Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Hc7WZT-6F7LTNA8XtIkOmtir8YM.roa
File: Hc7WZT-6F7LTNA8XtIkOmtir8YM.roa (raw, json)
Hash identifier: LACvYnmOpuYcA8nSW/t0UC5vSRvBPa2rmI0jPv3f3zc=
Subject key identifier: 1D:CE:D6:65:3F:BA:17:B2:D3:34:0F:17:B4:89:0E:9A:D8:AB:F1:83
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 0191E9DA147715232B22174C85F81BFDF044
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Hc7WZT-6F7LTNA8XtIkOmtir8YM.roa
Signing time: Fri 13 Sep 2024 05:27:49 +0000
ROA not before: Fri 13 Sep 2024 05:27:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199760
IP address blocks: 109.160.38.0/24 maxlen: 24
109.160.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 09:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:e9:da:14:77:15:23:2b:22:17:4c:85:f8:1b:fd:f0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Sep 13 05:27:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dced6653fba17b2d3340f17b4890e9ad8abf183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:58:87:42:0e:6c:ff:80:73:e7:e3:35:6d:
25:d0:23:23:6d:cd:50:42:bd:bd:79:12:bc:76:cb:
5a:7e:ce:b4:46:e6:bd:a7:39:f6:3c:19:32:71:d1:
ca:25:75:9c:4e:a4:b3:82:0b:a0:cf:30:24:7a:74:
45:2f:26:61:9e:2f:17:bd:d5:48:e2:73:6f:55:2c:
72:b2:2f:2e:c5:c8:be:fd:8c:a8:a4:00:ef:a5:7e:
c3:ce:b1:b0:44:6a:dd:b9:a2:1c:e3:8b:ff:d0:93:
12:19:2a:2a:5a:d8:eb:ed:48:63:10:b7:b9:de:4e:
e7:a2:9b:88:27:52:e4:d9:55:47:f5:97:55:ff:1b:
a2:a1:53:45:c7:8d:85:8e:f3:fb:03:eb:8e:06:93:
4d:68:e5:9e:fa:17:1b:31:91:92:14:12:6b:d7:b0:
5f:15:31:e5:cc:1a:bb:82:0d:e1:27:3f:7c:9d:63:
e9:ff:4f:5b:7f:6f:f2:fd:4d:8f:da:eb:12:6a:c6:
a3:0b:32:1f:46:38:4e:3b:f2:a1:4e:08:97:6e:ef:
a3:40:f1:96:eb:2e:56:53:db:4b:02:4e:c6:44:3a:
26:16:84:6e:3b:91:6a:61:a3:4a:82:fd:53:a1:b5:
bc:68:60:2b:f2:e9:0a:8a:2c:7e:0e:81:86:d1:f3:
89:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CE:D6:65:3F:BA:17:B2:D3:34:0F:17:B4:89:0E:9A:D8:AB:F1:83
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/Hc7WZT-6F7LTNA8XtIkOmtir8YM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.38.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:c3:04:e7:ad:d0:a9:fb:a7:af:58:c0:85:07:d1:08:74:f3:
da:24:f0:fd:d1:2e:5c:e5:d7:04:f6:94:37:e6:ab:76:24:72:
52:17:96:86:91:fd:a5:e4:77:7c:76:04:c9:a2:20:c6:a7:20:
c2:5e:84:1c:b6:33:26:57:3d:4a:06:ae:c9:65:40:05:63:53:
68:25:8c:c8:7f:be:5f:fe:2f:bd:aa:a2:72:ed:cd:8f:7f:98:
6c:ca:b9:1c:a7:9b:df:6d:c6:d5:66:25:d7:c5:9d:36:23:25:
f7:4d:6d:e6:a4:16:dc:c1:33:33:9b:c5:3e:85:02:82:a4:1a:
a1:e5:09:20:09:09:a6:af:1b:18:95:1f:53:5f:18:ec:8c:66:
b5:49:66:34:69:81:36:77:1a:25:b3:d6:ac:11:62:85:85:c9:
7a:3e:ca:d6:23:5f:58:ef:64:80:e4:0c:3a:c1:81:c6:0d:a4:
80:c1:26:9c:54:c0:da:d4:9e:02:a7:0d:d9:67:5e:05:4c:c3:
9a:a7:8f:99:a6:35:6f:c4:5d:49:eb:67:1e:18:58:b9:72:7b:
34:c5:95:79:3d:35:a2:4f:d7:d2:ce:6e:61:b2:30:9d:13:42:
67:7c:a5:3a:50:82:fc:ab:0c:02:8e:1d:00:50:ad:27:4b:90:
8f:dd:ff:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:53:50 2024 by rpki-client on console-ams.rpki-client.org