Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/HPRArq6oKpAvEjRuCUkSwNGfvaA.roa
File: HPRArq6oKpAvEjRuCUkSwNGfvaA.roa (raw, json)
Hash identifier: ZU4oHSuipNbpy2uthU/FjfZeyc07jLk0oPH5IAyzA+g=
Subject key identifier: 1C:F4:40:AE:AE:A8:2A:90:2F:12:34:6E:09:49:12:C0:D1:9F:BD:A0
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 0192B50F05AD39C36A9D206982F9625AC5ED
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/HPRArq6oKpAvEjRuCUkSwNGfvaA.roa
Signing time: Tue 22 Oct 2024 16:28:33 +0000
ROA not before: Tue 22 Oct 2024 16:28:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 55286
IP address blocks: 94.229.209.0/24 maxlen: 24
94.229.211.0/24 maxlen: 24
94.229.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b5:0f:05:ad:39:c3:6a:9d:20:69:82:f9:62:5a:c5:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 22 16:28:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cf440aeaea82a902f12346e094912c0d19fbda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:5f:76:36:5f:e3:6e:f3:6f:b1:e8:71:49:a9:
98:79:2f:f3:d5:17:75:63:9c:8b:e6:8f:01:1b:1f:
d1:7b:de:bb:a4:1d:20:3a:b3:2a:96:01:05:1f:2d:
c5:1a:70:fb:7d:ae:9d:59:74:61:56:02:21:b2:14:
2a:b4:eb:fb:2b:1e:f3:38:84:c9:2d:f3:23:02:1f:
e6:0b:fd:69:26:92:de:fa:a8:5d:b3:d6:27:d8:a9:
07:8c:5d:5e:89:fe:ad:c6:45:f4:50:bc:87:fe:63:
a8:6e:9c:6c:e9:38:33:2f:d7:aa:f9:69:0e:67:48:
f5:c7:af:c6:b9:de:c7:ed:bc:5a:62:92:14:13:6b:
e2:f2:23:0e:fb:6e:c5:92:6f:81:a3:34:9f:f7:45:
c4:b5:f4:39:8e:62:8b:66:57:6a:74:1d:b1:7b:2e:
fc:7b:53:47:24:26:1b:2a:1c:10:ac:d9:61:90:8b:
76:44:c4:dd:f4:47:4e:48:a3:f0:8b:65:c9:83:48:
f9:47:56:78:a2:a7:5b:1e:e5:c6:ba:20:ab:0c:66:
18:3a:e4:6c:b2:c7:e3:3d:3e:a4:02:87:3b:3f:e6:
b6:5b:a0:04:6d:dd:6c:4d:ad:11:a5:30:49:ad:ec:
b6:ac:0a:f9:53:ce:99:db:56:7e:f0:ad:38:d5:09:
a8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F4:40:AE:AE:A8:2A:90:2F:12:34:6E:09:49:12:C0:D1:9F:BD:A0
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/HPRArq6oKpAvEjRuCUkSwNGfvaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.209.0/24
94.229.211.0/24
94.229.213.0/24
Signature Algorithm: sha256WithRSAEncryption
72:c6:82:86:47:cd:20:74:28:2d:a8:50:3a:ed:be:7d:7d:b9:
08:c2:fe:7e:c0:5f:f4:bd:78:0f:0b:56:ed:b2:0c:24:08:4c:
7a:12:3a:3a:6c:09:7f:57:e3:77:49:75:5d:66:24:df:fb:4b:
38:74:d8:18:46:dd:bf:10:3a:ed:08:5d:a8:b1:a3:4c:06:4f:
a6:8d:2c:86:76:45:2b:1f:3b:3e:12:eb:a7:f1:a4:fb:b5:13:
9f:b5:34:3c:07:1b:40:34:8c:12:ee:bd:52:f6:58:ea:6b:03:
83:92:3e:ee:fd:5a:d5:64:87:21:20:3b:3b:e0:41:db:02:26:
56:29:bf:e9:35:d3:8b:a2:ce:79:15:cc:9d:07:80:f4:39:cc:
f3:e2:d0:fc:12:36:63:5e:c9:90:68:69:ba:9b:2f:cc:ad:e5:
9b:68:7f:02:6d:96:13:b9:b1:71:07:7e:b6:40:4f:40:83:dd:
68:1e:f2:69:b3:2c:1e:e2:80:c3:1a:df:4f:42:50:a1:05:24:
fa:1d:22:32:9c:0e:a8:33:5e:0f:68:ce:29:86:bf:57:41:c8:
4c:77:99:06:85:f6:e8:a1:e3:82:28:fb:c3:4d:dc:5a:e0:d2:
79:dd:a6:ad:96:7b:89:1c:be:00:9e:76:6d:67:68:e0:16:a6:
ce:77:26:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:45:49 2024 by rpki-client on console-ams.rpki-client.org