Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/hECmxucUbPqe4qiC0xkFSCxdhZ8.roa
File: hECmxucUbPqe4qiC0xkFSCxdhZ8.roa (raw, json)
Hash identifier: t1dstIMGmIPBzLLOXHovOQfkhaop72ysbvEVRS/UU5U=
Subject key identifier: 84:40:A6:C6:E7:14:6C:FA:9E:E2:A8:82:D3:19:05:48:2C:5D:85:9F
Certificate issuer: /CN=8b054485ee62c6f1939613cba20669eef4504f79
Certificate serial: 018CC56EEF18EF0D97E7678AE6D5A6F9FCBB
Authority key identifier: 8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/hECmxucUbPqe4qiC0xkFSCxdhZ8.roa
Signing time: Mon 01 Jan 2024 14:30:30 +0000
ROA not before: Mon 01 Jan 2024 14:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59908
IP address blocks: 141.170.208.0/21 maxlen: 24
141.170.214.0/24 maxlen: 24
185.67.112.0/22 maxlen: 24
2a00:a3a0::/32 maxlen: 96
2a03:2460::/32 maxlen: 96
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ef:18:ef:0d:97:e7:67:8a:e6:d5:a6:f9:fc:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b054485ee62c6f1939613cba20669eef4504f79
Validity
Not Before: Jan 1 14:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8440a6c6e7146cfa9ee2a882d31905482c5d859f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:1c:ed:d7:6e:cb:df:74:d1:76:5c:a7:a9:e8:
b1:14:e7:e8:48:9e:70:d3:f4:e4:aa:33:73:ba:ee:
9b:c4:16:67:d3:4a:07:fe:e7:d7:4a:26:6c:c0:1d:
e3:97:df:d3:d4:8e:8c:bf:83:33:75:a2:3d:65:fd:
04:10:fd:f5:67:ff:aa:66:1d:08:87:16:56:5e:16:
50:4b:8b:da:55:0a:9c:c5:ec:80:44:ab:d3:52:a5:
e1:32:c9:50:96:1f:84:a0:cf:91:87:1e:58:35:e4:
16:ea:b9:38:81:9b:1e:ac:4c:12:61:2f:b1:7e:f0:
1e:c2:49:c6:cd:01:c3:2b:7d:d4:43:6a:ec:1a:7c:
10:4b:e5:12:dd:0c:b3:7a:10:4f:05:5f:dc:f8:8f:
c8:41:79:2e:46:4b:9d:ed:e4:ce:db:3a:58:e3:80:
f2:ef:b4:6e:6f:3e:c9:0d:0d:85:fc:bc:bf:7c:61:
04:d5:d5:39:ae:22:bc:a6:f2:1e:a2:3c:2b:77:85:
74:74:0a:9b:50:58:f1:28:7c:d4:73:f1:5e:81:34:
4b:42:22:cc:6f:02:83:9a:fe:68:84:66:e2:88:98:
2e:32:3e:c5:55:4f:4a:7f:2d:3e:39:5b:40:12:b3:
64:d3:a8:87:1f:2a:5e:c6:a2:8f:af:a9:28:28:7f:
9e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:40:A6:C6:E7:14:6C:FA:9E:E2:A8:82:D3:19:05:48:2C:5D:85:9F
X509v3 Authority Key Identifier:
keyid:8B:05:44:85:EE:62:C6:F1:93:96:13:CB:A2:06:69:EE:F4:50:4F:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iwVEhe5ixvGTlhPLogZp7vRQT3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/hECmxucUbPqe4qiC0xkFSCxdhZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/779c09-f49a-4b38-a778-6bc390995cab/1/iwVEhe5ixvGTlhPLogZp7vRQT3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.170.208.0/21
185.67.112.0/22
IPv6:
2a00:a3a0::/32
2a03:2460::/32
Signature Algorithm: sha256WithRSAEncryption
9b:e8:e0:fd:90:0c:d2:cc:b3:22:0f:4c:9d:0d:b6:af:3c:2a:
48:09:c7:ca:64:0e:3b:30:78:04:74:39:b5:ae:14:e2:a5:c9:
13:a4:cf:25:69:ee:5b:d7:ff:19:e4:ee:82:6e:08:b5:18:4e:
82:d7:7b:05:98:30:0a:89:ce:23:bf:14:ce:d4:db:09:cd:1a:
74:f6:48:39:20:71:5a:0c:81:25:c6:7a:ed:0c:e4:b0:c4:29:
23:f1:2d:de:63:c9:a2:3d:f3:8f:f0:10:e6:16:0b:61:9c:11:
36:ba:0d:b6:d9:a0:4c:12:5e:a0:b0:34:b7:92:6b:a5:7f:fb:
38:37:65:c5:27:af:f4:51:ce:bd:e4:3a:f1:8a:c5:87:ca:a3:
c4:fa:49:24:ff:5e:e3:74:ab:a3:65:fd:1b:26:b4:49:f2:cd:
34:47:d8:50:3a:71:99:ea:5b:b5:c8:4f:2e:42:1f:88:a0:38:
60:0b:54:be:69:8f:4f:c4:d3:3a:60:76:b7:c1:f5:16:36:02:
f3:92:98:22:55:c6:2b:69:d4:22:68:08:e2:6e:34:30:c8:14:
67:92:cf:fe:9c:f5:80:93:dc:ac:7e:9d:2e:00:bb:06:8f:6b:
65:a4:ce:e2:54:3f:96:a9:04:b8:59:5b:cf:2e:7c:d9:88:43:
8d:4e:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 16:40:45 2024 by rpki-client on console-fra.rpki-client.org