Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/HPpJwq1Rdvr6rcJ8wrzuK8hRn_U.roa
File: HPpJwq1Rdvr6rcJ8wrzuK8hRn_U.roa (raw, json)
Hash identifier: 0w7Ubp7g+bRxknx/VG6oVu3I1SD4IIUzCdUMntPl5Qk=
Subject key identifier: 1C:FA:49:C2:AD:51:76:FA:FA:AD:C2:7C:C2:BC:EE:2B:C8:51:9F:F5
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0192AC940DDDB24AB3BD3B206C270D36BB19
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/HPpJwq1Rdvr6rcJ8wrzuK8hRn_U.roa
Signing time: Mon 21 Oct 2024 00:57:16 +0000
ROA not before: Mon 21 Oct 2024 00:57:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200461
IP address blocks: 194.110.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ac:94:0d:dd:b2:4a:b3:bd:3b:20:6c:27:0d:36:bb:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Oct 21 00:57:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cfa49c2ad5176fafaadc27cc2bcee2bc8519ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:74:d5:7f:92:a9:c1:89:41:56:b3:1d:22:
db:2b:39:67:34:56:5f:c8:d4:75:34:d8:8a:a3:e4:
b0:8c:12:8c:fa:30:01:92:00:b1:fa:39:86:bb:80:
0f:bb:e3:5c:c5:2d:d5:11:69:98:d6:58:c5:2c:25:
0b:61:42:ef:91:a4:44:7c:d1:89:f1:af:0f:33:6b:
8c:2c:26:1c:27:42:91:2f:cb:31:c9:16:55:17:40:
82:e9:72:97:3c:77:67:0e:36:98:d8:33:c4:ba:29:
7b:dc:8d:d5:af:5e:52:6d:a4:24:4f:d5:82:72:4f:
3f:37:31:7b:67:2b:54:51:28:17:16:9f:a4:68:f5:
9c:d7:e6:40:0d:b4:e7:a0:0c:dd:cf:c9:18:75:85:
6b:a6:21:c5:01:4a:1a:e2:8c:5d:9e:59:34:e7:95:
6a:ee:fb:ef:ae:64:5c:e0:43:e4:ae:ea:40:ea:37:
32:25:42:35:44:27:43:8a:36:5b:47:c9:89:17:89:
a8:e8:33:e3:35:bc:f6:6a:02:f7:f4:d8:b2:98:4c:
bd:1e:c9:db:b3:26:a7:cb:3e:ac:c3:c9:6d:22:d5:
e4:87:13:b6:50:0c:b8:6e:20:6f:46:83:75:cd:9b:
89:04:66:d6:ae:70:eb:7a:77:8b:65:a9:3e:6a:0c:
57:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FA:49:C2:AD:51:76:FA:FA:AD:C2:7C:C2:BC:EE:2B:C8:51:9F:F5
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/HPpJwq1Rdvr6rcJ8wrzuK8hRn_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.110.175.0/24
Signature Algorithm: sha256WithRSAEncryption
88:0a:08:ad:6f:c2:c3:8b:8f:5e:21:6a:99:6b:e7:a7:c7:61:
ad:dd:95:31:e7:96:5d:4a:98:b7:98:ca:f4:30:56:f6:73:2a:
c3:1b:ef:84:22:6f:8d:7b:a0:66:dd:b9:c7:93:4a:1d:42:ed:
69:f5:6a:9f:a8:cc:18:da:91:44:d8:c7:83:27:44:c7:79:bb:
d8:73:00:8a:c0:bd:5c:e3:2d:53:7c:e2:8f:4a:ae:59:a3:ff:
c1:a9:f9:b4:ae:b1:8a:89:47:b6:5a:04:b0:ad:68:df:a4:dc:
fd:57:04:9a:47:63:6e:e9:e7:3f:48:0f:fd:59:71:22:00:11:
29:29:8a:cf:f2:6b:96:a1:66:55:7a:15:ef:70:84:ce:91:8a:
79:08:50:2b:77:de:cf:ca:f0:56:10:a6:83:2f:eb:49:be:51:
d7:ec:20:6d:53:5c:6e:19:e1:da:a4:ec:d1:1d:01:6f:2a:53:
67:82:3d:97:61:63:d2:64:b7:0e:9c:8a:00:c8:2a:9f:75:51:
57:a3:9f:52:0c:d9:0a:5c:46:c5:73:ff:0e:31:c6:d8:39:de:
ee:a8:60:5e:1d:b7:dc:44:1d:fa:5c:51:59:15:c8:b7:37:23:
48:7f:4a:63:7b:19:a1:d6:12:b1:63:8f:79:6c:13:6c:25:2a:
d2:94:a2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:32:29 2024 by rpki-client on console-fra.rpki-client.org