Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/HIDaT7Va1WzMfUG4Slu_GuN7Vus.roa
File: HIDaT7Va1WzMfUG4Slu_GuN7Vus.roa (raw, json)
Hash identifier: Mis1hgRvjTQHoACCV3W7aaqB7MnvYA98IP9mBNxN3G4=
Subject key identifier: 1C:80:DA:4F:B5:5A:D5:6C:CC:7D:41:B8:4A:5B:BF:1A:E3:7B:56:EB
Certificate issuer: /CN=e1e8b7cab521e88e8022a36424544185538a7b33
Certificate serial: 018CFCBEA1F319D6F2DEC60944FD99BA994A
Authority key identifier: E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/HIDaT7Va1WzMfUG4Slu_GuN7Vus.roa
Signing time: Fri 12 Jan 2024 08:16:40 +0000
ROA not before: Fri 12 Jan 2024 08:16:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56687
IP address blocks: 185.154.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.mft
rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 16:02:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:fc:be:a1:f3:19:d6:f2:de:c6:09:44:fd:99:ba:99:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e8b7cab521e88e8022a36424544185538a7b33
Validity
Not Before: Jan 12 08:16:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c80da4fb55ad56ccc7d41b84a5bbf1ae37b56eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:1b:24:54:06:73:c1:72:53:4d:68:5f:80:
75:13:ba:32:b9:b5:ce:32:0a:48:6a:02:a4:b8:89:
58:41:c9:88:05:20:7d:cc:31:88:68:77:70:64:74:
86:84:24:96:3c:14:23:88:09:26:d3:65:17:0f:91:
a1:bc:66:9a:99:a5:3b:ec:7e:a9:31:0f:ef:0b:af:
3a:ff:f2:06:f2:39:57:de:a2:c0:6f:d7:ea:77:d3:
19:1c:34:cd:8a:5b:59:f0:f3:79:11:7c:74:ac:d1:
e5:26:4d:65:7e:03:14:0a:ff:1f:93:01:08:0b:e1:
60:3e:c2:91:3f:9a:5b:11:ff:d1:9c:6b:76:de:1b:
b5:bf:f4:3b:d0:19:2c:b6:b4:e5:f4:9d:1f:13:1d:
9d:6d:db:f4:10:c5:5b:ec:e1:2e:d9:e6:4a:32:5d:
f1:55:73:07:8e:92:a6:8e:02:59:6f:51:da:ee:22:
42:2a:81:be:98:2f:e3:77:cd:fe:67:58:65:a8:db:
97:c9:14:2e:b0:9a:c6:2c:0f:a4:3b:d5:35:32:23:
6c:4f:e3:c2:b3:f0:fd:35:f5:db:7e:3c:e4:61:b7:
07:15:d9:53:a7:20:15:68:47:c2:b9:de:fe:0d:0c:
20:f9:6d:49:ab:cb:90:5d:e0:6b:39:76:f0:75:73:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:80:DA:4F:B5:5A:D5:6C:CC:7D:41:B8:4A:5B:BF:1A:E3:7B:56:EB
X509v3 Authority Key Identifier:
keyid:E1:E8:B7:CA:B5:21:E8:8E:80:22:A3:64:24:54:41:85:53:8A:7B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ei3yrUh6I6AIqNkJFRBhVOKezM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/HIDaT7Va1WzMfUG4Slu_GuN7Vus.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/14f2c5-46fe-4670-9dd6-21c58470b8d2/1/4ei3yrUh6I6AIqNkJFRBhVOKezM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.154.190.0/24
Signature Algorithm: sha256WithRSAEncryption
84:13:de:b2:d3:8c:87:74:d8:65:43:ec:48:c0:f7:8b:dc:b2:
55:dc:3e:61:39:a0:b5:79:6a:47:58:33:28:29:d3:18:a5:5c:
5f:aa:f3:d4:13:b2:fb:24:0c:71:ab:86:19:0c:b3:f3:4d:5c:
7d:e7:30:36:8a:be:56:9c:ad:cc:b4:f3:1f:a4:df:2e:ea:b5:
ed:37:14:55:22:13:e8:42:b9:3d:1d:06:18:b2:5b:8e:74:6a:
db:f5:26:ce:c2:a2:72:8c:33:7d:a6:32:fa:9f:a2:67:fe:f8:
db:9e:77:30:08:c8:60:d5:d7:38:6d:da:08:df:07:9e:38:2f:
51:fc:2f:59:19:db:5e:85:34:f9:4d:c3:b1:5e:ef:04:7a:52:
d0:18:83:48:8b:29:1f:82:8a:d5:04:6c:e4:13:e3:2f:38:f6:
e0:68:c2:4b:ca:7b:d2:d3:f5:f6:9f:79:83:a9:aa:06:dc:c3:
63:8e:74:b2:1b:f7:0b:a2:25:5a:02:1e:c5:45:e4:53:1d:1d:
69:2c:63:74:cc:fc:7b:8a:87:a2:1d:7c:f8:06:c6:13:38:91:
07:d5:5a:fb:b4:6d:45:ac:d2:a4:a9:2b:0d:b8:2d:9a:39:b9:
a7:d5:e6:76:de:3a:c9:81:18:cd:a4:1d:7c:67:ae:8a:cb:82:
18:d3:be:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:51:00 2024 by rpki-client on console-ams.rpki-client.org