Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/8Hnezf0rm-yvpz3-3Cuza7Mfv4A.roa
File: 8Hnezf0rm-yvpz3-3Cuza7Mfv4A.roa (raw, json)
Hash identifier: XOZg9i9cvutMo7i3KxSpiQoUM5MLiQeZhQfOKRf6clc=
Subject key identifier: F0:79:DE:CD:FD:2B:9B:EC:AF:A7:3D:FE:DC:2B:B3:6B:B3:1F:BF:80
Certificate issuer: /CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Certificate serial: 018CC2DB3DCC240BF3B381ACF69A5FAF6811
Authority key identifier: E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/8Hnezf0rm-yvpz3-3Cuza7Mfv4A.roa
Signing time: Mon 01 Jan 2024 02:29:57 +0000
ROA not before: Mon 01 Jan 2024 02:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41114
IP address blocks: 176.111.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 14:15:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:3d:cc:24:0b:f3:b3:81:ac:f6:9a:5f:af:68:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e47ee5bee3ed23f943761e58f0eea97c7c5bf87c
Validity
Not Before: Jan 1 02:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f079decdfd2b9becafa73dfedc2bb36bb31fbf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cf:e4:6e:a2:43:4c:cb:21:f9:44:bd:e7:06:
bc:25:ce:33:a0:38:16:df:b9:da:6e:12:b3:68:1a:
f9:aa:de:14:55:d1:3b:3b:07:17:33:73:55:06:33:
37:1d:a3:05:d0:e9:38:58:4e:6b:aa:cb:69:3c:d3:
4e:2c:3e:b8:6d:00:93:76:a1:60:34:e2:1f:7f:92:
11:5d:ee:5d:a0:31:cc:78:c0:e7:72:23:75:fe:1b:
98:b7:e5:59:e2:29:8a:6e:b4:22:b4:f0:8b:f6:e9:
5b:19:e6:3a:82:9d:37:fc:e3:79:99:74:bc:84:7a:
41:5c:93:63:29:53:2e:c9:aa:94:9f:d1:57:89:7b:
b9:32:e4:dd:4e:05:54:20:2b:45:23:13:f0:52:12:
db:3c:3e:dc:21:83:94:55:ba:0a:1e:86:c6:5a:d8:
d4:21:d6:c6:ed:73:9c:6f:c2:07:74:35:db:26:d2:
18:67:d4:ef:8b:06:5f:20:26:b9:07:81:3b:fd:cc:
34:82:d4:9e:24:64:41:89:b6:84:8a:40:bd:e5:1d:
f0:a2:c8:07:c8:88:6b:aa:c2:d8:e6:13:12:b6:f3:
3d:87:a5:0c:19:e2:c3:86:b5:93:75:f1:aa:3d:6f:
f4:e2:cb:23:39:8b:98:71:fd:e4:df:67:ab:69:f6:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:79:DE:CD:FD:2B:9B:EC:AF:A7:3D:FE:DC:2B:B3:6B:B3:1F:BF:80
X509v3 Authority Key Identifier:
keyid:E4:7E:E5:BE:E3:ED:23:F9:43:76:1E:58:F0:EE:A9:7C:7C:5B:F8:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/8Hnezf0rm-yvpz3-3Cuza7Mfv4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/5ea2ff-8d66-4a11-93f8-2e2908588865/1/5H7lvuPtI_lDdh5Y8O6pfHxb-Hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.240.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:15:34:21:a2:4b:bc:db:f6:4e:2b:d0:23:67:37:8b:ab:6c:
b5:56:bc:e5:dc:ec:16:a0:15:27:e6:42:13:7d:97:a5:82:6a:
5b:6f:e7:dd:80:f5:d3:b3:3d:2f:db:18:45:98:53:28:2c:8b:
63:e5:95:53:3b:85:34:02:4e:82:e4:99:99:36:e4:31:e1:56:
d3:72:c5:97:fd:82:4b:c0:ab:86:b0:89:7a:19:6d:ca:73:8b:
42:69:90:0f:94:8e:7d:8a:47:20:2e:b3:46:bd:65:09:13:08:
57:8d:6e:08:e2:e0:22:6e:20:0b:2e:da:bd:66:9e:1a:b7:b8:
77:65:a3:7f:a2:00:60:81:5c:4c:05:3b:c0:12:d1:4d:6f:9b:
e3:f9:ef:ab:ae:a4:df:7c:f6:d3:4e:b5:89:98:51:55:13:da:
b3:2d:ab:74:16:2b:fc:92:73:59:a7:0a:fb:43:11:d3:91:ff:
26:71:28:c6:b2:01:39:c6:fb:f9:ba:8c:de:56:c7:bb:87:7e:
27:b5:02:8d:16:3f:94:ce:1b:0a:82:f3:c5:38:c2:46:16:ac:
e6:c8:b0:28:37:5a:d5:9e:09:11:5e:42:1c:22:8a:38:e7:35:
46:e4:9f:73:b7:fc:32:dc:bc:7a:2a:96:2c:6d:71:cc:46:82:
3b:0b:a4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 00:56:21 2024 by rpki-client on console-ams.rpki-client.org