Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/HD9Hx9PVFnNgGKThhu3e4vCe88A.roa
File: HD9Hx9PVFnNgGKThhu3e4vCe88A.roa (raw, json)
Hash identifier: /WzSoRAJi0VglVwEfzdULW136aAyGXI2qBvI9R6McEw=
Subject key identifier: 1C:3F:47:C7:D3:D5:16:73:60:18:A4:E1:86:ED:DE:E2:F0:9E:F3:C0
Certificate issuer: /CN=4a13b7758676de2ef127cc7750ee76c5a8341d78
Certificate serial: 018CC7955510CFEF82FAD4795708A077EA4C
Authority key identifier: 4A:13:B7:75:86:76:DE:2E:F1:27:CC:77:50:EE:76:C5:A8:34:1D:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ShO3dYZ23i7xJ8x3UO52xag0HXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/HD9Hx9PVFnNgGKThhu3e4vCe88A.roa
Signing time: Tue 02 Jan 2024 00:31:41 +0000
ROA not before: Tue 02 Jan 2024 00:31:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 786
IP address blocks: 194.26.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/ShO3dYZ23i7xJ8x3UO52xag0HXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/ShO3dYZ23i7xJ8x3UO52xag0HXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ShO3dYZ23i7xJ8x3UO52xag0HXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:55:10:cf:ef:82:fa:d4:79:57:08:a0:77:ea:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a13b7758676de2ef127cc7750ee76c5a8341d78
Validity
Not Before: Jan 2 00:31:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c3f47c7d3d516736018a4e186eddee2f09ef3c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:96:90:53:94:e7:61:30:44:c5:c5:24:e2:1b:
16:dc:53:93:9d:4d:d2:c1:94:a8:6a:5a:dd:95:1d:
b0:05:6a:07:91:65:8f:84:ab:32:39:22:fa:48:41:
cb:4c:be:83:5b:19:bf:27:ae:ad:e6:b4:27:55:63:
4e:c4:a0:4e:28:26:dc:7c:7f:6c:a7:86:a3:e7:62:
32:28:f5:99:53:32:7c:6f:52:a6:d6:98:4e:ef:9f:
8e:52:9d:79:31:61:23:2f:ac:58:94:17:0b:4c:37:
0b:46:e5:e8:61:5a:25:e7:3f:67:68:bd:6d:ec:9e:
e9:1b:82:58:f9:92:4a:2a:df:62:f6:85:4d:1f:aa:
85:c3:69:22:73:9e:09:6a:72:59:7d:2a:24:eb:58:
fa:39:d9:2e:92:df:d2:92:d4:64:8e:50:8c:c3:0d:
9b:50:77:ae:53:78:9d:57:8f:7d:e1:4c:dc:da:84:
4e:e4:ea:09:46:48:ce:1c:f4:c0:f9:c7:16:1c:27:
b4:92:70:95:31:8b:f2:a6:98:13:60:3d:b7:a5:b1:
91:ff:6f:37:fc:fc:68:5e:61:a7:11:34:4e:1e:4a:
a3:96:66:82:d2:8a:af:07:1f:fe:20:50:0a:c4:bc:
94:8c:05:f9:67:14:74:b7:86:32:1e:28:b2:50:a7:
08:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3F:47:C7:D3:D5:16:73:60:18:A4:E1:86:ED:DE:E2:F0:9E:F3:C0
X509v3 Authority Key Identifier:
keyid:4A:13:B7:75:86:76:DE:2E:F1:27:CC:77:50:EE:76:C5:A8:34:1D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ShO3dYZ23i7xJ8x3UO52xag0HXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/HD9Hx9PVFnNgGKThhu3e4vCe88A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/e6b238-5355-40f0-be87-497fd6506ae5/1/ShO3dYZ23i7xJ8x3UO52xag0HXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.26.0.0/24
Signature Algorithm: sha256WithRSAEncryption
43:d7:d7:d3:07:25:09:ac:1c:e4:c0:dd:5d:44:e0:93:50:77:
c9:27:26:c7:1c:e8:0f:c4:a0:dc:54:87:65:20:01:cf:2c:54:
92:7a:60:44:84:5c:3d:78:03:b9:41:09:2c:52:ee:ea:c8:ef:
5f:cc:04:4f:69:43:f6:3d:d8:3b:8f:e6:15:29:39:1e:69:dd:
63:12:14:35:65:35:0a:4e:de:e7:cb:b3:72:5b:4b:b6:b2:d8:
8f:b3:af:76:6f:07:13:df:42:0e:29:84:56:cf:c7:ef:69:8d:
7e:aa:d4:2b:71:91:4f:46:09:7c:d0:10:c5:b1:07:33:ea:41:
fb:d5:43:0b:80:4e:63:32:2d:6d:62:0c:49:5e:ac:5d:57:65:
fc:6c:c7:e3:42:43:05:e8:72:50:f0:f3:b3:35:9f:02:bc:99:
bb:c2:48:67:5a:7f:01:30:a6:f2:00:ad:04:b1:03:91:3b:ed:
36:50:6b:69:c7:7b:a5:49:18:53:c7:58:e7:61:80:9c:47:d7:
1d:70:6d:3e:a7:3a:0d:00:dc:3b:12:12:ac:42:fd:3b:41:bc:
0d:83:5f:29:0f:8f:b5:a5:59:29:fd:72:40:c4:09:fa:14:2f:
eb:2d:b3:19:3c:2b:6f:90:c2:43:b3:37:3c:9e:ff:3a:13:2b:
16:6c:58:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 14:28:04 2024 by rpki-client on console-ams.rpki-client.org