Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/HYCW_UVmzDyr2QO_FiIwQnYz_js.roa
File: HYCW_UVmzDyr2QO_FiIwQnYz_js.roa (raw, json)
Hash identifier: B9fenyyqq6yMDWJNyzMcdmPj2IgmRtvcDLs4IcTL4ds=
Subject key identifier: 1D:80:96:FD:45:66:CC:3C:AB:D9:03:BF:16:22:30:42:76:33:FE:3B
Certificate issuer: /CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Certificate serial: 018CC72743BC9E95D787433EE8D5DFD47634
Authority key identifier: C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/HYCW_UVmzDyr2QO_FiIwQnYz_js.roa
Signing time: Mon 01 Jan 2024 22:31:28 +0000
ROA not before: Mon 01 Jan 2024 22:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.16.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:43:bc:9e:95:d7:87:43:3e:e8:d5:df:d4:76:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61953c08980adc94f2fa3a3c1ba95c40d21e7d3
Validity
Not Before: Jan 1 22:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d8096fd4566cc3cabd903bf162230427633fe3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7c:cb:49:c3:b4:5c:56:3e:d9:b4:0d:66:3a:
cf:72:e5:2b:9e:86:f2:d2:31:ca:6f:49:93:91:66:
dd:12:1a:30:24:9c:6c:34:54:86:b9:90:cd:c2:d8:
4a:dc:e4:d2:ea:19:78:b6:c8:1f:73:6e:07:00:29:
67:47:ee:25:e6:e0:5f:5e:e0:fa:74:ae:18:bd:98:
e1:c6:be:a0:4a:a1:ef:aa:3f:98:94:4b:d1:54:71:
c0:94:05:fa:75:bd:40:92:ae:f4:8c:40:52:fc:17:
08:e4:b1:30:55:86:ca:fb:af:77:56:8f:f4:ae:b0:
80:89:77:a4:1c:78:4d:98:69:f7:c0:b2:b8:76:cf:
de:67:33:72:39:9f:b0:86:10:5f:11:bd:06:9e:5e:
42:a4:6c:42:99:12:c7:eb:37:37:b3:1d:ea:da:61:
20:07:05:62:35:d4:13:f6:67:bc:f7:48:37:29:90:
5f:72:24:37:55:a2:42:c5:c2:92:2d:46:8b:a6:b5:
a8:5a:f7:d9:5a:b6:ec:b4:3b:86:8e:a7:fc:a9:59:
af:24:95:2d:bd:40:f7:95:b4:30:9d:26:81:4f:1e:
2d:1f:71:62:ff:9d:27:ce:d7:02:fc:16:3d:d9:3a:
2d:1a:43:ef:ef:0b:7c:5b:7f:d5:40:2c:e4:dc:ab:
cd:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:80:96:FD:45:66:CC:3C:AB:D9:03:BF:16:22:30:42:76:33:FE:3B
X509v3 Authority Key Identifier:
keyid:C6:19:53:C0:89:80:AD:C9:4F:2F:A3:A3:C1:BA:95:C4:0D:21:E7:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhlTwImArclPL6OjwbqVxA0h59M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/HYCW_UVmzDyr2QO_FiIwQnYz_js.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/e01285-660d-4cd2-ad1f-625245a00abf/1/xhlTwImArclPL6OjwbqVxA0h59M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.231.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:2f:f3:f0:fb:60:81:06:2d:04:31:5a:c0:ff:fc:04:8b:91:
ed:cc:cc:ac:19:da:7d:1b:a0:b5:4c:ab:b8:24:dc:d6:52:2c:
d2:c1:b4:81:27:f7:c8:16:1e:f6:1c:d0:eb:3c:fe:90:86:f3:
7a:bf:c4:59:a0:13:b0:ca:06:1d:19:67:5d:00:0b:8b:68:4c:
3f:86:26:83:82:3f:eb:85:c9:04:62:35:3c:e0:11:a1:5f:e8:
f8:12:bf:d6:4c:8a:3f:9c:9e:0d:10:b3:95:3a:78:99:cc:58:
28:67:e3:87:0f:58:76:c9:5a:fb:8c:bb:bd:b2:8d:05:95:6a:
89:9e:ea:43:77:2e:c4:bf:57:5c:94:d9:f1:e5:32:87:f5:f4:
22:af:0b:31:cd:84:45:3c:d4:e5:f8:e0:91:c8:cd:37:9c:57:
e8:18:a1:c2:be:b5:42:5c:88:32:12:b1:bf:68:f7:03:52:bd:
2e:62:a0:14:62:cb:87:07:c0:1c:bc:63:4a:d9:be:3f:25:88:
9e:ef:85:24:54:91:3f:d2:89:dc:67:dd:35:5d:38:e2:2c:03:
25:05:41:4f:63:f6:07:66:cf:66:26:e7:c9:58:b8:59:9c:cd:
66:81:2a:02:3c:10:9f:35:82:52:0a:05:8f:26:64:10:44:56:
45:dc:a8:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 13:26:23 2024 by rpki-client on console-fra.rpki-client.org