Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/HAT5MtD8lY9y97UyF45c7xP7axM.roa
File: HAT5MtD8lY9y97UyF45c7xP7axM.roa (raw, json)
Hash identifier: sSKufmpP9N7xI2Fpw1omYDTgE3RXerTujjHr3Vula4E=
Subject key identifier: 1C:04:F9:32:D0:FC:95:8F:72:F7:B5:32:17:8E:5C:EF:13:FB:6B:13
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 018CC64A5274DE41263D4E40963FF6F3481E
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/HAT5MtD8lY9y97UyF45c7xP7axM.roa
Signing time: Mon 01 Jan 2024 18:30:08 +0000
ROA not before: Mon 01 Jan 2024 18:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 56596
IP address blocks: 185.172.80.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:52:74:de:41:26:3d:4e:40:96:3f:f6:f3:48:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Jan 1 18:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c04f932d0fc958f72f7b532178e5cef13fb6b13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:73:c0:b9:0d:4c:8d:77:56:fd:fd:04:00:b4:
1d:ff:c2:06:a1:9d:4d:4d:f7:c5:d9:fc:bf:96:73:
8c:ea:76:f6:bc:69:df:09:8a:aa:30:ec:13:0c:eb:
93:a2:07:81:5c:11:11:73:bd:7e:77:b6:8b:42:24:
1b:5e:1c:5c:25:03:40:25:fc:db:3c:62:1e:81:10:
e5:c8:32:ed:00:80:f5:11:a3:02:d3:65:9f:94:83:
83:1a:15:2a:41:ab:b7:2b:6e:c0:97:ad:8b:81:0e:
2a:8a:6d:e1:93:08:00:7c:b0:f1:92:73:be:76:74:
53:b5:14:0b:25:c5:da:6c:22:4f:29:b4:7e:10:83:
e8:9b:4d:98:de:85:7b:e0:d6:b2:e2:cc:a8:2b:92:
2c:4b:cd:b4:46:7b:d5:2a:44:72:60:7d:53:ae:f3:
17:a7:c9:a3:12:59:2e:6d:a4:ec:52:01:96:d5:a3:
a2:c4:4f:d7:1f:b1:53:68:f9:f7:77:28:8f:50:31:
42:d1:65:d0:af:d4:50:5e:45:36:46:3b:86:41:4f:
8c:43:75:42:6a:a5:57:eb:ab:f3:28:9c:b1:94:d4:
c7:dd:52:cd:af:42:5f:37:57:fb:62:05:03:06:13:
9f:d2:49:08:69:01:99:ea:d0:be:f9:d5:df:f2:73:
2d:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:04:F9:32:D0:FC:95:8F:72:F7:B5:32:17:8E:5C:EF:13:FB:6B:13
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/HAT5MtD8lY9y97UyF45c7xP7axM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.172.80.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:c5:2e:be:e6:63:53:1c:9d:39:40:8f:dc:e5:bc:a3:ca:67:
bc:f0:5e:fc:a6:02:80:30:96:1a:05:50:6a:b8:75:c5:e8:f7:
86:e9:d4:37:c5:0e:53:ab:f0:86:76:52:6f:ed:a0:49:2d:c8:
66:e0:fc:01:19:d3:76:b0:b6:66:9f:8c:3a:fb:6c:7d:95:fe:
46:42:d6:ae:ac:16:a0:26:7d:4c:2e:cc:cf:89:51:08:09:68:
f1:95:a0:4e:da:54:e2:b7:e6:01:57:c4:78:82:33:c6:56:55:
16:0f:24:fc:8b:ae:49:74:17:28:f0:14:da:79:9a:d8:f6:6c:
65:58:2c:26:56:34:52:91:cf:66:5c:92:bc:99:67:c9:d4:4a:
f8:6c:9d:12:23:a1:10:0c:6a:a0:69:a6:0e:28:1b:d7:96:40:
96:2d:8e:7c:e2:ad:65:f1:6b:ec:c0:08:5b:22:78:be:14:f0:
f8:e2:b0:d0:30:b8:f5:d6:d2:6c:5f:08:a4:15:4c:32:60:44:
4f:e4:fa:60:16:4a:2e:f3:89:df:12:fa:5d:fa:4f:4b:86:b9:
04:8a:f2:72:8c:ad:6a:c6:e9:df:f8:70:22:3f:c8:54:be:1b:
76:22:54:11:fa:ce:03:24:ab:c5:4f:e4:36:3c:9d:cd:e9:d7:
77:a7:d7:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:14:29 2024 by rpki-client on console-ams.rpki-client.org