Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/hoCikfzuk1ntuS4UhCVVwxbqnC4.roa
File: hoCikfzuk1ntuS4UhCVVwxbqnC4.roa (raw, json)
Hash identifier: sVaJQbL0MiOFbQmZRyNFlGBazs3dvBegUrTD77GhNDQ=
Subject key identifier: 86:80:A2:91:FC:EE:93:59:ED:B9:2E:14:84:25:55:C3:16:EA:9C:2E
Certificate issuer: /CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Certificate serial: 018CC87128416459F75AD5C3A629D88D8F84
Authority key identifier: 94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/hoCikfzuk1ntuS4UhCVVwxbqnC4.roa
Signing time: Tue 02 Jan 2024 04:31:48 +0000
ROA not before: Tue 02 Jan 2024 04:31:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47469
IP address blocks: 194.50.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.mft
rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:71:28:41:64:59:f7:5a:d5:c3:a6:29:d8:8d:8f:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94942e9b35d91906d11245d73bd58cdd8eca49d1
Validity
Not Before: Jan 2 04:31:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8680a291fcee9359edb92e14842555c316ea9c2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ec:fb:3f:c5:ea:59:4c:6c:8c:4f:2c:e6:f9:
6e:33:e5:bc:ee:1e:c3:7f:67:b7:66:24:b4:ad:f6:
7a:72:8e:db:ea:0e:57:1d:2a:a8:3d:bc:bf:0c:0f:
7c:59:5c:c4:ac:3a:37:5d:6f:52:88:ed:2a:b3:4d:
25:83:e7:cd:ab:80:a6:b2:c8:8f:94:5b:b6:70:42:
38:87:91:03:15:20:ca:92:d1:e2:60:09:21:cf:54:
76:26:b7:b6:a7:4f:bf:7f:88:14:dd:ba:db:a6:62:
41:5e:44:08:6b:dc:4c:46:70:ff:a0:f0:3d:e7:f8:
45:aa:4b:b5:1b:af:d6:3f:c1:df:87:22:e9:71:e9:
8a:84:90:b3:99:61:78:de:5a:07:3f:fa:51:59:b5:
90:5e:78:be:96:3b:90:36:c5:c1:53:56:8a:d8:8d:
19:af:84:72:8c:38:5d:1c:ed:88:78:4c:70:2f:db:
0b:d0:7f:5e:97:b3:44:a5:81:58:b1:fa:0d:f2:8e:
df:3f:66:90:26:01:61:85:98:85:46:6c:48:25:a5:
4d:f7:25:b0:cd:dd:f4:fc:02:0b:9a:80:b7:e8:6d:
61:e1:b5:6f:42:6d:c3:e2:83:5f:96:bb:58:4d:88:
91:ea:3d:3f:5f:cc:29:84:d2:fb:03:03:8b:53:65:
4e:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:80:A2:91:FC:EE:93:59:ED:B9:2E:14:84:25:55:C3:16:EA:9C:2E
X509v3 Authority Key Identifier:
keyid:94:94:2E:9B:35:D9:19:06:D1:12:45:D7:3B:D5:8C:DD:8E:CA:49:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lJQumzXZGQbREkXXO9WM3Y7KSdE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/hoCikfzuk1ntuS4UhCVVwxbqnC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/c60980-a1de-4390-a0a3-32c20caf08ed/1/lJQumzXZGQbREkXXO9WM3Y7KSdE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.50.45.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:c2:03:95:b1:0a:62:ac:b5:52:42:c5:e2:7f:c6:20:4f:7c:
cf:b1:8d:10:f5:6f:f6:82:3f:75:11:9a:09:e0:4c:10:a6:49:
f0:d2:89:88:93:7d:a9:4e:94:d7:ab:4b:c2:31:36:da:49:5d:
f9:cb:0e:1d:92:ff:b0:6a:a2:b6:f1:76:25:00:9d:5c:c4:35:
c4:ae:96:b6:35:e7:2a:be:42:bf:9d:02:bd:37:29:d0:08:e6:
3a:70:99:36:41:6b:03:5d:15:91:f4:e3:57:94:1a:98:76:42:
04:62:ba:cd:37:36:ba:9a:23:d8:96:0d:69:ea:eb:2a:95:fc:
66:74:ee:db:8a:04:f3:ba:7b:58:76:ea:60:28:8c:21:27:ab:
0b:26:fd:c7:ac:b2:a6:fd:2e:cf:a0:b2:3d:8d:77:b7:f8:7c:
0d:f2:94:5e:f9:10:4e:91:29:6b:3a:4a:ad:26:91:36:de:d1:
b7:c6:28:55:e5:4b:7e:8d:50:b0:6f:5d:b7:d6:f7:a6:11:5f:
3b:45:7a:f5:96:f6:87:06:89:89:78:2b:38:ab:56:ed:3d:eb:
ce:08:ce:ce:1e:89:2c:27:9b:2b:8c:67:c5:7a:42:ef:85:3b:
07:63:a7:db:97:ce:ff:f3:7a:dd:22:b1:05:5d:f9:07:00:b9:
6b:8a:df:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 18:47:30 2024 by rpki-client on console-fra.rpki-client.org