Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/hspmLz5tvowxE5hxYMM-CxydTI8.roa
File: hspmLz5tvowxE5hxYMM-CxydTI8.roa (raw, json)
Hash identifier: WkFWyHHMsAbFf8Ft4EN6uvvZ9wVXWHQo8Q+9lC7K4H4=
Subject key identifier: 86:CA:66:2F:3E:6D:BE:8C:31:13:98:71:60:C3:3E:0B:1C:9D:4C:8F
Certificate issuer: /CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Certificate serial: 018CC80255C1E29822A38389D45CCB4816F8
Authority key identifier: 82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/hspmLz5tvowxE5hxYMM-CxydTI8.roa
Signing time: Tue 02 Jan 2024 02:30:45 +0000
ROA not before: Tue 02 Jan 2024 02:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6453
IP address blocks: 92.43.168.0/24 maxlen: 24
92.43.168.0/23 maxlen: 23
92.43.169.0/24 maxlen: 24
92.43.172.0/24 maxlen: 24
92.43.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 07:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:02:55:c1:e2:98:22:a3:83:89:d4:5c:cb:48:16:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d7fe7312efb42bd8d1ecd82ac76191ea26c356
Validity
Not Before: Jan 2 02:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86ca662f3e6dbe8c3113987160c33e0b1c9d4c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5b:5b:68:04:ae:ea:60:06:91:21:e4:79:dd:
8f:bc:72:ed:fd:3b:a3:24:da:28:86:5e:4f:0c:69:
bf:4e:ad:d6:18:3c:44:38:7c:95:82:b5:0a:cc:e2:
39:0b:a3:d7:d0:11:5a:47:68:49:4e:98:5a:3f:e4:
76:8a:39:0d:b4:f6:19:e3:e9:39:24:a9:c4:7e:9a:
65:6b:1a:04:1c:71:b2:83:0a:24:3b:00:62:82:72:
10:69:19:9f:e6:86:df:f0:1b:a4:f8:09:6f:24:c4:
43:cc:0b:21:23:cb:68:7b:0c:e3:06:c5:41:f4:95:
d2:64:3b:6e:2c:0d:2e:58:87:63:b1:9c:f0:33:dc:
5e:0c:30:1c:18:7e:62:d2:cc:e5:8c:6e:c5:c4:62:
ab:49:a5:48:ca:c4:2b:c2:fa:8c:40:ea:41:63:f8:
f2:3f:a2:19:50:49:36:08:d5:2f:a7:0e:3b:1f:92:
04:e4:63:3b:b4:6f:23:63:e0:f1:61:b7:9c:40:40:
c2:85:12:36:7f:9a:0c:2d:d8:33:31:50:e3:3a:10:
e1:a5:f5:60:69:cb:e3:bd:0f:43:b1:a9:10:a2:67:
80:4d:e9:7d:ba:a9:cf:f1:4f:d3:92:ab:55:5b:9d:
33:26:26:e1:d3:0f:d1:9f:af:e1:c3:49:3e:b0:26:
a7:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:CA:66:2F:3E:6D:BE:8C:31:13:98:71:60:C3:3E:0B:1C:9D:4C:8F
X509v3 Authority Key Identifier:
keyid:82:D7:FE:73:12:EF:B4:2B:D8:D1:EC:D8:2A:C7:61:91:EA:26:C3:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtf-cxLvtCvY0ezYKsdhkeomw1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/hspmLz5tvowxE5hxYMM-CxydTI8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/05d8ba-9433-4a2e-bfe6-37b21bab3b00/1/gtf-cxLvtCvY0ezYKsdhkeomw1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.43.168.0/23
92.43.171.0-92.43.172.255
Signature Algorithm: sha256WithRSAEncryption
73:46:97:e6:b5:80:62:94:ca:03:a3:c4:8c:52:6d:32:f7:1a:
d0:ef:c5:8b:1c:8e:d4:7d:b1:25:8c:47:f2:06:fb:64:10:dd:
b0:81:6a:87:49:b8:c7:6a:4f:cf:1e:fa:f2:dc:97:c7:7d:1c:
61:2d:43:6b:88:4c:de:fc:e5:09:d1:ee:15:8d:ad:18:d0:e8:
f2:4e:22:80:25:80:dc:fd:e5:ae:97:a4:9b:ac:84:e1:d0:21:
d7:cc:a3:cc:58:53:37:66:ca:e9:1c:04:42:78:65:00:05:88:
e2:6c:6e:3c:ce:a5:ad:3b:78:15:5f:4d:56:8f:b5:e5:ef:f6:
1a:39:be:57:ec:17:a0:ae:b8:44:25:47:44:15:f5:f4:b1:34:
9d:3b:0a:ce:87:2b:49:d0:54:41:d0:4f:aa:57:db:3e:21:f9:
b0:f3:b4:e0:f9:1f:ed:88:fa:7a:3c:36:11:c4:34:77:eb:02:
8b:8d:52:4f:34:a8:4c:fd:11:40:20:06:42:fe:20:70:b3:b8:
7b:f0:17:0f:62:94:99:a7:09:21:e0:32:9d:5d:5a:af:0a:56:
a2:14:17:c8:37:19:4c:e4:cc:02:a9:bc:f3:01:a4:0b:d7:b1:
7c:d8:f3:db:78:fb:12:53:ec:a4:fa:d9:47:4e:d6:48:b2:67:
27:d4:c8:0a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon May 20 13:21:13 2024 by rpki-client on console-ams.rpki-client.org