Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/hxy8ZnEK8lE1NoJAdYIUSeF8AhU.roa
File: hxy8ZnEK8lE1NoJAdYIUSeF8AhU.roa (raw, json)
Hash identifier: P15ytQ4hFOy/52GneNoYJkqRS2eAQshjH5P92QW5MrA=
Subject key identifier: 87:1C:BC:66:71:0A:F2:51:35:36:82:40:75:82:14:49:E1:7C:02:15
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018F7C32CE24B9EEA9B94F3BBE3570FF7D5C
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/hxy8ZnEK8lE1NoJAdYIUSeF8AhU.roa
Signing time: Wed 15 May 2024 12:20:55 +0000
ROA not before: Wed 15 May 2024 12:20:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35608
IP address blocks: 193.19.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:7c:32:ce:24:b9:ee:a9:b9:4f:3b:be:35:70:ff:7d:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: May 15 12:20:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=871cbc66710af2513536824075821449e17c0215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:39:40:0f:9a:f4:85:17:1a:bc:3b:ec:d2:41:
a1:dc:1e:4a:0b:f9:d9:fb:bb:90:10:2d:8c:5b:2f:
14:d4:ee:b5:14:e8:ba:93:e6:a7:8a:c9:91:83:58:
7d:c5:be:31:c5:cf:df:4b:fb:84:4b:fd:79:83:a3:
de:82:ab:3c:78:98:ca:d5:e9:13:ac:9e:09:af:e0:
c8:f9:ce:e9:5e:de:c5:60:7f:43:fd:df:26:ad:77:
00:f7:21:b5:a2:1c:61:ce:77:30:6e:c9:21:a3:98:
1e:a0:64:37:0e:0e:7a:a4:17:54:a8:2f:93:37:b0:
5b:39:e3:47:b0:2d:86:08:65:b5:ac:53:42:06:47:
c2:ef:b4:cb:67:ee:98:d5:f0:b5:91:0c:83:0e:53:
97:86:5f:5a:17:f5:9d:4e:4b:00:bc:ba:76:46:1f:
bd:8f:c5:ad:5c:64:79:dd:95:6e:3a:83:36:39:a3:
9f:1b:67:e2:2c:65:dd:91:e9:63:33:68:6e:65:db:
e7:33:08:c9:9e:5c:fa:3a:d3:4b:02:39:2c:a9:f2:
2f:11:30:93:01:72:8d:e3:2e:85:15:ff:11:b2:cc:
df:f4:ba:b8:43:84:fe:71:7c:af:aa:18:0f:1b:5e:
d5:6d:59:a5:ed:20:27:49:0c:c8:c6:ea:6d:17:f0:
a6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1C:BC:66:71:0A:F2:51:35:36:82:40:75:82:14:49:E1:7C:02:15
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/hxy8ZnEK8lE1NoJAdYIUSeF8AhU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.111.0/24
Signature Algorithm: sha256WithRSAEncryption
50:9b:fe:b3:48:84:59:b0:81:35:74:b0:78:ee:ed:af:62:04:
50:c9:4a:4e:b3:c8:b8:a9:67:e8:61:9d:6f:98:c6:b9:70:f9:
42:58:40:fa:ed:fd:8c:dc:03:03:be:be:e2:68:7c:a3:0e:45:
e3:d7:7f:13:f3:76:c5:37:a5:93:53:24:52:c6:67:4e:41:b4:
87:47:a3:79:3f:8d:8b:e2:43:36:3a:6b:d5:72:db:cb:92:63:
68:fe:3d:49:6c:9e:07:c2:84:c3:ed:dd:26:42:6b:92:63:25:
c6:e3:cf:58:cd:1e:ea:ed:e9:f7:34:9b:99:74:9f:c9:80:24:
aa:cd:ca:c4:39:55:83:a2:3c:92:a9:ed:d5:3c:cd:30:2f:ed:
cf:65:cb:67:4c:dd:d3:8f:d5:6e:a7:d5:26:28:c1:bc:f6:0e:
12:4a:ba:57:90:0a:10:fb:c1:e9:98:79:ae:58:a2:28:4b:d3:
1f:9e:70:aa:11:20:dc:4f:69:86:70:5a:93:12:b6:89:ae:4b:
f7:18:7a:61:0b:25:5a:8f:71:70:9d:5c:dd:d9:a8:cc:50:bc:
b5:7b:11:72:94:37:46:87:8c:61:d3:f7:0f:bb:5a:ef:1b:8f:
43:83:ab:23:f8:b7:ae:9b:5b:62:49:dc:d0:ff:28:25:99:f8:
a6:2e:d5:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 21:37:36 2024 by rpki-client on console-ams.rpki-client.org