Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/HfTuNEJei6bDygroQ8O4W5zw-0A.roa
File: HfTuNEJei6bDygroQ8O4W5zw-0A.roa (raw, json)
Hash identifier: 8U2TRCwa1I4joY5Ic1hRy9myS3oYb7X/OwTXjdwKE58=
Subject key identifier: 1D:F4:EE:34:42:5E:8B:A6:C3:CA:0A:E8:43:C3:B8:5B:9C:F0:FB:40
Certificate issuer: /CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Certificate serial: 018CC9BC1AE7BF0C44CEB04F475127849F3D
Authority key identifier: 83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/HfTuNEJei6bDygroQ8O4W5zw-0A.roa
Signing time: Tue 02 Jan 2024 10:33:17 +0000
ROA not before: Tue 02 Jan 2024 10:33:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 33915
IP address blocks: 194.53.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.mft
rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 04:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:1a:e7:bf:0c:44:ce:b0:4f:47:51:27:84:9f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ac88f0170cbfe446cfd31a5823cde0e093199a
Validity
Not Before: Jan 2 10:33:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1df4ee34425e8ba6c3ca0ae843c3b85b9cf0fb40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:da:91:85:54:8d:a5:85:fe:3b:37:35:3d:
a3:3d:31:32:4a:cc:31:f0:61:f8:f9:3d:5a:0f:d3:
10:f0:72:f1:21:0a:99:5b:5c:d7:20:ce:d5:9e:36:
48:90:49:cf:5c:1b:94:f2:6b:ae:8f:16:fc:68:0f:
0e:c2:74:04:fc:49:d8:79:b3:4d:3e:9f:ab:1c:e2:
b2:8a:b9:32:2f:00:fa:92:9b:c4:fa:46:6d:48:de:
8c:1a:82:84:fb:0d:94:8a:99:27:59:ee:8e:88:85:
ff:db:92:ee:7d:ac:1b:31:20:55:64:4d:77:4d:67:
c2:49:eb:63:ac:75:b4:01:28:36:e8:b7:79:44:73:
4f:88:13:af:8c:58:e8:9b:f7:9e:68:d6:fe:03:4a:
d0:5a:ca:83:ca:f8:3a:65:36:39:08:ab:f7:41:96:
98:ed:ff:1e:d2:76:b9:aa:1a:63:ab:fd:93:7f:c0:
e6:8b:56:26:f0:bb:43:29:6d:bb:d1:09:bd:07:10:
17:c5:f2:30:71:02:3e:69:23:57:8d:f0:89:d7:c0:
6c:87:6d:a7:6f:fc:09:c4:4e:4d:fa:8a:dc:5e:fc:
0b:64:46:94:2d:c2:ea:5d:45:84:25:31:95:f7:71:
4a:2e:a0:ac:74:1e:5c:f9:94:81:b5:11:06:bc:ed:
e4:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F4:EE:34:42:5E:8B:A6:C3:CA:0A:E8:43:C3:B8:5B:9C:F0:FB:40
X509v3 Authority Key Identifier:
keyid:83:AC:88:F0:17:0C:BF:E4:46:CF:D3:1A:58:23:CD:E0:E0:93:19:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g6yI8BcMv-RGz9MaWCPN4OCTGZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/HfTuNEJei6bDygroQ8O4W5zw-0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/ed69dc-80d7-4336-a22d-848af698d0d8/1/g6yI8BcMv-RGz9MaWCPN4OCTGZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.10.0/24
Signature Algorithm: sha256WithRSAEncryption
10:cd:2d:40:d4:86:a8:03:a6:a8:eb:12:9a:da:5e:9f:a2:83:
3a:45:3a:c5:f1:b7:67:6e:35:47:84:9c:10:68:81:66:a6:14:
7d:ac:db:f7:99:d0:e5:8e:69:e6:07:a8:e7:31:8e:90:57:ff:
fe:ea:16:44:d4:65:d9:0c:a6:fd:28:e8:98:b4:2b:b2:65:78:
19:ee:5f:21:d3:36:92:e3:79:78:5b:59:c8:3c:5f:d4:11:ef:
1e:65:8c:88:48:53:67:3d:fa:c1:71:7d:27:de:af:aa:91:5b:
44:29:2b:3a:b1:f3:de:9f:c2:fd:31:34:b0:67:fd:39:bf:aa:
95:7a:48:3e:04:95:16:1b:d3:91:81:9d:9a:0a:06:62:b1:29:
b3:6d:fd:56:34:54:9c:b3:ba:c1:27:5d:6b:d5:6a:84:c8:37:
b1:e1:04:d3:e1:fe:5b:d0:66:f8:2b:03:92:d5:ab:fe:ce:84:
51:38:bf:00:fe:78:51:51:e7:2b:75:5c:f6:1d:9e:31:bb:76:
21:dc:18:ff:98:88:59:47:cd:cd:e1:72:33:d7:e0:f0:f0:56:
23:8e:42:24:a5:c5:d9:ce:3a:12:3a:7c:a9:ee:ae:2a:39:9e:
72:4d:9f:cf:41:63:7c:ad:2d:c4:f8:f2:81:e1:c0:d2:79:e9:
62:88:29:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:54 2024 by rpki-client on console-ams.rpki-client.org