Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HUV7VODJcS0_pjPVdn8ez7GjkKw.roa
File: HUV7VODJcS0_pjPVdn8ez7GjkKw.roa (raw, json)
Hash identifier: qXB5OPeC+ei1UWqm06CAinQgOwWTTt5GHB9bY/64b1I=
Subject key identifier: 1D:45:7B:54:E0:C9:71:2D:3F:A6:33:D5:76:7F:1E:CF:B1:A3:90:AC
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 019221F4DEC3DC42FD55FEAD045D33F78220
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HUV7VODJcS0_pjPVdn8ez7GjkKw.roa
Signing time: Tue 24 Sep 2024 02:55:48 +0000
ROA not before: Tue 24 Sep 2024 02:55:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199096
IP address blocks: 85.172.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 00:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:21:f4:de:c3:dc:42:fd:55:fe:ad:04:5d:33:f7:82:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Sep 24 02:55:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d457b54e0c9712d3fa633d5767f1ecfb1a390ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:90:79:0e:fc:ef:b8:94:80:46:bf:6e:6f:9c:
de:04:5b:fb:18:51:ac:77:44:be:13:98:c3:b5:69:
ba:af:1c:8d:1d:1b:e6:a0:69:3a:1f:80:43:09:9d:
94:d6:4d:9b:9f:37:7c:ec:3a:b1:b8:84:98:4a:5b:
10:07:dc:7e:e0:89:a2:c6:6b:d2:85:94:34:4c:3e:
35:f4:3d:7d:fc:10:29:be:53:e8:86:83:07:fc:da:
2c:78:e7:74:aa:82:bb:ab:bb:bd:39:eb:e6:11:c2:
ab:23:52:83:2d:77:44:94:57:99:9a:10:47:4a:4e:
b8:62:a1:9a:2e:45:34:a7:37:6c:7c:4a:ae:ff:73:
c2:d4:c9:9f:aa:68:36:dd:cc:2e:80:65:f0:5f:41:
c5:7b:cb:77:c7:f4:c2:d4:f4:49:36:36:ea:f9:c3:
96:24:71:84:f7:b9:a9:c3:08:0d:5b:0b:96:a3:ac:
95:cc:56:9d:8c:39:40:52:7d:f6:07:35:91:52:36:
fc:53:9a:ea:d1:a6:74:ae:02:ff:b8:55:9a:9e:31:
ac:00:0c:96:23:89:f8:ae:f7:db:51:a7:36:87:71:
76:4e:0f:b8:2c:cb:c2:3f:b2:7d:47:17:c5:6a:bd:
7c:af:aa:6a:13:2c:9c:8a:3f:5a:ab:ae:8d:25:c7:
37:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:45:7B:54:E0:C9:71:2D:3F:A6:33:D5:76:7F:1E:CF:B1:A3:90:AC
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/HUV7VODJcS0_pjPVdn8ez7GjkKw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.172.168.0/23
Signature Algorithm: sha256WithRSAEncryption
16:10:15:73:e0:7d:dc:09:7a:75:1f:f1:a4:ca:97:10:d7:ad:
32:ad:53:a8:81:11:72:3c:20:9e:86:b6:a9:58:0c:0c:66:dc:
26:e6:b9:1b:57:3c:68:52:e3:df:d5:13:59:d3:2f:a3:fa:4c:
05:1a:44:bd:f6:c5:ee:ea:be:86:f6:19:32:ff:3f:9a:4a:89:
58:a0:ea:25:2d:8c:2f:6b:fd:c4:ae:6d:d1:08:37:4a:04:4f:
28:43:fb:98:b4:8c:78:3c:ff:f6:27:23:07:dc:3c:7c:38:b0:
34:b2:4b:67:32:54:57:ff:2a:9b:de:2f:25:c7:be:f3:a9:18:
df:85:ee:df:5a:da:c5:64:74:c8:ec:cc:b0:fe:2e:54:f1:a6:
3e:c7:93:03:30:5a:d2:3d:c9:0c:d4:44:e6:2f:c3:1a:3b:46:
7e:32:bb:54:49:a3:62:82:8f:01:89:aa:8c:0d:ef:92:b2:57:
57:f5:50:96:8c:1a:9f:c8:d4:61:df:85:27:3c:54:b3:ab:c5:
5b:0d:c0:ed:7a:39:cd:c1:c0:ad:d6:ad:fb:03:b0:bd:a2:ee:
e5:fd:69:14:ae:6f:86:93:08:a9:9a:bc:83:22:b7:46:bc:27:
c3:e0:a5:ed:33:f8:c7:e9:61:27:b4:3b:e0:f9:55:f8:f1:54:
86:de:f9:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 07:36:25 2024 by rpki-client on console-fra.rpki-client.org