Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HAJu8xN6o1aDaxtyS1dmyMaUaw0.roa
File: HAJu8xN6o1aDaxtyS1dmyMaUaw0.roa (raw, json)
Hash identifier: QFJjcZ0udsxzG8pYDDMDzu5fWXpv2onN+c7G8tLgBF0=
Subject key identifier: 1C:02:6E:F3:13:7A:A3:56:83:6B:1B:72:4B:57:66:C8:C6:94:6B:0D
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 018CC802784E04C543ACB087C1A43B8F9C00
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HAJu8xN6o1aDaxtyS1dmyMaUaw0.roa
Signing time: Tue 02 Jan 2024 02:30:54 +0000
ROA not before: Tue 02 Jan 2024 02:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34927
IP address blocks: 45.90.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:78:4e:04:c5:43:ac:b0:87:c1:a4:3b:8f:9c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Jan 2 02:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c026ef3137aa356836b1b724b5766c8c6946b0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:77:4a:df:8d:2f:8c:88:50:73:b1:75:21:05:
8c:f0:7b:ef:d3:05:91:3f:cd:80:e2:a6:60:4e:4a:
59:78:05:07:3e:cd:5e:05:d6:2a:07:ce:1d:7f:fb:
e0:29:df:82:92:6c:cd:c9:6e:70:fe:8d:9c:90:cc:
08:80:71:88:64:8c:20:82:f9:44:3d:bc:b1:9a:64:
4e:cb:4d:c7:66:8c:58:cc:23:e9:08:51:15:62:48:
00:35:9f:50:0b:19:18:80:54:66:73:16:70:23:d3:
29:e4:ff:8f:cd:97:f4:09:60:45:67:13:5d:12:c6:
17:1a:d7:33:95:4b:72:95:71:27:6c:4b:9c:2f:83:
1e:06:4c:69:72:d3:19:32:8a:aa:97:38:f8:cb:0b:
09:6f:a4:a2:50:6b:ea:8d:de:7a:56:09:29:b4:d0:
b8:a6:49:9c:91:b9:82:0e:bb:f5:98:f6:1a:0a:d7:
73:6f:48:18:9f:61:f9:e4:1a:0d:44:1b:83:4e:ff:
11:29:d5:0d:c2:ed:d3:31:a4:fc:4b:b1:1d:ea:5c:
9f:a9:88:cd:f4:fe:8b:37:13:a7:80:a9:1a:36:92:
e1:d9:cf:d8:51:bd:ee:b6:04:f6:f3:87:b4:4f:c8:
77:88:20:4b:c8:a6:d3:ec:8b:35:f4:ba:4e:fe:75:
6f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:02:6E:F3:13:7A:A3:56:83:6B:1B:72:4B:57:66:C8:C6:94:6B:0D
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/HAJu8xN6o1aDaxtyS1dmyMaUaw0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.18.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:2f:89:5b:6d:50:9c:e8:7b:13:dc:7a:15:5d:a2:63:c9:d1:
98:ef:76:fe:c7:c7:b7:d4:73:ca:0a:ef:78:ae:68:9c:0e:ff:
2a:3d:a5:aa:43:71:0f:cd:e8:0f:92:1b:49:c4:49:87:5d:91:
be:d6:bb:f6:88:bf:ae:40:25:ee:b2:ab:a7:c3:7c:fd:96:03:
5d:3b:1f:b5:01:90:b1:50:db:fc:0f:fa:9f:30:8b:f9:c9:c3:
fc:ea:f0:7e:a1:27:66:20:e5:10:ec:a1:8c:77:92:b9:d2:98:
ef:28:67:e1:c6:c5:65:6a:af:8e:c8:b3:51:dd:78:35:9f:53:
a4:12:78:f0:4d:c9:43:56:1c:14:8e:f4:1a:9b:29:99:5e:cd:
69:21:5a:d2:e4:a2:ff:2e:c7:4b:57:f9:11:60:d7:92:10:83:
2c:6a:6c:0e:ee:93:10:3e:f3:ba:79:f8:37:4e:91:24:e7:97:
ea:d3:7a:b8:8f:01:57:ab:82:fa:bd:50:97:9d:98:90:ae:84:
5e:d0:96:b3:e0:e5:cb:d0:42:af:59:a4:78:f4:22:78:f7:3e:
d5:8c:7c:13:49:67:fa:0e:d0:4e:1d:09:31:5f:4b:71:b0:5a:
40:de:6f:51:f5:0b:99:0e:32:6d:54:ea:c3:8a:36:a7:91:e2:
08:17:60:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 12:55:31 2024 by rpki-client on console-fra.rpki-client.org