Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/HXB-4Brm5rEh5rxChq5hWs8LWLw.roa
File: HXB-4Brm5rEh5rxChq5hWs8LWLw.roa (raw, json)
Hash identifier: yuFUO3Xf8XSjcyG83lN+D/JYB4Ssw1cGz6JoWU+vhRA=
Subject key identifier: 1D:70:7E:E0:1A:E6:E6:B1:21:E6:BC:42:86:AE:61:5A:CF:0B:58:BC
Certificate issuer: /CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Certificate serial: 018CC2DB03946F2A767B524A013B7C356CC8
Authority key identifier: D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/HXB-4Brm5rEh5rxChq5hWs8LWLw.roa
Signing time: Mon 01 Jan 2024 02:29:42 +0000
ROA not before: Mon 01 Jan 2024 02:29:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 680
IP address blocks: 137.248.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.mft
rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:03:94:6f:2a:76:7b:52:4a:01:3b:7c:35:6c:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d26d4c75cebe89614cf2e7e2e614c036f6f53ee2
Validity
Not Before: Jan 1 02:29:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d707ee01ae6e6b121e6bc4286ae615acf0b58bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:84:2f:ff:a4:e2:6c:78:35:c7:b6:f3:54:bf:
28:23:82:17:bd:e2:ef:65:b4:52:49:4a:d3:36:dc:
e3:54:d6:b4:03:26:28:ae:e3:c0:22:5c:7b:6a:5d:
44:5e:b5:25:17:d5:f6:1c:c3:02:a8:fe:43:ab:98:
4c:a8:a1:c7:54:5c:94:ce:82:86:4a:27:9d:20:84:
9e:a3:cc:d7:f9:3f:0f:f8:1d:ba:78:c8:f2:2a:bf:
6d:11:4b:55:76:e9:58:95:ff:b0:f8:21:3d:b4:54:
29:0f:98:25:fd:7c:50:70:09:54:c0:65:ca:bd:fd:
ea:9b:e6:02:75:9f:5b:46:cb:16:99:45:7e:87:45:
fd:ac:c4:09:ed:ce:b2:c2:14:77:cb:b0:1a:79:11:
63:2d:28:5e:92:91:88:85:47:e4:c3:99:ec:db:cb:
df:43:9d:61:36:71:93:0e:b6:7f:b9:1b:7e:9e:dd:
36:61:2a:cb:50:ca:71:7e:7b:17:02:b5:98:cc:92:
3d:e0:37:42:ed:98:48:39:85:c3:96:64:1e:82:51:
a2:00:44:d2:ad:9f:a0:7d:3a:75:24:09:54:40:82:
ce:fe:6d:54:83:ae:53:da:b2:0e:f9:48:13:d4:ce:
db:e7:4a:fc:05:be:54:9b:b3:8f:0c:c7:ff:23:1c:
ac:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:70:7E:E0:1A:E6:E6:B1:21:E6:BC:42:86:AE:61:5A:CF:0B:58:BC
X509v3 Authority Key Identifier:
keyid:D2:6D:4C:75:CE:BE:89:61:4C:F2:E7:E2:E6:14:C0:36:F6:F5:3E:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0m1Mdc6-iWFM8ufi5hTANvb1PuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/HXB-4Brm5rEh5rxChq5hWs8LWLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/1aa0a3-fcab-481e-86f5-88938bd53c16/1/0m1Mdc6-iWFM8ufi5hTANvb1PuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.248.0.0/16
Signature Algorithm: sha256WithRSAEncryption
57:0f:6b:1c:7c:15:4e:0b:11:c1:05:a8:c6:a4:35:0a:a1:50:
d5:15:19:ed:8d:40:96:33:fd:7d:f2:1b:41:f4:29:ca:6a:33:
28:53:2f:db:26:00:7d:f4:7d:94:a6:a1:81:6e:4e:5f:fa:e9:
20:a2:f2:41:4e:c4:49:5b:4a:13:cc:a4:cb:08:c4:35:c9:1a:
51:2b:0d:76:3a:3f:09:0b:72:bb:23:37:de:89:8c:88:5b:82:
d3:7e:2d:ee:e5:d7:b3:a3:0a:43:d6:28:23:a0:93:0c:c9:40:
fb:7e:70:93:8d:51:62:2b:23:75:dd:56:e8:fb:79:c3:15:c7:
9e:28:b5:55:50:a2:ad:78:06:74:8e:3e:fe:27:85:60:f0:40:
f6:c5:0c:43:96:e1:2a:e6:6f:24:42:74:16:f9:7e:12:ff:d6:
9d:da:fd:42:3d:2f:45:06:6a:90:6e:0d:34:92:ce:b5:4e:c2:
71:da:bf:6f:0a:18:60:58:e3:09:bd:89:0d:bb:01:e3:0d:cf:
6c:e7:04:60:7a:58:d5:f8:ec:36:51:ed:b4:f4:e2:cc:b3:66:
7a:c7:38:4b:a5:94:5e:04:65:fa:f5:bd:44:32:d2:82:f1:11:
ee:53:fb:09:c5:bc:03:1a:8a:e4:83:cb:46:d5:07:a8:1c:20:
9e:1f:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 23:32:40 2024 by rpki-client on console-fra.rpki-client.org