Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/HH2YmgmUKmvRJn8uUzAWMu-smWE.roa
File: HH2YmgmUKmvRJn8uUzAWMu-smWE.roa (raw, json)
Hash identifier: N5TwDjnrDjf5OgMO3RILNT04PtD5nx+LXYmunFICwRQ=
Subject key identifier: 1C:7D:98:9A:09:94:2A:6B:D1:26:7F:2E:53:30:16:32:EF:AC:99:61
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 018CC4939D19973BBD9A69AB0CB8466D7AB1
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/HH2YmgmUKmvRJn8uUzAWMu-smWE.roa
Signing time: Mon 01 Jan 2024 10:30:57 +0000
ROA not before: Mon 01 Jan 2024 10:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.150.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:02:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9d:19:97:3b:bd:9a:69:ab:0c:b8:46:6d:7a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Jan 1 10:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c7d989a09942a6bd1267f2e53301632efac9961
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:39:10:dd:0a:c5:99:40:a6:29:f5:41:76:22:
fb:0a:2b:cd:1c:46:8a:64:a8:d9:a3:d0:83:9a:04:
15:ea:d2:43:82:db:cb:68:40:c9:89:21:73:07:dd:
6b:48:0b:b7:28:ae:9b:fc:76:f1:77:c0:95:c8:97:
db:e9:1f:44:e0:c8:48:57:4d:27:68:38:05:e0:f0:
32:d6:af:cb:2b:2d:a3:76:0c:22:53:ba:0f:70:5d:
8b:53:52:2a:21:37:38:4e:aa:5e:a4:79:db:68:e3:
d1:06:e9:0c:a5:05:8b:bd:d4:08:49:36:90:90:83:
e4:c6:0a:50:50:8a:d3:1a:0c:f2:bc:3c:1a:52:96:
4e:a7:d2:15:0a:53:e6:57:3d:dd:27:90:5e:3f:a6:
f7:d9:8d:7e:ba:11:88:4f:ca:3a:86:8f:58:f0:c8:
59:f1:b0:dc:2e:42:cf:72:8d:f2:cc:c8:cf:a3:d2:
6f:85:b7:e7:af:54:74:65:78:d2:45:f6:b6:e8:1d:
04:4e:4d:91:2e:fd:0a:69:c2:ce:78:ed:ff:b8:a7:
3e:c0:da:86:3a:40:aa:2e:55:57:53:e0:fb:1b:8d:
e1:91:77:fc:08:a5:45:6f:7b:7b:09:df:46:9b:b5:
79:cb:c4:42:55:13:5c:d7:51:b4:c7:92:6a:ed:fc:
72:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7D:98:9A:09:94:2A:6B:D1:26:7F:2E:53:30:16:32:EF:AC:99:61
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/HH2YmgmUKmvRJn8uUzAWMu-smWE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.179.0/24
Signature Algorithm: sha256WithRSAEncryption
57:31:7a:63:fb:75:f2:4b:ee:27:02:7e:38:d9:3a:2b:70:ce:
68:b0:c2:0f:06:04:29:a0:dc:94:8e:bd:ce:33:d0:eb:2c:02:
a9:2e:71:eb:00:bb:55:f6:08:23:73:cb:e2:bb:b3:76:67:80:
56:23:1f:43:3e:b3:e9:f0:3a:c9:9e:c6:76:9a:56:c6:89:cd:
c7:e8:49:2c:03:16:f6:a0:de:5f:85:0c:ee:40:8a:3b:4f:4b:
4d:00:cb:72:c0:d8:9f:da:6c:8a:fa:26:c2:8f:c1:51:a2:28:
91:d1:c6:a9:15:78:c8:96:45:f6:93:9b:89:56:9e:1a:c4:02:
d3:d2:78:b0:01:af:ee:bc:df:45:f1:4a:bb:a2:6b:d1:c4:3a:
d7:e9:03:11:89:3e:f0:8b:0c:75:b5:e4:6f:18:79:9a:35:78:
d6:f0:45:52:be:f0:97:08:fa:40:d0:56:3e:d7:32:8b:85:e6:
ad:af:fd:17:0a:b4:24:15:46:3f:39:36:df:af:bf:ea:50:f6:
8d:40:a7:25:ab:7f:ec:93:65:55:d7:4f:39:d7:eb:2e:8a:ca:
4a:13:bd:2a:6c:67:d9:47:bf:19:44:bc:19:ee:a5:60:07:ed:
16:9d:81:02:47:e0:65:60:86:e8:05:d7:7e:6d:4b:4f:26:8e:
3d:79:2f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 19:34:29 2024 by rpki-client on console-fra.rpki-client.org