Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eef304-a06a-449c-a37c-8bf488610bf5/1/Hi4A_2gs527rN0LUTN-EDHuQDfU.roa
File: Hi4A_2gs527rN0LUTN-EDHuQDfU.roa (raw, json)
Hash identifier: mCDAqCpV9BysnUFLrO00NPqSyeRRGaJbtjg/buAe+Z4=
Subject key identifier: 1E:2E:00:FF:68:2C:E7:6E:EB:37:42:D4:4C:DF:84:0C:7B:90:0D:F5
Certificate issuer: /CN=6dc66ca5c9e769ce919334fb1f66c8bd9fcaae96
Certificate serial: 018CC3491A3691C921264975F824AAB89691
Authority key identifier: 6D:C6:6C:A5:C9:E7:69:CE:91:93:34:FB:1F:66:C8:BD:9F:CA:AE:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcZspcnnac6RkzT7H2bIvZ_KrpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eef304-a06a-449c-a37c-8bf488610bf5/1/Hi4A_2gs527rN0LUTN-EDHuQDfU.roa
Signing time: Mon 01 Jan 2024 04:29:57 +0000
ROA not before: Mon 01 Jan 2024 04:29:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39855
IP address blocks: 185.94.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eef304-a06a-449c-a37c-8bf488610bf5/1/bcZspcnnac6RkzT7H2bIvZ_KrpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eef304-a06a-449c-a37c-8bf488610bf5/1/bcZspcnnac6RkzT7H2bIvZ_KrpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bcZspcnnac6RkzT7H2bIvZ_KrpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:1a:36:91:c9:21:26:49:75:f8:24:aa:b8:96:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc66ca5c9e769ce919334fb1f66c8bd9fcaae96
Validity
Not Before: Jan 1 04:29:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e2e00ff682ce76eeb3742d44cdf840c7b900df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:53:7d:04:77:9a:b5:a3:7f:ac:9e:27:25:
17:8d:cc:f2:f2:9d:bf:b5:f1:7c:a7:16:bb:8e:53:
45:38:fa:e6:87:bb:15:20:42:1a:ff:68:3e:8a:6d:
17:9a:a9:2b:37:0c:4a:b1:f5:1d:09:f9:09:e8:15:
1e:80:23:95:60:de:43:86:d2:d9:44:13:df:58:09:
ea:2c:fe:49:d5:05:f6:e2:a1:e7:21:84:89:81:0e:
79:8e:46:02:ec:ab:38:6e:e0:49:ac:bd:f9:38:35:
33:5a:a2:0d:85:ae:4a:08:04:a4:fc:61:8a:f1:9e:
94:b2:89:ca:f3:bb:6d:ee:11:4c:f8:7e:84:a0:70:
69:48:ca:16:b8:17:f1:1b:b7:05:77:76:7a:b9:dc:
be:a0:12:a0:cb:08:2d:5c:62:0f:14:51:c4:0d:97:
0b:54:7c:cd:3c:67:3d:b6:83:4b:d7:00:39:a3:d1:
e5:bf:35:8e:75:7c:41:c9:84:9e:1b:49:38:85:da:
a7:9b:42:c5:b9:12:06:f1:3a:13:e6:4f:d2:ae:01:
b4:68:7b:ca:8d:3c:92:01:2c:d5:a0:4d:b5:4a:8c:
eb:ca:bf:8a:17:99:48:6d:ff:a0:c1:15:c2:c4:2d:
f6:75:b5:90:f7:81:52:a6:3c:7b:47:b6:16:e4:0f:
e6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2E:00:FF:68:2C:E7:6E:EB:37:42:D4:4C:DF:84:0C:7B:90:0D:F5
X509v3 Authority Key Identifier:
keyid:6D:C6:6C:A5:C9:E7:69:CE:91:93:34:FB:1F:66:C8:BD:9F:CA:AE:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcZspcnnac6RkzT7H2bIvZ_KrpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eef304-a06a-449c-a37c-8bf488610bf5/1/Hi4A_2gs527rN0LUTN-EDHuQDfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eef304-a06a-449c-a37c-8bf488610bf5/1/bcZspcnnac6RkzT7H2bIvZ_KrpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.66.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:d6:a8:88:81:d9:01:42:77:b4:db:22:1c:41:0a:ea:5e:60:
15:cf:c2:39:d2:3d:b4:8c:7a:36:d6:b4:86:e4:d0:42:0c:84:
6f:4e:e5:92:dc:b5:9b:dd:e1:04:83:b9:c5:c3:ca:89:42:a6:
02:d1:a3:4c:60:a0:2e:58:b6:8d:35:04:19:c9:bb:e7:99:52:
bd:d8:53:6f:e2:50:55:92:69:78:50:c8:8f:0c:7a:f6:c9:5b:
48:79:78:4d:e9:95:13:04:d0:d6:b1:9f:7c:69:0f:5f:f9:1c:
c9:f6:fd:22:fa:d5:2c:75:a0:19:88:70:b5:23:04:51:6c:64:
12:97:5d:b5:ed:4d:c4:40:ec:eb:cc:cd:38:fe:a6:f7:ae:1d:
30:0f:10:55:4b:95:d0:5c:82:48:8e:cf:5c:e0:9c:df:14:0f:
f2:b3:81:f7:4f:15:84:b5:cd:4f:4c:d0:ff:2b:5e:e4:da:ed:
75:ae:2c:4b:82:1b:78:41:1c:ad:fc:a7:d9:ca:45:25:b5:f2:
02:da:16:8d:3b:5d:92:4e:7c:16:79:bd:11:1e:70:27:e7:f1:
79:11:e2:c5:d2:58:83:cb:03:58:7a:91:03:d4:43:b8:bf:f6:
2f:84:fc:ee:cc:76:98:ce:37:7a:e5:5d:22:4c:ad:0c:d4:78:
e3:61:c1:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSRo2kckhJkl1+CSquJaRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkYzY2Y2E1YzllNzY5Y2U5MTkzMzRmYjFmNjZjOGJkOWZj
YWFlOTYwHhcNMjQwMTAxMDQyOTU3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTJlMDBmZjY4MmNlNzZlZWIzNzQyZDQ0Y2RmODQwYzdiOTAwZGY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8hTfQR3mrWjf6yeJyUXjczy8p2/
tfF8pxa7jlNFOPrmh7sVIEIa/2g+im0XmqkrNwxKsfUdCfkJ6BUegCOVYN5DhtLZ
RBPfWAnqLP5J1QX24qHnIYSJgQ55jkYC7Ks4buBJrL35ODUzWqINha5KCASk/GGK
8Z6UsonK87tt7hFM+H6EoHBpSMoWuBfxG7cFd3Z6udy+oBKgywgtXGIPFFHEDZcL
VHzNPGc9toNL1wA5o9HlvzWOdXxByYSeG0k4hdqnm0LFuRIG8ToT5k/SrgG0aHvK
jTySASzVoE21Sozryr+KF5lIbf+gwRXCxC32dbWQ94FSpjx7R7YW5A/mswIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB4uAP9oLOdu6zdC1EzfhAx7kA31MB8GA1UdIwQY
MBaAFG3GbKXJ52nOkZM0+x9myL2fyq6WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmNac3Bjbm5hYzZSa3pUN0gyYkl2Wl9LcnBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9lZWYzMDQtYTA2YS00NDljLWEzN2Mt
OGJmNDg4NjEwYmY1LzEvSGk0QV8yZ3M1MjdyTjBMVVROLUVESHVRRGZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9lZWYzMDQtYTA2YS00NDljLWEzN2MtOGJmNDg4NjEwYmY1
LzEvYmNac3Bjbm5hYzZSa3pUN0gyYkl2Wl9LcnBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuV5CMA0G
CSqGSIb3DQEBCwUAA4IBAQAa1qiIgdkBQne02yIcQQrqXmAVz8I50j20jHo21rSG
5NBCDIRvTuWS3LWb3eEEg7nFw8qJQqYC0aNMYKAuWLaNNQQZybvnmVK92FNv4lBV
kml4UMiPDHr2yVtIeXhN6ZUTBNDWsZ98aQ9f+RzJ9v0i+tUsdaAZiHC1IwRRbGQS
l1217U3EQOzrzM04/qb3rh0wDxBVS5XQXIJIjs9c4JzfFA/ys4H3TxWEtc1PTND/
K17k2u11rixLght4QRyt/KfZykUltfIC2haNO12STnwWeb0RHnAn5/F5EeLF0liD
ywNYepED1EO4v/YvhPzuzHaYzjd65V0iTK0M1HjjYcFD
-----END CERTIFICATE-----
Generated at Fri May 10 11:48:31 2024 by rpki-client on console-fra.rpki-client.org