Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/HAJdnz05mOkeznAsf7_irL_pRsQ.roa
File: HAJdnz05mOkeznAsf7_irL_pRsQ.roa (raw, json)
Hash identifier: hqadjvwMaB0hkQBtJgNOYlHaGATh+ipy00dIL8fxjdg=
Subject key identifier: 1C:02:5D:9F:3D:39:98:E9:1E:CE:70:2C:7F:BF:E2:AC:BF:E9:46:C4
Certificate issuer: /CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Certificate serial: 018CC56E599EFE8467C636E3DBC6C5A0AE42
Authority key identifier: 9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/HAJdnz05mOkeznAsf7_irL_pRsQ.roa
Signing time: Mon 01 Jan 2024 14:29:52 +0000
ROA not before: Mon 01 Jan 2024 14:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208693
IP address blocks: 185.185.204.0/22 maxlen: 24
2a00:7420:8000::/33 maxlen: 33
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 14:21:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:59:9e:fe:84:67:c6:36:e3:db:c6:c5:a0:ae:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a2f0701d7a63cf3d193695c395d1a1f78335ccf
Validity
Not Before: Jan 1 14:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c025d9f3d3998e91ece702c7fbfe2acbfe946c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:0c:fb:83:a1:72:a8:0f:4f:7c:99:f0:9c:8e:
2d:d0:1a:01:e8:93:cb:06:24:86:14:d6:5c:a5:f0:
49:b5:6f:f9:43:f2:e8:ff:95:e2:20:ac:bd:14:8a:
5e:bd:5f:3a:48:77:21:7d:9e:f1:f7:50:5d:a8:5d:
70:b4:74:f5:42:5b:ac:40:84:4c:78:54:58:9f:13:
d5:0c:da:81:65:b3:5e:17:2f:6b:7f:bd:65:a2:9b:
fc:b8:47:22:0a:45:ee:a8:be:94:2d:8a:6c:b6:c0:
46:5e:03:e8:96:7f:ec:d5:9d:28:4a:ab:8c:d6:3f:
48:b9:26:cd:b3:2d:75:4d:b3:22:e1:f2:98:84:3a:
32:28:d3:c9:ef:49:9e:81:4c:1f:c9:22:24:f2:87:
97:a8:12:c2:16:02:0c:2c:5f:3c:d0:b8:f1:ef:a3:
42:f4:41:b6:4c:fc:03:23:98:7e:40:0f:93:47:3d:
4e:a4:08:2c:c6:fa:06:ee:9e:a0:97:ea:97:9d:c7:
1e:10:c8:2c:f0:af:03:62:4e:9a:59:71:f3:b1:c8:
8f:e4:4e:83:77:0f:8c:f5:3a:0b:c0:04:02:42:96:
7f:17:9e:8f:a1:d0:3e:2e:7e:c6:7f:1d:8a:ae:d4:
64:bc:7a:a6:8c:62:10:ba:ee:45:84:e8:b0:2c:58:
2a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:02:5D:9F:3D:39:98:E9:1E:CE:70:2C:7F:BF:E2:AC:BF:E9:46:C4
X509v3 Authority Key Identifier:
keyid:9A:2F:07:01:D7:A6:3C:F3:D1:93:69:5C:39:5D:1A:1F:78:33:5C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mi8HAdemPPPRk2lcOV0aH3gzXM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/HAJdnz05mOkeznAsf7_irL_pRsQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5efad6-c9a4-4838-bd67-73717c56b6f3/1/mi8HAdemPPPRk2lcOV0aH3gzXM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.204.0/22
IPv6:
2a00:7420:8000::/33
Signature Algorithm: sha256WithRSAEncryption
75:73:57:84:4e:55:e3:90:c4:c5:19:58:69:c0:96:0a:1f:3c:
80:ae:a3:f0:f7:0f:0f:51:6c:d5:12:29:d3:08:7a:37:2c:4e:
9d:42:4c:56:a4:53:58:45:f7:c3:f2:96:ec:31:7c:d7:3e:d2:
d9:48:4f:50:0f:5a:53:3f:b4:e4:3b:5a:06:cb:92:08:d3:99:
05:79:8d:c6:22:c9:fb:02:b6:ca:f2:24:f7:95:2c:5e:ab:21:
77:bb:2d:e4:13:59:96:de:5d:f2:6b:90:fe:45:e8:ee:e8:4c:
0d:73:73:62:a0:76:95:fc:5c:f5:3d:c1:7e:4d:3e:9c:3b:52:
d5:e4:41:99:8b:f0:7f:d9:3a:26:d5:2f:a2:c5:5e:3b:29:0b:
3b:3b:a7:89:a3:15:68:c9:d1:9c:6a:15:7e:d2:e8:48:88:06:
c8:b2:23:05:2d:99:b1:8f:2f:6b:76:bf:94:89:54:96:e0:6b:
5e:fc:e8:4d:95:5d:18:3c:45:6c:dc:25:dd:b1:c5:b4:ab:0d:
0f:68:bc:13:78:2e:13:17:6f:b0:6a:77:b1:91:fd:c6:3d:a7:
0a:77:d4:aa:ef:0c:00:17:d1:b7:3f:a7:75:b1:3a:9e:1d:f0:
05:ca:62:89:e1:f9:b3:da:b9:4a:ff:8f:76:98:4b:a2:d0:dc:
93:5e:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 18:41:32 2024 by rpki-client on console-fra.rpki-client.org