Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HOyhE3DexkuV1_AxB_FAoIuqHqc.roa
File: HOyhE3DexkuV1_AxB_FAoIuqHqc.roa (raw, json)
Hash identifier: tRVJEsFZ6pgOgl42P7RQXJ3L9KnoMj2BtHY+skdY8dk=
Subject key identifier: 1C:EC:A1:13:70:DE:C6:4B:95:D7:F0:31:07:F1:40:A0:8B:AA:1E:A7
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AD55904D384A1177838B017BADC33
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HOyhE3DexkuV1_AxB_FAoIuqHqc.roa
Signing time: Mon 01 Jan 2024 18:30:42 +0000
ROA not before: Mon 01 Jan 2024 18:30:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 85.122.246.0/24 maxlen: 24
85.122.244.0/24 maxlen: 24
85.122.242.0/24 maxlen: 24
85.122.245.0/24 maxlen: 24
85.122.243.0/24 maxlen: 24
85.122.241.0/24 maxlen: 24
85.122.252.0/24 maxlen: 24
85.122.250.0/24 maxlen: 24
85.122.248.0/24 maxlen: 24
85.122.253.0/24 maxlen: 24
85.122.251.0/24 maxlen: 24
85.122.249.0/24 maxlen: 24
85.122.247.0/24 maxlen: 24
85.122.255.0/24 maxlen: 24
85.122.254.0/24 maxlen: 24
85.122.232.0/24 maxlen: 24
85.122.233.0/24 maxlen: 24
85.122.238.0/24 maxlen: 24
85.122.236.0/24 maxlen: 24
85.122.234.0/24 maxlen: 24
85.122.240.0/24 maxlen: 24
85.122.239.0/24 maxlen: 24
85.122.237.0/24 maxlen: 24
85.122.235.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 02:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:d5:59:04:d3:84:a1:17:78:38:b0:17:ba:dc:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ceca11370dec64b95d7f03107f140a08baa1ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d8:05:1c:84:0e:c4:ec:04:3a:c1:a3:5d:c3:
8a:86:89:b3:72:d5:f4:1d:92:61:a4:9f:ff:10:63:
89:22:08:e7:78:90:9d:67:61:22:50:49:73:59:52:
15:5e:24:0a:f9:b8:eb:56:76:cd:10:ee:ec:a7:4f:
a4:af:f3:d5:85:76:0a:52:c6:72:6c:7a:14:a9:0f:
80:0c:39:a5:a7:81:c9:95:13:fb:c7:88:06:30:d7:
5a:03:b0:8a:d4:9d:1d:f9:ac:53:85:fc:1f:90:89:
e5:3d:75:4a:e5:84:7e:69:b2:25:1f:56:c8:06:e4:
2d:af:ef:de:01:41:c9:27:6d:70:d2:c8:8d:f2:a4:
09:87:35:f9:7b:95:3f:35:59:13:57:e0:e7:23:45:
88:fa:9a:82:91:fd:5f:05:0c:58:0d:0b:32:a4:01:
78:0c:39:9a:92:d7:8c:07:9a:5b:97:4c:e4:ed:36:
8d:55:61:a2:10:51:2f:6f:9e:2b:5a:82:f6:66:5e:
52:66:67:dc:78:20:1f:59:19:d5:d3:d7:9e:fd:0d:
01:68:50:ed:e3:7d:f0:a1:21:77:81:6c:47:a2:4f:
4c:82:52:40:f3:f4:58:cf:54:be:d7:26:8a:30:9c:
f9:dc:45:db:82:b5:92:e2:9e:ec:46:82:a2:d8:d3:
31:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:EC:A1:13:70:DE:C6:4B:95:D7:F0:31:07:F1:40:A0:8B:AA:1E:A7
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/HOyhE3DexkuV1_AxB_FAoIuqHqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.232.0-85.122.255.255
Signature Algorithm: sha256WithRSAEncryption
9d:cd:5f:ca:cb:05:ba:c5:69:d9:5b:58:34:95:34:bd:76:96:
fa:46:ab:61:93:e5:91:40:6e:05:23:79:91:df:fc:f7:74:fa:
46:d4:70:9b:6c:68:4a:a3:10:68:47:d3:fb:12:ad:12:4f:8e:
5b:22:66:0d:cd:6a:11:7e:ef:af:71:7c:82:fc:92:79:09:2b:
92:b0:0e:74:6c:30:d3:96:dd:b4:56:93:74:27:72:17:36:77:
f2:5e:43:a7:39:ab:6e:c1:d7:75:5c:82:a1:43:e6:e8:9e:37:
6b:ce:e1:fa:45:d6:cf:f7:b9:66:1b:ec:48:5d:84:cf:d4:d4:
22:a7:7f:45:a5:93:40:f0:03:f0:c0:c9:b0:fb:6a:2d:3e:ba:
06:17:44:8b:f8:b3:bf:32:ab:a9:34:0f:8a:cf:3e:0e:b3:16:
3c:76:77:8b:dc:5a:a9:da:71:81:a0:4e:72:98:25:84:07:7a:
0a:9c:ce:b5:0a:56:40:80:90:d4:33:fb:64:06:48:70:7d:9d:
5d:92:8a:58:7c:0d:f6:e3:56:ab:5e:df:37:42:60:65:0b:4d:
39:81:57:a9:9f:30:d6:85:7e:8d:cc:8c:b3:05:94:8f:cd:00:
4d:36:f5:e4:e7:af:f6:d3:98:b1:50:a8:32:e5:52:3d:9e:60:
93:00:ad:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:48:46 2024 by rpki-client on console-ams.rpki-client.org