Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/HxB2_2dsQyKkerkE4sft7VhD-TM.roa
File: HxB2_2dsQyKkerkE4sft7VhD-TM.roa (raw, json)
Hash identifier: KVBLKn6RG5mRmMYKaLrZPLRmstSOIchmxxgoZxnbBmU=
Subject key identifier: 1F:10:76:FF:67:6C:43:22:A4:7A:B9:04:E2:C7:ED:ED:58:43:F9:33
Certificate issuer: /CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Certificate serial: 018CC56EED48292C9A93DD09CD18AFA88EEC
Authority key identifier: A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/HxB2_2dsQyKkerkE4sft7VhD-TM.roa
Signing time: Mon 01 Jan 2024 14:30:30 +0000
ROA not before: Mon 01 Jan 2024 14:30:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209181
IP address blocks: 176.119.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 14:46:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:ed:48:29:2c:9a:93:dd:09:cd:18:af:a8:8e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a056b42383ad862ce6a374ad2ca6d36c254dc7b1
Validity
Not Before: Jan 1 14:30:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f1076ff676c4322a47ab904e2c7eded5843f933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9f:5a:5c:35:04:bf:b9:06:3c:4d:c6:1c:48:
ce:12:ca:bf:ce:4c:ea:5a:f0:86:37:be:6b:67:26:
4c:a0:b7:db:a6:2b:06:29:8f:2f:14:cf:41:a4:04:
71:32:bb:51:9d:c3:68:eb:1e:20:94:e9:15:d1:c7:
f7:15:87:8a:47:45:bd:93:52:24:37:6d:a5:47:c8:
1b:75:ab:1f:2b:d1:f9:0d:97:62:e7:96:2c:5b:f1:
b1:b1:56:8a:36:20:5b:8d:0d:e5:f1:ae:f6:ba:14:
d6:9a:66:37:2a:cf:82:97:c8:fd:11:07:b1:ca:b8:
03:3f:a9:75:d7:9c:70:a6:55:99:8b:8c:2f:fa:8d:
83:8d:b7:9f:5c:3b:bf:2c:af:b5:55:f4:9a:4c:c3:
b9:05:59:12:d3:0a:bc:d0:34:e6:51:c0:da:2c:9e:
c5:b3:06:0a:45:d4:22:49:1d:cc:cc:0d:df:41:58:
61:e4:d7:58:0e:54:9c:6b:10:82:f3:00:ba:20:e0:
d8:75:67:e9:7f:26:2f:71:f3:25:c4:59:e3:c2:c1:
a8:52:33:0c:ff:78:c3:d0:63:a2:b0:65:d0:06:cf:
7e:c7:3e:cd:fe:9c:e1:41:2a:65:dc:d3:b9:42:52:
55:da:8e:91:31:fd:d9:5b:ac:eb:66:8c:c4:68:9a:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:10:76:FF:67:6C:43:22:A4:7A:B9:04:E2:C7:ED:ED:58:43:F9:33
X509v3 Authority Key Identifier:
keyid:A0:56:B4:23:83:AD:86:2C:E6:A3:74:AD:2C:A6:D3:6C:25:4D:C7:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oFa0I4Othizmo3StLKbTbCVNx7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/HxB2_2dsQyKkerkE4sft7VhD-TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3e8dcc-a764-44be-b507-9b3dd417c308/1/oFa0I4Othizmo3StLKbTbCVNx7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.222.0/24
Signature Algorithm: sha256WithRSAEncryption
24:a4:62:07:06:2c:de:16:10:49:37:b3:af:82:74:d5:f3:5c:
cd:24:9a:60:b3:46:b9:83:62:0d:7a:48:63:03:df:d5:f1:4c:
7d:6c:f6:a5:8d:29:24:05:b6:16:9a:4e:89:dd:d8:8c:84:2c:
ea:c3:bd:b6:a8:86:68:0a:2b:74:91:c8:d5:8a:52:0e:12:34:
98:72:13:61:68:61:65:bc:8e:7e:fe:c4:e1:e0:e4:17:66:2c:
d3:cc:d8:4a:04:ac:5e:b1:cf:e4:ed:c6:8c:0f:c7:9e:04:ed:
54:f0:2e:a8:36:0c:b8:62:3d:9c:04:bd:5b:c4:f9:83:84:1f:
9c:5e:aa:12:83:20:a9:98:1b:65:5d:ef:cd:03:52:a7:93:c0:
62:16:31:f6:3f:db:1a:e6:84:7d:18:aa:f0:c7:30:d1:90:bd:
42:d9:ad:4a:d1:35:de:ea:d8:73:37:b7:e9:cc:d8:f9:47:4b:
58:e5:02:f6:75:c7:e6:1d:3d:88:64:c8:4f:e3:25:a3:2c:e3:
d6:27:b5:05:65:1a:d8:74:3f:e8:84:72:8f:59:7c:b5:9e:ad:
1c:e3:39:9e:4b:bc:19:6e:3e:62:c8:3e:2b:ef:8d:76:50:63:
9a:70:bf:fa:9e:54:2d:61:5e:de:12:da:50:c5:58:c3:19:1e:
28:6d:c2:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:03:37 2024 by rpki-client on console-fra.rpki-client.org