Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hxNQZrnBGwd86jb_BQvrzCNQKzM.roa
File: hxNQZrnBGwd86jb_BQvrzCNQKzM.roa (raw, json)
Hash identifier: IJHyQZKgpT6p/u9S3/uiigSGgynobCTwFOTFAFg1mr0=
Subject key identifier: 87:13:50:66:B9:C1:1B:07:7C:EA:36:FF:05:0B:EB:CC:23:50:2B:33
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 019286738D2639F779583A971FDEAF35B218
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hxNQZrnBGwd86jb_BQvrzCNQKzM.roa
Signing time: Sun 13 Oct 2024 15:16:12 +0000
ROA not before: Sun 13 Oct 2024 15:16:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215071
IP address blocks: 193.8.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:86:73:8d:26:39:f7:79:58:3a:97:1f:de:af:35:b2:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Oct 13 15:16:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87135066b9c11b077cea36ff050bebcc23502b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:df:15:6b:b5:06:8b:93:b9:99:0b:f4:01:c6:
67:a8:65:ff:59:e1:54:6e:b6:99:6e:40:36:fc:35:
72:3e:ca:f1:e1:e7:25:d2:bc:6f:58:75:a9:13:44:
13:8c:1a:dd:f2:df:1c:bf:1b:19:26:6c:bd:c1:db:
10:ad:21:68:89:8d:fd:5f:56:47:b8:96:94:5f:e0:
ff:8e:0b:fa:1b:88:79:c5:50:ae:af:5b:72:f1:1d:
66:b5:ec:b8:04:96:45:cf:7b:a4:a9:a5:c7:6b:19:
44:5b:33:49:0f:13:a8:e7:dc:5d:06:3b:12:39:09:
b2:d3:22:51:23:3d:9d:aa:80:66:46:96:e3:1f:bc:
71:d3:a7:2c:de:86:ca:5e:a7:90:ea:6c:a5:bb:a2:
0b:5e:b6:d6:67:c0:96:6c:48:5a:d9:6f:90:e6:dc:
e2:18:3b:9e:14:34:57:87:51:41:ab:5d:61:05:56:
f7:e0:96:69:6a:89:48:ca:08:0c:0d:09:50:25:29:
37:6a:f1:7a:d1:79:70:fa:4e:e2:8b:0f:de:25:d1:
a7:e3:b4:bc:45:9c:3e:dc:89:c0:19:01:e3:98:f0:
1f:e8:41:92:94:39:da:e0:c4:e9:b5:1c:37:cf:6c:
5c:00:72:02:f3:3d:91:87:36:a0:d1:41:53:e2:a6:
ea:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:13:50:66:B9:C1:1B:07:7C:EA:36:FF:05:0B:EB:CC:23:50:2B:33
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/hxNQZrnBGwd86jb_BQvrzCNQKzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.8.113.0/24
Signature Algorithm: sha256WithRSAEncryption
23:53:be:29:ea:42:9b:2d:b0:ef:23:cf:c5:71:06:37:f3:42:
97:b5:9d:a2:a2:2d:49:a1:82:59:6e:43:48:55:db:c7:7b:48:
f7:eb:45:fd:23:05:81:bc:05:7f:a4:27:f9:d3:65:2d:e3:ba:
a2:10:24:8d:49:a0:2d:e6:35:27:ac:f7:88:5c:c1:95:e6:ec:
c7:fb:68:9c:14:43:ef:7a:96:2a:b9:22:0a:7e:b2:cd:4b:12:
10:ec:36:0a:2d:e6:13:9a:37:9e:2c:1e:a5:93:5c:0a:6c:a1:
f8:33:86:7e:69:91:cd:d8:14:35:1d:cd:d2:d1:95:be:08:38:
2e:52:83:25:50:5e:cc:f9:bf:a8:16:ce:cd:e8:fa:55:b8:d5:
9a:88:8e:d7:7f:f6:0f:0c:76:bd:c2:54:47:03:a4:98:d3:c9:
00:24:1f:cd:be:b5:15:a5:18:7b:b4:fd:86:6a:81:09:4c:a9:
6d:28:40:2e:48:d3:bc:b9:75:8e:17:84:73:c1:33:3a:25:66:
7f:bc:ea:7c:cf:54:55:6e:1f:9f:5b:ab:53:db:2e:88:f8:15:
8e:14:17:c1:b6:a7:c9:db:e7:78:1d:e5:02:1b:bf:a2:0e:da:
33:b5:05:23:50:aa:3a:dc:95:14:cf:98:2c:50:52:04:47:72:
a9:cf:70:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:27:31 2024 by rpki-client on console-ams.rpki-client.org