Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/HUTFF8IkS3B-JeH8cwtH9bV0VjY.roa
File: HUTFF8IkS3B-JeH8cwtH9bV0VjY.roa (raw, json)
Hash identifier: iu76HbD21iMKvVW8kfYK44pBeVpUTBUmx07+9nMMUYg=
Subject key identifier: 1D:44:C5:17:C2:24:4B:70:7E:25:E1:FC:73:0B:47:F5:B5:74:56:36
Certificate issuer: /CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Certificate serial: 018CC3B6EF97209FCF7AA6F76F4F0231B3F1
Authority key identifier: CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/HUTFF8IkS3B-JeH8cwtH9bV0VjY.roa
Signing time: Mon 01 Jan 2024 06:29:55 +0000
ROA not before: Mon 01 Jan 2024 06:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15943
IP address blocks: 194.55.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:ef:97:20:9f:cf:7a:a6:f7:6f:4f:02:31:b3:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf8975746cbf1ff75ddec6cdb80acc85218184ce
Validity
Not Before: Jan 1 06:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d44c517c2244b707e25e1fc730b47f5b5745636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:74:9d:94:2f:2c:a1:95:b9:b2:1e:ba:c2:ef:
c9:fe:5c:d3:12:81:1d:03:94:93:11:28:c0:31:bd:
8a:2d:e7:c8:e0:8d:61:ae:e2:8f:11:09:20:56:09:
f5:3c:99:51:38:5d:28:dc:0f:fb:f3:c4:f0:53:68:
8f:d0:04:d7:d2:59:c5:9f:04:30:fc:5f:c9:d2:4c:
5b:61:89:b6:c1:6b:91:eb:d7:69:fc:11:de:2f:bf:
32:ae:21:3f:d0:c2:e5:6d:18:e8:2d:a7:c7:3d:7e:
d1:3f:d8:c1:7c:a2:6f:02:bb:28:66:e2:7d:10:37:
85:ea:70:c5:71:94:b9:85:bc:90:0b:f8:a0:26:c7:
13:f3:a9:1c:09:71:e6:20:05:d7:22:a8:9d:07:47:
a2:c3:24:c1:38:b4:50:b9:85:fd:65:3f:6d:2c:cf:
b1:1c:bc:79:ac:cf:32:85:1a:96:53:ac:7b:85:fe:
a6:0b:7b:54:40:d3:48:7d:16:59:9b:b4:63:aa:cc:
77:27:8f:8e:3e:f3:73:6c:59:1a:39:41:d5:3d:a6:
5f:f6:43:99:69:76:6d:fd:15:60:67:51:64:b2:52:
c8:61:d7:63:85:ed:82:e9:cc:f6:64:2e:af:0c:ed:
16:f9:d7:d0:cd:15:6d:bf:90:92:20:a9:3d:a7:86:
ee:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:44:C5:17:C2:24:4B:70:7E:25:E1:FC:73:0B:47:F5:B5:74:56:36
X509v3 Authority Key Identifier:
keyid:CF:89:75:74:6C:BF:1F:F7:5D:DE:C6:CD:B8:0A:CC:85:21:81:84:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z4l1dGy_H_dd3sbNuArMhSGBhM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/HUTFF8IkS3B-JeH8cwtH9bV0VjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/a1cd9c-c31e-4abf-b089-9e792b6f235d/1/z4l1dGy_H_dd3sbNuArMhSGBhM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.144.0/22
Signature Algorithm: sha256WithRSAEncryption
90:95:28:ee:2c:40:43:92:b4:98:3f:e1:93:62:d6:15:9e:6c:
f2:9f:ee:a3:9b:c9:0a:09:a7:b3:7e:e3:ec:ab:c3:01:20:1c:
a0:b9:78:0b:de:6d:3c:36:01:4c:6d:8b:9f:62:a7:5e:55:02:
d7:dc:1f:3e:1d:6c:b0:36:f9:12:d1:72:42:32:b2:a0:ef:91:
b1:88:59:1f:ec:d0:8c:53:db:24:07:58:8a:59:7c:e1:7b:f3:
60:8b:b2:a0:29:d4:61:74:6f:9e:87:21:43:1e:e8:c6:c9:ae:
7e:dc:ea:c3:95:a2:1f:01:08:0e:1a:10:2e:d7:ca:88:18:f7:
b4:c2:d6:7c:08:c4:f0:44:d2:50:f1:20:05:4f:5c:dc:d7:3c:
6e:0d:71:58:7a:0d:1f:ae:04:59:4d:e3:b5:08:78:2a:b0:00:
18:fa:dd:88:b1:c3:87:da:dd:39:d2:4a:f8:bf:90:a8:ff:a6:
07:66:c6:fd:36:1d:36:e5:c6:35:57:20:46:e2:0f:e7:02:a2:
53:ba:44:47:2c:4a:73:a0:9b:d8:7f:cb:9a:b5:a6:86:a5:19:
b3:bc:03:3d:44:56:4c:aa:31:2a:07:9e:24:53:df:41:5d:df:
34:c7:8b:d5:3f:61:8a:fb:a3:07:5f:99:0a:5b:6b:d5:6a:25:
51:71:42:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDtu+XIJ/Peqb3b08CMbPxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmODk3NTc0NmNiZjFmZjc1ZGRlYzZjZGI4MGFjYzg1MjE4
MTg0Y2UwHhcNMjQwMTAxMDYyOTU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDQ0YzUxN2MyMjQ0YjcwN2UyNWUxZmM3MzBiNDdmNWI1NzQ1NjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXSdlC8soZW5sh66wu/J/lzTEoEd
A5STESjAMb2KLefI4I1hruKPEQkgVgn1PJlROF0o3A/788TwU2iP0ATX0lnFnwQw
/F/J0kxbYYm2wWuR69dp/BHeL78yriE/0MLlbRjoLafHPX7RP9jBfKJvArsoZuJ9
EDeF6nDFcZS5hbyQC/igJscT86kcCXHmIAXXIqidB0eiwyTBOLRQuYX9ZT9tLM+x
HLx5rM8yhRqWU6x7hf6mC3tUQNNIfRZZm7Rjqsx3J4+OPvNzbFkaOUHVPaZf9kOZ
aXZt/RVgZ1FkslLIYddjhe2C6cz2ZC6vDO0W+dfQzRVtv5CSIKk9p4buDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB1ExRfCJEtwfiXh/HMLR/W1dFY2MB8GA1UdIwQY
MBaAFM+JdXRsvx/3Xd7GzbgKzIUhgYTOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODkt
OWU3OTJiNmYyMzVkLzEvSFVURkY4SWtTM0ItSmVIOGN3dEg5YlYwVmpZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9hMWNkOWMtYzMxZS00YWJmLWIwODktOWU3OTJiNmYyMzVk
LzEvejRsMWRHeV9IX2RkM3NiTnVBck1oU0dCaE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwjeQMA0G
CSqGSIb3DQEBCwUAA4IBAQCQlSjuLEBDkrSYP+GTYtYVnmzyn+6jm8kKCaezfuPs
q8MBIByguXgL3m08NgFMbYufYqdeVQLX3B8+HWywNvkS0XJCMrKg75GxiFkf7NCM
U9skB1iKWXzhe/Ngi7KgKdRhdG+ehyFDHujGya5+3OrDlaIfAQgOGhAu18qIGPe0
wtZ8CMTwRNJQ8SAFT1zc1zxuDXFYeg0frgRZTeO1CHgqsAAY+t2IscOH2t050kr4
v5Co/6YHZsb9Nh025cY1VyBG4g/nAqJTukRHLEpzoJvYf8uataaGpRmzvAM9RFZM
qjEqB54kU99BXd80x4vVP2GK+6MHX5kKW2vVaiVRcUIX
-----END CERTIFICATE-----
Generated at Fri Jun 7 19:25:02 2024 by rpki-client on console-ams.rpki-client.org