Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hFeCwnETHSXrVwlFav45yuRDlfw.roa
File: hFeCwnETHSXrVwlFav45yuRDlfw.roa (raw, json)
Hash identifier: DYOm8vkA80r3gaL0jognWSf3Q6qeQZjPmb2x4qsCcXI=
Subject key identifier: 84:57:82:C2:71:13:1D:25:EB:57:09:45:6A:FE:39:CA:E4:43:95:FC
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 019096B3CE5A00FCF244FF897A8AEE1D9E47
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hFeCwnETHSXrVwlFav45yuRDlfw.roa
Signing time: Tue 09 Jul 2024 08:54:44 +0000
ROA not before: Tue 09 Jul 2024 08:54:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211353
IP address blocks: 193.182.243.0/24 maxlen: 24
193.182.244.0/24 maxlen: 24
193.183.85.0/24 maxlen: 24
194.14.27.0/24 maxlen: 24
194.103.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 11:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:96:b3:ce:5a:00:fc:f2:44:ff:89:7a:8a:ee:1d:9e:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jul 9 08:54:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=845782c271131d25eb5709456afe39cae44395fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b7:ea:ba:1d:dd:fd:5a:25:87:b8:0e:f6:b2:
b3:35:55:90:f6:1a:72:79:b8:6a:34:2f:45:f7:29:
ea:bc:b7:57:2d:77:fe:25:60:b0:3d:1c:f1:fc:98:
77:93:d1:4c:d9:9f:0a:aa:a9:a1:d2:af:e4:fb:23:
ba:af:16:32:54:12:08:c2:41:8c:d9:bc:ce:a8:d0:
9f:b7:87:8a:4f:ce:50:2a:a4:e0:6c:69:15:be:ac:
46:a8:07:41:ab:9a:d7:17:dc:c2:d9:06:32:e1:95:
f5:45:fd:35:8b:a0:97:d5:66:9a:a6:9c:db:ed:ba:
67:44:71:8b:db:e9:58:08:b0:dc:fb:56:cc:ef:d9:
8f:23:29:e1:b7:4e:03:16:a2:e6:c6:bf:58:25:b8:
3e:63:7a:41:a9:9e:d1:17:17:f7:bd:bb:f6:60:e9:
2c:3e:05:f1:a7:34:a2:f4:85:17:a5:15:e0:9f:be:
03:86:91:04:06:3f:78:75:0d:32:2d:7f:42:10:c6:
24:e0:53:85:a9:fe:9f:76:7c:1a:d3:e6:b4:78:0f:
fe:da:57:02:07:fb:ee:c0:fa:7c:4d:af:80:8f:3d:
ff:8a:7b:40:da:c9:0f:dd:29:d1:0f:5b:d2:ef:6e:
39:5a:2f:c7:a1:4a:d8:cc:5e:48:35:c2:9e:93:3e:
51:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:57:82:C2:71:13:1D:25:EB:57:09:45:6A:FE:39:CA:E4:43:95:FC
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/hFeCwnETHSXrVwlFav45yuRDlfw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.182.243.0-193.182.244.255
193.183.85.0/24
194.14.27.0/24
194.103.46.0/24
Signature Algorithm: sha256WithRSAEncryption
b9:88:1a:09:be:b3:28:43:22:40:25:10:2b:a0:d4:90:2e:8c:
c1:a7:4d:06:3e:f4:15:90:2b:2f:38:cb:82:70:2a:de:28:74:
63:0f:2e:c2:7d:79:2c:ea:e1:43:88:73:03:34:7d:df:e6:92:
51:10:80:fe:04:4a:2e:e9:58:1e:66:0e:bd:25:0f:e2:03:b8:
38:3b:fa:d4:60:2c:78:5a:64:2c:9c:d5:ab:23:80:72:05:54:
eb:bf:d6:57:f9:2f:48:a3:8b:96:46:1c:46:59:c6:cb:d5:c7:
17:6a:0a:7d:60:7c:7e:9f:eb:f2:6b:cb:d0:fb:1f:de:13:35:
c0:f7:92:f6:07:6c:59:45:65:7f:6f:57:0b:b0:15:88:23:9c:
a2:ad:09:4a:0e:2f:7e:24:c5:11:d0:3d:ea:1b:c6:c4:f9:a2:
19:0f:1e:1f:31:4b:73:0a:5b:16:9d:47:cb:88:39:45:55:80:
97:04:db:09:dc:ab:16:d6:13:7f:cb:e4:b0:ec:35:20:db:52:
0e:2a:a1:8f:5f:94:05:8b:5b:20:be:33:ea:76:37:c8:b2:c4:
fb:19:62:9a:81:86:c5:56:99:60:c9:cf:21:f1:b9:2f:83:81:
66:23:e5:67:85:4f:58:33:60:6a:89:8f:72:37:e9:c0:9b:a0:
8f:f2:ab:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:31:19 2024 by rpki-client on console-fra.rpki-client.org