Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/HLVapS_AKek3POm0fo-8BW-p8FI.roa
File: HLVapS_AKek3POm0fo-8BW-p8FI.roa (raw, json)
Hash identifier: p1vlpQiWzZgoA3lWGy/XVGgxryH5/dxtzNAa9n5MlrA=
Subject key identifier: 1C:B5:5A:A5:2F:C0:29:E9:37:3C:E9:B4:7E:8F:BC:05:6F:A9:F0:52
Certificate issuer: /CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
Certificate serial: 018CC6B7E06340870FBF753999F928082956
Authority key identifier: 07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/HLVapS_AKek3POm0fo-8BW-p8FI.roa
Signing time: Mon 01 Jan 2024 20:29:48 +0000
ROA not before: Mon 01 Jan 2024 20:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48298
IP address blocks: 94.199.43.0/24 maxlen: 24
94.199.40.0/21 maxlen: 21
94.199.44.0/24 maxlen: 24
94.199.41.0/24 maxlen: 24
94.199.42.0/24 maxlen: 24
94.199.46.0/24 maxlen: 24
94.199.47.0/24 maxlen: 24
94.199.45.0/24 maxlen: 24
185.17.212.0/22 maxlen: 22
2a01:5bc0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.mft
rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:03:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:e0:63:40:87:0f:bf:75:39:99:f9:28:08:29:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075dc3f225722b809abe98778c3bfd7009e1cf4f
Validity
Not Before: Jan 1 20:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cb55aa52fc029e9373ce9b47e8fbc056fa9f052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8e:38:fa:82:c3:aa:c3:6b:6c:e5:b5:e5:78:
40:f9:52:bc:9e:91:b6:76:24:54:16:d3:fb:f2:e5:
be:cb:d0:61:62:dd:9a:90:97:14:7a:99:a6:80:a1:
2f:f3:25:11:cd:ce:15:70:6c:1b:69:ea:b1:e6:44:
45:fa:43:1a:a4:46:4b:6c:a4:b7:5f:54:7f:23:d9:
ca:a3:4d:96:0c:43:77:32:2a:45:1e:e7:9b:5a:79:
67:74:3a:73:58:aa:14:79:ed:f2:c8:b2:12:d0:ad:
bd:ae:a5:67:cf:b1:6e:4c:8c:08:3c:01:3f:4c:ab:
72:9b:d9:66:bc:8b:32:fd:f6:b4:c7:37:5f:9e:ec:
72:2f:b3:a3:ad:e4:92:16:d4:4e:c1:47:df:8e:3a:
f9:e8:99:f2:6b:33:0f:ac:74:03:b8:02:52:24:da:
74:ce:e9:9f:53:a5:dc:2e:93:e4:7d:ae:9f:20:f8:
55:d8:a4:61:e5:24:45:74:47:b2:01:21:3c:b8:85:
81:77:5a:c6:36:70:fe:9e:51:90:49:aa:2a:6d:76:
2b:42:75:e7:12:ae:4e:5b:d8:5e:a0:59:d0:8e:8d:
b7:25:5c:c8:a2:ab:4a:ec:87:98:a1:6e:28:46:8a:
5b:4b:5c:c5:25:8e:1a:5c:d8:e4:64:c6:02:b9:9b:
ae:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B5:5A:A5:2F:C0:29:E9:37:3C:E9:B4:7E:8F:BC:05:6F:A9:F0:52
X509v3 Authority Key Identifier:
keyid:07:5D:C3:F2:25:72:2B:80:9A:BE:98:77:8C:3B:FD:70:09:E1:CF:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B13D8iVyK4Cavph3jDv9cAnhz08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/HLVapS_AKek3POm0fo-8BW-p8FI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/6c8c31-f999-4056-aa1b-234d0754239d/1/B13D8iVyK4Cavph3jDv9cAnhz08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.199.40.0/21
185.17.212.0/22
IPv6:
2a01:5bc0::/32
Signature Algorithm: sha256WithRSAEncryption
80:15:4e:1b:11:e6:ba:db:65:b2:a6:9e:0d:a1:43:b8:65:84:
9f:d2:32:84:62:68:c5:80:d7:3d:ea:45:81:68:e6:a3:cc:14:
f6:0a:29:8d:b6:3f:dd:29:09:32:b7:6b:ca:b5:81:a9:2e:cc:
76:50:28:fd:e0:10:2f:19:0d:f8:2f:44:10:e2:02:5e:0f:c0:
62:20:66:34:74:f4:77:36:e4:ba:e0:1a:1e:91:51:c7:21:e8:
9a:51:78:c0:43:b7:60:92:d4:b0:cc:f1:f5:bb:cc:d9:0c:b4:
b8:6a:9e:cd:03:09:f6:51:5e:7e:f3:80:c4:08:2e:96:a4:8b:
e0:b1:47:71:60:f5:4e:69:a4:37:91:4c:b1:a9:09:62:bb:b7:
3d:ef:1c:04:f4:44:8f:3a:80:93:e3:24:06:9d:11:4b:e5:36:
3c:88:e3:ca:a0:e7:83:e6:b6:1e:29:64:62:e1:f3:bd:8f:9d:
4c:96:48:05:94:1b:38:69:29:0a:e1:a0:0a:cc:eb:06:c4:42:
52:81:33:44:8c:1b:78:f2:24:1c:48:27:54:1d:ab:69:c2:7e:
a5:3b:2a:0d:9b:88:7a:d7:e7:6c:79:61:30:b0:4c:70:5e:fe:
c7:bf:f5:23:3d:f1:e0:ea:88:00:a3:95:df:b4:94:bc:84:3e:
50:00:d9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:57:10 2024 by rpki-client on console-ams.rpki-client.org