Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/HGpaAMBLzlA5gi5f-IBCc4PNSxY.roa
File: HGpaAMBLzlA5gi5f-IBCc4PNSxY.roa (raw, json)
Hash identifier: SyNsBnZjAO7355XUrCO88YKUBU1G5/ufic2xmLR/iB8=
Subject key identifier: 1C:6A:5A:00:C0:4B:CE:50:39:82:2E:5F:F8:80:42:73:83:CD:4B:16
Certificate issuer: /CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Certificate serial: 018CC649D51AFBCFAC546E3655142FCE4C7A
Authority key identifier: 30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/HGpaAMBLzlA5gi5f-IBCc4PNSxY.roa
Signing time: Mon 01 Jan 2024 18:29:36 +0000
ROA not before: Mon 01 Jan 2024 18:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41000
IP address blocks: 185.219.236.0/22 maxlen: 22
2a0b:eb40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:d5:1a:fb:cf:ac:54:6e:36:55:14:2f:ce:4c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30aee11b2943572d11becc425c684b48bbb2cbd4
Validity
Not Before: Jan 1 18:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c6a5a00c04bce5039822e5ff880427383cd4b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0e:17:c7:ed:4b:7e:d5:a5:ed:0b:aa:49:30:
88:cb:59:49:f8:9a:3a:2f:b8:89:e8:cc:5f:5f:28:
d8:81:63:2e:d5:37:7c:7d:6b:24:1b:61:cc:04:f9:
c8:2c:77:de:7a:22:2f:83:38:71:9d:12:f3:1a:8e:
36:d9:71:0f:e5:c8:a1:0b:57:13:0a:ec:13:64:b2:
2b:52:09:a3:d0:e6:cf:63:26:74:0c:f3:7d:18:7b:
e6:62:bb:36:e3:7d:8d:cf:10:b1:49:ea:66:50:0d:
b1:25:02:cc:c4:eb:51:bc:7c:f7:d2:45:2d:2b:9e:
22:19:e3:2b:2f:5f:ae:2f:de:05:63:27:e1:c5:24:
16:85:dc:8c:df:07:46:f1:f3:6c:69:9c:f8:24:55:
da:06:49:53:2d:4a:d4:8f:f4:40:2f:89:de:bd:26:
a4:7c:36:49:24:3e:4f:12:6f:13:e2:35:6d:92:6b:
5e:90:6d:44:0c:68:ee:56:ad:f9:45:88:09:ba:9c:
03:ab:5b:05:46:78:96:f0:43:db:e5:fe:99:55:c4:
c9:be:58:f2:b3:da:be:c6:88:0e:e6:49:16:f1:f4:
6d:f2:a9:b8:0a:c9:44:63:87:b9:19:38:57:0e:c7:
e8:47:0c:97:78:69:d9:b6:77:98:db:37:55:d4:8f:
6d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6A:5A:00:C0:4B:CE:50:39:82:2E:5F:F8:80:42:73:83:CD:4B:16
X509v3 Authority Key Identifier:
keyid:30:AE:E1:1B:29:43:57:2D:11:BE:CC:42:5C:68:4B:48:BB:B2:CB:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MK7hGylDVy0RvsxCXGhLSLuyy9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/HGpaAMBLzlA5gi5f-IBCc4PNSxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6fae02-0c37-4f05-81ba-1b46d2eb5412/1/MK7hGylDVy0RvsxCXGhLSLuyy9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.219.236.0/22
IPv6:
2a0b:eb40::/29
Signature Algorithm: sha256WithRSAEncryption
6c:70:ee:57:d9:5c:9b:87:9a:9a:78:df:e2:00:e0:66:01:9d:
d9:29:ca:17:32:ef:1b:4e:6a:10:37:70:3d:f3:f3:6d:22:55:
ef:23:fe:b8:8a:08:fa:fd:c3:cb:a4:85:23:c4:72:d5:d2:ba:
04:17:c1:81:0f:90:10:87:1a:2e:bd:30:96:bd:99:ad:d3:da:
ad:8e:d3:53:58:eb:76:6e:6f:28:0f:58:d2:3c:a2:03:2e:6f:
f0:ba:70:28:84:ea:1a:ca:3d:bc:3d:2d:df:3d:85:3a:3f:47:
d3:71:0c:89:d0:23:4e:fd:81:c0:f2:5a:7d:f7:1a:f0:d8:21:
1e:86:90:a9:3d:6a:d8:25:93:d1:45:71:8e:be:f0:b9:2a:9d:
ff:7a:4d:bd:fb:07:d8:17:f6:70:47:c6:c8:9b:f8:3e:36:74:
ed:22:5d:ef:6f:f2:31:2c:35:b3:5f:20:b2:2c:72:63:34:9a:
cd:df:88:02:73:c8:b8:b5:14:d7:7c:5b:46:db:74:75:da:19:
4f:a5:77:ab:d5:4a:d6:cb:16:98:51:46:cf:b8:22:31:a9:4d:
3e:e3:cc:7a:cd:78:bc:25:0c:6f:f3:67:f1:ba:4a:8f:ce:32:
d5:24:96:99:89:9c:92:e6:91:89:23:1d:bb:3c:6b:6e:22:51:
55:2e:00:fb
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYzGSdUa+8+sVG42VRQvzkx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwYWVlMTFiMjk0MzU3MmQxMWJlY2M0MjVjNjg0YjQ4YmJi
MmNiZDQwHhcNMjQwMTAxMTgyOTM2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzZhNWEwMGMwNGJjZTUwMzk4MjJlNWZmODgwNDI3MzgzY2Q0YjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4A4Xx+1LftWl7QuqSTCIy1lJ+Jo6
L7iJ6MxfXyjYgWMu1Td8fWskG2HMBPnILHfeeiIvgzhxnRLzGo422XEP5cihC1cT
CuwTZLIrUgmj0ObPYyZ0DPN9GHvmYrs2432NzxCxSepmUA2xJQLMxOtRvHz30kUt
K54iGeMrL1+uL94FYyfhxSQWhdyM3wdG8fNsaZz4JFXaBklTLUrUj/RAL4nevSak
fDZJJD5PEm8T4jVtkmtekG1EDGjuVq35RYgJupwDq1sFRniW8EPb5f6ZVcTJvljy
s9q+xogO5kkW8fRt8qm4CslEY4e5GThXDsfoRwyXeGnZtneY2zdV1I9tFQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFBxqWgDAS85QOYIuX/iAQnODzUsWMB8GA1UdIwQY
MBaAFDCu4RspQ1ctEb7MQlxoS0i7ssvUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUs3aEd5bERWeTBSdnN4Q1hHaExTTHV5eTlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS82ZmFlMDItMGMzNy00ZjA1LTgxYmEt
MWI0NmQyZWI1NDEyLzEvSEdwYUFNQkx6bEE1Z2k1Zi1JQkNjNFBOU3hZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS82ZmFlMDItMGMzNy00ZjA1LTgxYmEtMWI0NmQyZWI1NDEy
LzEvTUs3aEd5bERWeTBSdnN4Q1hHaExTTHV5eTlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCudvsMA0E
AgACMAcDBQMqC+tAMA0GCSqGSIb3DQEBCwUAA4IBAQBscO5X2Vybh5qaeN/iAOBm
AZ3ZKcoXMu8bTmoQN3A98/NtIlXvI/64igj6/cPLpIUjxHLV0roEF8GBD5AQhxou
vTCWvZmt09qtjtNTWOt2bm8oD1jSPKIDLm/wunAohOoayj28PS3fPYU6P0fTcQyJ
0CNO/YHA8lp99xrw2CEehpCpPWrYJZPRRXGOvvC5Kp3/ek29+wfYF/ZwR8bIm/g+
NnTtIl3vb/IxLDWzXyCyLHJjNJrN34gCc8i4tRTXfFtG23R12hlPpXer1UrWyxaY
UUbPuCIxqU0+48x6zXi8JQxv82fxukqPzjLVJJaZiZyS5pGJIx27PGtuIlFVLgD7
-----END CERTIFICATE-----
Generated at Sat Jun 1 19:58:37 2024 by rpki-client on console-ams.rpki-client.org