Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/hngjTZ6cXLXkXlnxPKHBbXR3-JY.roa
File: hngjTZ6cXLXkXlnxPKHBbXR3-JY.roa (raw, json)
Hash identifier: HeVk+dbYtuXEZg3c6Z9bxxZTpKOIaVL4f1N2Xi2c/QI=
Subject key identifier: 86:78:23:4D:9E:9C:5C:B5:E4:5E:59:F1:3C:A1:C1:6D:74:77:F8:96
Certificate issuer: /CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Certificate serial: 018CC94E560DA0CDA0CE6A9677F0360242A0
Authority key identifier: 91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/hngjTZ6cXLXkXlnxPKHBbXR3-JY.roa
Signing time: Tue 02 Jan 2024 08:33:23 +0000
ROA not before: Tue 02 Jan 2024 08:33:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15822
IP address blocks: 194.176.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.mft
rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:56:0d:a0:cd:a0:ce:6a:96:77:f0:36:02:42:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91045c57996c9a3c9e6277a4326b1183215d5b6a
Validity
Not Before: Jan 2 08:33:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8678234d9e9c5cb5e45e59f13ca1c16d7477f896
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1d:15:ac:87:51:76:7e:57:0d:a9:82:30:59:
1a:ab:68:77:8c:45:27:56:32:75:8b:4c:c3:2a:d9:
af:8b:73:ad:fc:3e:5e:3a:f5:e8:2f:48:cc:2d:b0:
aa:0b:bd:cf:6e:3e:70:15:01:32:ff:50:01:1c:b6:
3f:cd:70:53:87:f5:4a:66:1d:d6:43:fd:a4:12:fc:
fe:04:aa:e7:44:23:4f:2e:86:75:63:d1:0b:dc:33:
97:e5:c8:c8:a2:dc:6e:f9:2a:47:79:33:77:24:22:
fb:4a:60:cc:45:d3:30:14:6f:2d:f2:0e:6e:24:76:
fd:df:60:f4:d9:cc:de:4b:48:61:ef:d5:a6:d1:99:
06:7a:e8:ac:05:ef:ee:2f:2e:c5:8f:5e:55:d4:7f:
c6:34:3c:30:a6:74:e8:fd:d5:be:02:3b:5f:aa:d4:
a2:6e:e0:06:f0:ae:34:6e:b9:2c:12:da:1e:7a:e6:
c7:6a:2c:db:c0:6d:7a:0f:d2:0a:79:9f:94:66:b0:
33:ea:76:9e:db:9f:eb:8c:c5:1d:39:dc:c3:19:a2:
c7:e4:4a:90:5f:0f:6f:f6:e1:c7:07:1b:d3:a8:85:
99:42:1a:80:65:da:ae:d7:c5:c9:23:8d:5a:46:37:
89:9f:7d:3d:c8:2b:90:21:d7:1c:21:49:18:de:8e:
33:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:78:23:4D:9E:9C:5C:B5:E4:5E:59:F1:3C:A1:C1:6D:74:77:F8:96
X509v3 Authority Key Identifier:
keyid:91:04:5C:57:99:6C:9A:3C:9E:62:77:A4:32:6B:11:83:21:5D:5B:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kQRcV5lsmjyeYnekMmsRgyFdW2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/hngjTZ6cXLXkXlnxPKHBbXR3-JY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5fa681-2566-40ee-9f04-5df44295b4c9/1/kQRcV5lsmjyeYnekMmsRgyFdW2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.112.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8a:77:ee:dd:2f:e2:0e:2e:dc:ca:a9:10:1d:60:77:07:b5:
09:34:e2:d3:59:2b:00:0c:a1:ab:96:2a:19:2a:ae:8b:89:d0:
3c:66:ae:c0:d9:79:21:69:bf:ed:ef:8d:9b:56:90:dd:c1:96:
b6:d2:70:f3:8b:96:0b:57:89:83:d7:31:28:c8:a6:09:8f:d3:
73:32:d3:bd:50:f6:bd:16:3f:b6:c5:7c:7c:67:87:82:c6:56:
a7:97:ce:6a:68:6f:9e:86:79:60:90:cd:3c:42:e3:cd:95:19:
9b:d6:fe:c7:51:79:1a:9a:ef:c1:4b:d5:a3:91:e3:fc:2c:20:
b4:c0:19:e6:58:d9:11:9e:85:f9:75:0b:5c:a4:56:d8:df:b9:
d1:ae:5f:55:19:43:19:c5:7f:a2:e9:cd:c9:28:1c:cd:71:18:
7a:ce:67:f8:c6:3b:26:c4:5f:09:af:6e:71:eb:b2:6a:6e:ac:
27:40:e2:e3:4e:9f:b8:19:d0:df:bc:8f:18:99:dd:32:95:2d:
58:bd:fb:69:c2:e7:5f:c7:14:6a:7a:1f:62:0f:2a:36:80:7f:
ad:fb:af:ef:7e:6c:44:4a:90:aa:2c:a7:e2:b9:a3:61:90:14:
ee:7b:55:11:62:7e:e1:c3:15:84:c1:08:4b:61:33:91:cc:3b:
83:59:7f:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:36:48 2024 by rpki-client on console-ams.rpki-client.org