Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/HjXuO5KRjVx46za6bMsILIJl-Pc.roa
File: HjXuO5KRjVx46za6bMsILIJl-Pc.roa (raw, json)
Hash identifier: mQBSLC9ow3/3/AWFubEBxUd03Af/ZOJae1VmeCzvluE=
Subject key identifier: 1E:35:EE:3B:92:91:8D:5C:78:EB:36:BA:6C:CB:08:2C:82:65:F8:F7
Certificate issuer: /CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Certificate serial: 018CC493965BF3D86012C18B59C0646CDBFF
Authority key identifier: 5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/HjXuO5KRjVx46za6bMsILIJl-Pc.roa
Signing time: Mon 01 Jan 2024 10:30:55 +0000
ROA not before: Mon 01 Jan 2024 10:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60775
IP address blocks: 185.177.144.0/22 maxlen: 22
185.177.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:96:5b:f3:d8:60:12:c1:8b:59:c0:64:6c:db:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd8d72b1cbfc67c379ad9a92c66fac6c8d3233a
Validity
Not Before: Jan 1 10:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e35ee3b92918d5c78eb36ba6ccb082c8265f8f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:d9:43:bc:71:90:6e:ea:7c:e4:ce:a7:7d:
11:ab:54:9f:74:e0:b3:ae:2f:39:73:c7:04:f9:7b:
f3:df:30:d2:f0:98:f9:fa:89:68:1b:ee:24:15:36:
63:cb:b2:3b:ae:60:a0:98:ab:d0:ec:60:b0:a3:2d:
e9:2d:3e:5c:8f:5e:b9:7c:a9:7e:6e:f4:fe:43:b6:
c0:7f:de:db:b8:83:55:43:b4:56:80:41:3d:3c:73:
7d:6d:7c:1c:54:c1:f5:9e:0e:0e:d6:f8:27:85:22:
47:5e:d2:37:ae:51:15:5f:02:2c:9e:d6:f6:9d:ec:
38:8c:1d:83:42:51:db:c3:5f:c3:8e:58:db:ba:4c:
b2:1c:2d:20:d3:a3:d1:a8:c2:37:6d:65:ce:70:d4:
1d:79:7e:9e:a5:2c:1e:38:c0:6a:d9:9d:dd:a2:a8:
f1:21:f1:23:eb:55:a2:9d:5e:23:05:4c:0e:a4:2a:
b3:6d:cf:cf:ac:ce:f4:d1:6a:bf:41:28:09:de:a4:
a7:fb:bf:f6:bd:b8:6e:6b:58:43:6a:78:5b:7f:ea:
61:57:7c:a8:be:e8:68:fc:55:3d:c7:3d:3d:01:ae:
a9:cb:fe:cd:4e:93:88:59:e5:9c:9d:13:99:a4:e8:
b1:fd:9c:6c:89:9f:f7:8e:50:f5:27:8c:5c:d6:f1:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:35:EE:3B:92:91:8D:5C:78:EB:36:BA:6C:CB:08:2C:82:65:F8:F7
X509v3 Authority Key Identifier:
keyid:5B:D8:D7:2B:1C:BF:C6:7C:37:9A:D9:A9:2C:66:FA:C6:C8:D3:23:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9jXKxy_xnw3mtmpLGb6xsjTIzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/HjXuO5KRjVx46za6bMsILIJl-Pc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d296a8-a5b1-4a34-8128-89359e783224/1/W9jXKxy_xnw3mtmpLGb6xsjTIzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.177.144.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:1e:a5:e3:87:ee:d1:4a:56:ea:ad:6e:d6:cc:01:c5:db:b5:
ab:6d:89:56:26:41:09:ea:f0:3f:b2:2b:02:e7:19:00:c1:fd:
a8:0a:51:f6:40:97:ad:93:fb:0b:60:e8:66:6b:56:70:df:40:
3a:2b:6c:61:a2:ee:b8:0b:71:fe:2e:d7:9f:61:f3:25:1b:48:
06:10:66:58:2f:47:6b:7a:58:63:b6:66:e7:d3:d0:9e:a0:63:
e6:a3:c3:70:ac:e6:f7:5d:12:2e:37:cd:9c:d9:e9:04:86:97:
15:06:89:34:60:0c:f3:fe:7d:94:03:7b:7e:c3:ba:b3:f0:0f:
f9:d4:63:0d:a1:3d:9f:f0:36:0c:18:11:e2:56:c9:b7:c8:ec:
49:24:fe:23:dc:18:e6:71:29:4c:07:3f:e0:a4:c5:0d:c2:83:
99:7d:d1:8c:ad:f0:a1:de:9d:81:40:7b:06:d7:5b:fb:82:b3:
b9:32:37:58:d1:ba:d6:80:c9:f3:c8:30:a7:3e:40:33:b2:de:
fd:4e:88:c7:81:4d:24:4e:ee:da:3c:07:c9:65:ca:5d:f8:22:
dc:36:30:d0:a2:1e:34:ca:10:03:e5:df:74:da:4c:61:b4:f3:
9c:c2:e5:e8:57:7f:18:31:5b:7f:59:13:3b:eb:3f:98:98:d8:
38:ed:52:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzEk5Zb89hgEsGLWcBkbNv/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDhkNzJiMWNiZmM2N2MzNzlhZDlhOTJjNjZmYWM2Yzhk
MzIzM2EwHhcNMjQwMTAxMTAzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTM1ZWUzYjkyOTE4ZDVjNzhlYjM2YmE2Y2NiMDgyYzgyNjVmOGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKjZQ7xxkG7qfOTOp30Rq1SfdOCz
ri85c8cE+Xvz3zDS8Jj5+oloG+4kFTZjy7I7rmCgmKvQ7GCwoy3pLT5cj165fKl+
bvT+Q7bAf97buINVQ7RWgEE9PHN9bXwcVMH1ng4O1vgnhSJHXtI3rlEVXwIsntb2
new4jB2DQlHbw1/DjljbukyyHC0g06PRqMI3bWXOcNQdeX6epSweOMBq2Z3doqjx
IfEj61WinV4jBUwOpCqzbc/PrM700Wq/QSgJ3qSn+7/2vbhua1hDanhbf+phV3yo
vuho/FU9xz09Aa6py/7NTpOIWeWcnROZpOix/ZxsiZ/3jlD1J4xc1vFJJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB417juSkY1ceOs2umzLCCyCZfj3MB8GA1UdIwQY
MBaAFFvY1yscv8Z8N5rZqSxm+sbI0yM6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgt
ODkzNTllNzgzMjI0LzEvSGpYdU81S1JqVng0NnphNmJNc0lMSUpsLVBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi9kMjk2YTgtYTViMS00YTM0LTgxMjgtODkzNTllNzgzMjI0
LzEvVzlqWEt4eV94bnczbXRtcExHYjZ4c2pUSXpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCubGQMA0G
CSqGSIb3DQEBCwUAA4IBAQCtHqXjh+7RSlbqrW7WzAHF27WrbYlWJkEJ6vA/sisC
5xkAwf2oClH2QJetk/sLYOhma1Zw30A6K2xhou64C3H+LtefYfMlG0gGEGZYL0dr
elhjtmbn09CeoGPmo8NwrOb3XRIuN82c2ekEhpcVBok0YAzz/n2UA3t+w7qz8A/5
1GMNoT2f8DYMGBHiVsm3yOxJJP4j3BjmcSlMBz/gpMUNwoOZfdGMrfCh3p2BQHsG
11v7grO5MjdY0brWgMnzyDCnPkAzst79TojHgU0kTu7aPAfJZcpd+CLcNjDQoh40
yhAD5d902kxhtPOcwuXoV38YMVt/WRM76z+YmNg47VIb
-----END CERTIFICATE-----
Generated at Sun Jun 2 21:22:23 2024 by rpki-client on console-ams.rpki-client.org