Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/1-iHgS7mD3dzHH1w8lcnayA3cmmU.roa
File: 1-iHgS7mD3dzHH1w8lcnayA3cmmU.roa (raw, json)
Hash identifier: 6goMk1Kr7rz810o84x0pUgRnU14FKOLkmHsz+YXSL3o=
Subject key identifier: FA:21:E0:4B:B9:83:DD:DC:C7:1F:5C:3C:95:C9:DA:C8:0D:DC:9A:65
Certificate issuer: /CN=1e5b334965788794d6f147a2f004d13be3257dc4
Certificate serial: 018CCA2BE16E83887181E3F584C42768D895
Authority key identifier: 1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/1-iHgS7mD3dzHH1w8lcnayA3cmmU.roa
Signing time: Tue 02 Jan 2024 12:35:22 +0000
ROA not before: Tue 02 Jan 2024 12:35:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212609
IP address blocks: 171.33.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:e1:6e:83:88:71:81:e3:f5:84:c4:27:68:d8:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e5b334965788794d6f147a2f004d13be3257dc4
Validity
Not Before: Jan 2 12:35:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa21e04bb983dddcc71f5c3c95c9dac80ddc9a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a8:33:84:3d:98:83:0f:f1:ab:ec:63:2f:5b:
65:94:a7:a3:28:bd:19:63:96:4e:6f:60:c5:3a:1a:
49:f3:5e:05:52:50:d7:4b:58:20:a7:b5:50:37:b7:
cf:99:6f:61:c6:8f:03:04:a4:d6:d6:17:32:f6:e0:
21:e9:c0:2f:86:c4:9f:99:d1:b2:cd:d5:93:39:ef:
89:06:f8:9b:dc:22:b4:64:3d:12:b6:21:6f:96:5e:
01:88:5d:0d:0a:d6:a4:cc:39:f8:ac:1f:3d:22:53:
37:53:8d:d2:78:4c:be:b6:8b:3d:03:4f:fd:91:9b:
81:ef:f6:e2:35:fb:da:cc:63:56:3b:66:82:9e:d8:
9d:51:24:db:6a:d0:fb:ff:27:0a:38:ed:43:31:7e:
eb:9e:70:e9:19:b7:47:e7:8d:54:35:0b:16:ae:c7:
6e:63:32:b5:0f:17:f7:93:7a:05:47:b8:24:c8:cd:
34:82:ce:e9:ae:4a:e2:b8:6a:2f:42:3d:91:52:5d:
89:01:59:60:63:70:52:a2:bc:c9:ca:50:09:36:d8:
7b:c6:24:ca:cf:9d:12:96:59:88:39:aa:39:79:2d:
77:ed:db:77:a1:af:fe:ff:aa:43:98:9b:27:84:e6:
70:65:15:9a:67:84:74:7f:71:e4:03:1b:d2:3a:71:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:21:E0:4B:B9:83:DD:DC:C7:1F:5C:3C:95:C9:DA:C8:0D:DC:9A:65
X509v3 Authority Key Identifier:
keyid:1E:5B:33:49:65:78:87:94:D6:F1:47:A2:F0:04:D1:3B:E3:25:7D:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HlszSWV4h5TW8Uei8ATRO-MlfcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/1-iHgS7mD3dzHH1w8lcnayA3cmmU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9ba38a-4852-413d-9cd2-9990e2d9eafe/1/HlszSWV4h5TW8Uei8ATRO-MlfcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.33.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:6f:ef:61:7c:ff:99:09:09:0f:dc:69:e7:f6:81:f8:f9:24:
8b:f2:88:79:a3:4e:65:51:3f:84:34:f1:d5:c8:41:98:38:ba:
80:c8:d4:52:fe:f8:93:ad:3e:06:c6:8d:2c:45:90:63:e1:4f:
0e:18:5f:80:cd:c8:d9:4f:8e:9a:9f:2a:7c:b0:56:06:49:75:
e4:9b:80:99:e0:2c:3a:6b:7f:ec:2e:af:52:8a:2b:cc:e3:14:
08:06:0c:6b:14:4f:c4:01:37:46:df:5a:9c:79:20:15:8e:da:
61:b9:67:72:a6:3a:0e:ac:f3:1b:7a:90:81:98:cd:03:a6:46:
8b:19:85:d2:81:c8:94:8a:2a:21:54:89:4f:8b:e8:b0:cd:ad:
7a:6d:84:c1:f5:c4:be:a2:5a:73:fc:c7:5b:68:ae:f9:51:ba:
eb:8c:5f:d1:a3:b7:d6:c9:ac:fe:ab:8c:57:5c:4d:6f:35:86:
c3:29:2a:c6:cd:ef:aa:d9:5e:ab:d6:c9:e1:08:98:38:98:a0:
a6:d9:87:a0:e8:c5:3c:bf:9e:24:16:bb:44:1f:c9:e7:4a:11:
4b:17:76:c2:56:bb:87:b2:1d:68:0c:d4:a1:c2:61:21:d6:a6:
76:cd:42:ac:4d:97:3b:ac:61:75:3b:5d:e2:b1:32:3d:40:b8:
c6:de:0a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:59:00 2024 by rpki-client on console-fra.rpki-client.org