Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/hnVgoUJc8xUvTr9bFB-ULpLYTkw.roa
File: hnVgoUJc8xUvTr9bFB-ULpLYTkw.roa (raw, json)
Hash identifier: pVHCldhU3zg4Ogzn6onlOTM3SFC90nX67fU8YKk8BIA=
Subject key identifier: 86:75:60:A1:42:5C:F3:15:2F:4E:BF:5B:14:1F:94:2E:92:D8:4E:4C
Certificate issuer: /CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Certificate serial: 018CC4939CA95954B35F56CB84E0A35DAC60
Authority key identifier: 20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/hnVgoUJc8xUvTr9bFB-ULpLYTkw.roa
Signing time: Mon 01 Jan 2024 10:30:57 +0000
ROA not before: Mon 01 Jan 2024 10:30:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 185.150.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 22:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:9c:a9:59:54:b3:5f:56:cb:84:e0:a3:5d:ac:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20c0b9b33dce5eba0aea6489158d3fb27022ace7
Validity
Not Before: Jan 1 10:30:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=867560a1425cf3152f4ebf5b141f942e92d84e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:31:4d:01:6d:41:f7:75:6d:d0:59:be:5e:b6:
7f:b0:af:dc:7e:50:94:ee:ee:c8:49:06:08:b7:e0:
f7:31:7b:09:ba:0c:1a:a8:03:36:db:fa:32:5b:48:
f7:ef:61:0a:1f:7d:a5:77:ec:1a:ec:e8:00:ee:1c:
8a:a2:37:90:ac:3d:5a:9d:37:1c:81:9e:fb:69:eb:
bb:92:70:4b:36:a5:84:fa:51:e5:2d:af:9e:2c:00:
f8:d3:a0:6d:9b:bd:eb:d8:3b:35:16:4b:b9:e6:ad:
2b:3e:95:03:82:20:33:c0:5d:b1:41:11:bb:b2:d4:
ed:50:1d:b6:cc:c7:85:65:25:05:e0:bb:88:03:ac:
be:4e:1a:b7:7a:b4:65:79:de:ff:df:08:0a:0a:19:
82:e3:2c:59:4e:5d:47:d3:be:c3:fe:1f:ed:44:81:
75:40:64:b0:69:e0:2f:82:88:f3:4c:4e:69:df:07:
c0:75:64:d2:96:9a:12:7e:06:86:2c:0c:4a:6a:14:
43:6c:7c:00:87:fb:dc:b1:43:28:08:e2:cf:84:aa:
5d:fe:43:8d:62:39:b0:dc:ff:8d:c2:2b:b6:fd:28:
7b:c0:83:b9:2a:9c:44:0d:12:59:5a:fe:51:fb:fe:
70:e5:38:da:b7:68:bb:ab:45:93:b9:1d:90:cd:12:
04:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:75:60:A1:42:5C:F3:15:2F:4E:BF:5B:14:1F:94:2E:92:D8:4E:4C
X509v3 Authority Key Identifier:
keyid:20:C0:B9:B3:3D:CE:5E:BA:0A:EA:64:89:15:8D:3F:B2:70:22:AC:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IMC5sz3OXroK6mSJFY0_snAirOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/hnVgoUJc8xUvTr9bFB-ULpLYTkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/20bb49-e509-4c7b-8e5a-8d3dcc33ad0a/1/IMC5sz3OXroK6mSJFY0_snAirOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.179.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:32:e3:f9:48:de:f7:e5:ad:9d:63:7b:fd:3a:c1:66:32:c9:
8a:46:5b:86:c3:01:83:90:42:b6:f1:11:a6:c0:ba:17:f2:ef:
db:35:7c:b9:7e:31:b1:e9:ad:5b:2d:55:30:ac:58:a4:e1:3f:
a6:b1:d0:18:22:4c:05:2f:2b:5b:29:29:8b:d3:4b:aa:dd:f5:
10:fe:37:48:74:3f:d4:89:61:58:8b:44:6e:b7:c0:6b:32:bb:
12:db:b9:1b:35:04:1e:0c:81:f6:b3:b9:86:e3:e1:c6:6a:15:
bf:b6:2a:51:d9:3b:b8:18:34:a9:60:84:d5:55:38:79:6a:0f:
b9:55:56:38:7a:01:77:ac:7b:f6:6b:91:3d:98:99:39:74:38:
58:59:50:4c:8d:f5:21:76:40:b5:71:d1:6c:5e:cc:9e:af:cc:
5c:8d:d0:04:33:c2:3a:bf:77:86:33:ea:7f:67:dd:f7:1b:46:
0e:3a:06:eb:16:a8:a2:4a:bc:83:27:fa:66:0b:05:cd:c2:c0:
98:80:e7:9e:eb:63:d4:b0:2e:e5:e5:c0:fd:d4:b9:a6:c0:18:
59:87:24:6b:c5:2b:1b:fd:d4:04:86:b8:40:26:95:cf:29:c0:
c8:41:54:ad:aa:7f:91:65:c3:61:12:89:31:42:cf:8b:b4:12:
46:65:b8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 02:06:38 2024 by rpki-client on console-ams.rpki-client.org