Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HJFbL8Jsj5QS2qDJCAF05-q6pQs.roa
File: HJFbL8Jsj5QS2qDJCAF05-q6pQs.roa (raw, json)
Hash identifier: LAsq2xKt2SbLZ8LOgYVFi5jIptSPoTkQxnbAS9WaN5M=
Subject key identifier: 1C:91:5B:2F:C2:6C:8F:94:12:DA:A0:C9:08:01:74:E7:EA:BA:A5:0B
Certificate issuer: /CN=1ea0a9eb47d824b51f154442481a257168394551
Certificate serial: 018CCA2B957607460BBBBFC54E583796BDF9
Authority key identifier: 1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HJFbL8Jsj5QS2qDJCAF05-q6pQs.roa
Signing time: Tue 02 Jan 2024 12:35:03 +0000
ROA not before: Tue 02 Jan 2024 12:35:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210743
IP address blocks: 217.113.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.mft
rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 22:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:95:76:07:46:0b:bb:bf:c5:4e:58:37:96:bd:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea0a9eb47d824b51f154442481a257168394551
Validity
Not Before: Jan 2 12:35:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c915b2fc26c8f9412daa0c9080174e7eabaa50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a4:d0:f6:34:97:96:7e:eb:22:58:b2:09:90:
be:2f:d4:a8:10:2f:38:1c:60:b1:87:6c:bc:e2:f7:
b4:f3:fb:ca:6d:9d:54:46:a3:46:be:42:f4:09:ab:
74:b3:92:38:52:02:ff:24:3b:96:4a:59:87:67:61:
8f:b2:8d:7f:19:b2:f0:91:e8:15:92:21:bd:78:bf:
11:d0:61:09:b1:31:8f:3f:1a:af:a7:36:56:6f:c1:
42:a2:86:14:eb:29:13:b2:e5:e0:ac:9f:b9:f0:0b:
96:80:e3:04:a9:ac:e1:4e:5a:db:51:3f:64:53:be:
0e:eb:6c:fb:1b:af:55:21:4c:21:d7:76:79:02:81:
15:7a:6d:97:56:aa:5d:19:99:c6:0e:ed:4f:16:85:
ef:5a:fb:8c:05:df:91:91:ba:55:92:8e:44:0e:59:
56:a2:79:ff:66:34:9d:95:6e:a8:09:99:32:13:34:
42:d3:93:a1:36:28:c4:2c:97:63:20:63:da:30:39:
f3:50:32:a9:fa:e0:0b:b8:33:5b:e3:8b:48:8c:bd:
12:bd:af:e4:0b:a7:a4:0a:9f:6b:5c:26:2e:17:42:
43:40:01:e0:15:6c:d6:39:1c:71:59:41:21:7e:ed:
d3:b4:0f:d4:1f:1f:1f:45:dd:0d:ee:f7:d6:6a:73:
cc:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:91:5B:2F:C2:6C:8F:94:12:DA:A0:C9:08:01:74:E7:EA:BA:A5:0B
X509v3 Authority Key Identifier:
keyid:1E:A0:A9:EB:47:D8:24:B5:1F:15:44:42:48:1A:25:71:68:39:45:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqCp60fYJLUfFURCSBolcWg5RVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HJFbL8Jsj5QS2qDJCAF05-q6pQs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3033c6-cce8-450d-a0c9-8418a96f6795/1/HqCp60fYJLUfFURCSBolcWg5RVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.194.0/24
Signature Algorithm: sha256WithRSAEncryption
77:77:9d:1b:9c:2e:ba:ee:cc:7f:8c:a1:6e:31:21:34:c2:c9:
79:0a:89:2c:6f:e4:b6:65:10:d8:05:63:3b:9d:ec:56:8d:e8:
66:9f:56:76:39:f1:03:90:e2:5f:13:93:82:e3:5f:ec:d2:cf:
f7:3d:24:aa:94:83:d5:45:7f:f5:e6:35:ec:d9:7e:4e:22:fd:
ca:8d:b5:ce:5c:d0:1e:bd:70:73:6c:ef:24:0f:4f:63:20:cc:
a8:d3:f0:d8:06:f7:77:6e:a9:fb:40:b1:5b:b7:93:33:38:f9:
1b:f2:04:e4:cf:44:ff:da:86:70:78:51:d5:d1:20:e1:14:35:
6e:59:90:d2:9b:88:9a:94:a1:ee:e7:50:2e:0e:3d:e5:8c:83:
40:a0:c1:4e:c2:71:6c:43:93:81:51:a6:d7:85:19:8c:14:04:
d3:20:27:79:84:dc:b2:d8:e6:4e:e6:f7:c3:2e:c8:8f:55:a3:
15:cd:1c:79:9c:6c:17:06:b7:e9:b0:34:31:bf:ff:17:08:99:
18:0e:a8:f2:99:0f:69:7d:59:52:82:36:05:50:7a:b6:70:2e:
23:58:11:ac:0f:56:fb:97:f4:62:84:54:1c:df:d7:d8:7d:25:
6f:ad:de:22:4f:04:1c:a7:13:26:03:81:a7:6d:15:5f:91:3a:
c7:dd:b9:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 03:32:00 2024 by rpki-client on console-fra.rpki-client.org