Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/HdTGVqbOE9YXW52yUXuHGH7aWTE.roa
File: HdTGVqbOE9YXW52yUXuHGH7aWTE.roa (raw, json)
Hash identifier: FrFaZ2zfMLQFRbThHaQMLo3p7Ndl0ocBB0Ne4xSCWAo=
Subject key identifier: 1D:D4:C6:56:A6:CE:13:D6:17:5B:9D:B2:51:7B:87:18:7E:DA:59:31
Certificate issuer: /CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Certificate serial: 018CCA29D0E4059F38EEECC4D26C618D3877
Authority key identifier: F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/HdTGVqbOE9YXW52yUXuHGH7aWTE.roa
Signing time: Tue 02 Jan 2024 12:33:07 +0000
ROA not before: Tue 02 Jan 2024 12:33:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43754
IP address blocks: 164.215.128.0/17 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:d0:e4:05:9f:38:ee:ec:c4:d2:6c:61:8d:38:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c104041691dc384f3b1a8cdf95c96628ea6daf
Validity
Not Before: Jan 2 12:33:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dd4c656a6ce13d6175b9db2517b87187eda5931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d8:55:88:40:8c:de:43:e1:bd:de:a8:a6:b6:
6f:9a:c7:be:b3:35:28:6a:65:25:97:84:da:fc:a5:
ff:8c:87:4f:6b:33:7b:84:29:67:98:74:0a:f7:03:
8a:38:fb:f1:01:f1:22:55:81:d7:56:95:85:b4:ac:
ec:1c:45:7e:c0:8a:ef:2d:5b:c5:d0:d6:2c:0f:0d:
66:3f:8c:63:65:05:e6:51:3e:b9:2c:42:94:1e:b7:
f4:d7:59:15:f0:a2:20:57:ce:7e:73:02:c4:de:95:
a3:47:e7:28:2e:ba:d0:78:d7:c1:8c:aa:2f:78:ff:
d3:4a:71:a1:6f:d5:05:af:43:1a:4b:f1:3a:28:88:
39:b5:60:77:17:51:a3:61:c4:77:19:a9:a6:18:49:
a3:25:d9:08:45:e8:a0:d2:a5:26:e5:4d:76:8d:ac:
be:00:6d:5b:de:b8:79:f7:1a:69:09:83:f7:34:1c:
73:1e:24:c5:19:5c:64:2f:0a:aa:a7:e4:58:1e:56:
51:06:2a:e5:8e:92:81:ad:7d:3b:d0:74:c1:ab:29:
84:1f:12:c5:a8:72:0d:b4:9a:62:66:13:36:b1:fb:
f5:d5:95:c5:44:3e:b6:00:ee:82:6b:7b:42:b9:c7:
24:6b:69:86:95:bb:02:17:a0:b6:9b:28:78:8c:7f:
a0:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D4:C6:56:A6:CE:13:D6:17:5B:9D:B2:51:7B:87:18:7E:DA:59:31
X509v3 Authority Key Identifier:
keyid:F0:C1:04:04:16:91:DC:38:4F:3B:1A:8C:DF:95:C9:66:28:EA:6D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MEEBBaR3DhPOxqM35XJZijqba8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/HdTGVqbOE9YXW52yUXuHGH7aWTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/789caf-c8d2-419e-ae04-691422311729/1/8MEEBBaR3DhPOxqM35XJZijqba8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
164.215.128.0/17
Signature Algorithm: sha256WithRSAEncryption
45:96:5f:c0:b1:bb:5c:23:75:da:59:80:7c:dd:c4:00:1b:58:
a2:71:86:19:ef:7d:b1:95:17:69:7c:ad:eb:55:83:f7:18:67:
57:83:ab:72:b2:03:19:ef:cb:6a:fb:82:e2:75:08:58:82:6f:
34:1c:cf:1c:12:4f:92:8d:f3:57:dd:d6:f0:6d:2a:aa:39:91:
37:2f:b2:04:43:a4:a2:78:40:9b:fc:80:aa:01:f7:7b:6d:be:
43:1b:91:ca:cd:f0:ab:d5:56:7f:2e:c8:2d:d5:c2:ae:e4:67:
f3:1e:78:a8:d5:11:c0:f6:8c:46:00:1c:2c:2e:ad:9b:23:3b:
4a:0a:87:09:2b:d5:75:d4:92:31:c9:54:06:4e:e0:6a:b7:91:
cd:ba:49:8e:28:96:80:87:90:c0:ad:f0:45:a0:63:17:2a:b5:
6e:5b:f4:d7:00:c0:88:fc:60:65:94:86:ba:1f:a1:a5:5f:b0:
7c:0a:a8:14:b5:6f:dc:c7:87:ab:7c:3f:0c:55:ab:b5:ac:d1:
3b:64:0d:46:42:3f:75:ac:1f:3c:34:57:2a:9a:86:9f:29:c8:
1d:6c:07:2d:a6:0d:6a:e3:4f:90:4d:a4:45:89:ae:a3:1d:bd:
ab:31:4f:33:c6:e6:9b:76:57:85:c0:c6:8a:55:d0:01:a4:05:
6c:c8:5d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 29 09:02:19 2024 by rpki-client on console-ams.rpki-client.org