Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/hzJuIEN7bykVd0o_8-iuNaUrUT0.roa
File: hzJuIEN7bykVd0o_8-iuNaUrUT0.roa (raw, json)
Hash identifier: xQ5aovQxSYhX3iVj8WcatMTzFP9N5IKNFk0mFJ9HkR0=
Subject key identifier: 87:32:6E:20:43:7B:6F:29:15:77:4A:3F:F3:E8:AE:35:A5:2B:51:3D
Certificate issuer: /CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Certificate serial: 018CC5014B751AD5A0B0790266C8A1F42AC1
Authority key identifier: E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/hzJuIEN7bykVd0o_8-iuNaUrUT0.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47866
IP address blocks: 193.134.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 May 2024 22:35:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4b:75:1a:d5:a0:b0:79:02:66:c8:a1:f4:2a:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6015f1e2004359cae7656b968adb2a54a434f1e
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87326e20437b6f2915774a3ff3e8ae35a52b513d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:56:74:59:c2:08:35:bb:d1:0f:01:d7:00:84:
85:b5:bb:2a:ac:f8:70:5f:62:86:d9:45:64:da:7a:
d4:33:83:6f:9b:23:98:7e:d2:ab:69:13:c7:eb:fd:
a6:70:c2:de:db:7e:ce:d2:09:8e:6b:27:12:c3:19:
3b:37:25:63:c5:3c:7a:0b:a1:53:19:ea:75:3b:71:
63:f5:7f:40:a1:98:52:3d:32:cf:c0:14:5a:eb:3c:
e2:ea:0e:48:36:3c:40:a8:b4:27:04:fe:fe:ac:bc:
54:96:16:d8:42:29:e5:29:be:5b:a6:7e:d0:92:64:
68:4a:2c:1a:80:59:f5:9a:0f:0e:25:ea:ce:7d:26:
bb:3b:9e:d6:2d:72:85:17:d0:4d:0d:33:ee:8c:13:
6d:3f:25:85:3d:bd:62:68:f4:0f:c4:87:2e:b5:86:
b3:8e:39:b8:60:d2:79:0e:0c:15:49:7e:d8:42:03:
fe:6e:1f:e4:8b:c2:d4:71:69:82:f2:97:a2:fc:f5:
60:ae:dd:ba:0e:9e:89:99:d7:79:e4:9e:6f:b7:d3:
80:e8:16:47:69:a6:12:ae:8a:9c:48:a7:b0:67:bd:
5d:30:a2:6a:3c:e7:86:3e:76:7e:de:9b:46:d0:3a:
52:26:37:59:b1:46:88:4f:f7:d8:0f:72:fc:43:2b:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:32:6E:20:43:7B:6F:29:15:77:4A:3F:F3:E8:AE:35:A5:2B:51:3D
X509v3 Authority Key Identifier:
keyid:E6:01:5F:1E:20:04:35:9C:AE:76:56:B9:68:AD:B2:A5:4A:43:4F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5gFfHiAENZyudla5aK2ypUpDTx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/hzJuIEN7bykVd0o_8-iuNaUrUT0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/508321-2dfa-4253-a3cb-2f926510ffbf/1/5gFfHiAENZyudla5aK2ypUpDTx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.134.212.0/22
Signature Algorithm: sha256WithRSAEncryption
55:37:c1:68:f8:fb:82:8a:51:48:91:1a:39:35:7a:40:cc:5e:
87:1c:6a:db:71:62:01:69:f0:cd:42:8b:28:b8:f8:78:26:2d:
37:b7:59:61:98:09:87:78:70:4f:63:91:9c:e8:25:56:c4:3e:
b4:25:9d:ae:1a:50:12:c6:44:ad:de:08:01:81:a5:0f:b4:7a:
ae:04:9c:06:91:ca:90:4f:6c:be:cb:a0:84:e2:25:8f:be:08:
18:fd:3a:4c:69:5e:8d:7e:56:fd:b9:44:8a:ad:07:a2:b5:94:
9a:b4:aa:1f:b8:7d:66:04:40:c8:58:d7:8a:28:62:7e:05:8d:
b9:30:3b:49:46:8a:85:ea:27:5b:58:ed:47:dd:4b:2e:24:34:
b9:cc:11:bc:90:86:4f:6a:0c:fb:c3:7c:0b:52:7d:31:a9:08:
9f:07:60:35:85:4d:97:f3:ad:33:4f:6c:13:9c:54:56:bd:1d:
8e:5c:a4:3d:15:d4:72:85:17:cb:83:68:3c:c5:83:f9:1d:d0:
14:51:b1:a1:8b:c1:1f:0a:b4:7f:7f:f0:3a:dd:63:92:8d:02:
03:be:35:55:53:e7:1f:dc:49:c9:85:f9:e4:bc:d3:fc:6b:3a:
68:a0:aa:cd:ad:92:d0:7e:b7:1e:11:51:ba:fd:08:41:93:ee:
f6:43:05:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 23 01:57:01 2024 by rpki-client on console-fra.rpki-client.org