK4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.45.0/24
151.237.23.0/24
Signature Algorithm: sha256WithRSAEncryption
e1:59:f5:a3:7b:7d:9d:b3:4b:8a:c4:63:3c:60:cb:d5:2e:04:
1e:c8:5f:bc:bc:8b:42:e5:d8:ad:13:c1:f0:b1:2d:4d:f4:b9:
93:52:16:87:e3:aa:89:10:e3:ad:d2:37:00:74:bc:9c:27:bd:
25:f2:51:3e:b8:e9:f3:78:b9:db:ab:60:78:f9:31:e1:02:c7:
ad:c8:56:ea:61:4c:6e:46:f7:b5:0a:8a:4f:f2:8c:2d:ec:ad:
8a:bb:f9:3a:62:67:02:6d:75:00:c5:68:e9:37:56:7c:7c:e3:
09:88:1b:ef:53:d1:c7:ca:1e:8d:79:18:10:7e:06:4a:b0:96:
33:07:2d:d2:31:20:15:3d:2b:3a:5b:be:2f:6b:75:e5:63:74:
f8:88:17:ab:a1:c3:4b:95:2a:56:28:8f:5f:d0:ca:46:4d:b8:
c7:41:03:24:5f:a7:c0:fc:db:4b:95:f4:f1:9a:1e:e7:08:4b:
5f:ca:33:b3:0c:0e:e3:c0:2a:e4:53:d6:d8:a8:f2:32:a9:98:
4b:25:b1:a1:3f:69:57:2c:41:8e:c6:04:59:b8:cf:37:fb:66:
32:67:0e:1d:67:52:b4:a8:38:ed:86:1b:51:e6:ca:8f:eb:94:
8f:8a:5e:f4:d6:a4:5d:6b:15:f3:d9:ce:4d:55:ea:43:f3:59:
96:64:7e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 04:16:43 2024 by rpki-client on console-ams.rpki-client.org