Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/HMSp0nSO8Jx2JSNrWxMMm0lKJAA.roa
File: HMSp0nSO8Jx2JSNrWxMMm0lKJAA.roa (raw, json)
Hash identifier: hxRo97wOIN7gzbirHPlCn6szAWHNKxMl2Q5HEBdPqhU=
Subject key identifier: 1C:C4:A9:D2:74:8E:F0:9C:76:25:23:6B:5B:13:0C:9B:49:4A:24:00
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 01910CBEEC7954558F96A85908F7795281C3
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/HMSp0nSO8Jx2JSNrWxMMm0lKJAA.roa
Signing time: Thu 01 Aug 2024 07:02:04 +0000
ROA not before: Thu 01 Aug 2024 07:02:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62223
IP address blocks: 185.42.192.0/22 maxlen: 22
185.42.192.0/24 maxlen: 24
185.42.193.0/24 maxlen: 24
185.42.194.0/24 maxlen: 24
185.42.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 28 Nov 2024 08:27:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0c:be:ec:79:54:55:8f:96:a8:59:08:f7:79:52:81:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: Aug 1 07:02:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cc4a9d2748ef09c7625236b5b130c9b494a2400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c4:c7:c4:c6:42:a3:55:3c:18:64:27:fb:d5:
1d:af:b8:d5:c6:87:7d:72:db:4d:33:1c:1e:22:46:
55:04:48:c9:cd:90:50:45:2a:33:7b:6c:29:39:5d:
35:91:82:39:e7:7e:47:39:fa:05:a8:f1:70:89:77:
6b:73:cc:28:b2:7a:e5:60:80:84:11:8b:a9:8f:dc:
56:08:86:ff:c0:e2:62:5a:16:e2:60:1c:e8:be:cc:
3f:0a:fc:c2:68:63:ed:fc:49:b0:35:18:82:02:1a:
bc:98:0f:c0:3f:ac:f6:0d:e0:6d:f4:88:53:ec:ec:
97:11:19:b6:7a:a5:c7:74:72:f9:61:e4:67:72:e7:
5a:a9:40:36:62:bd:67:b6:a2:df:bf:7d:37:8e:da:
a1:34:a2:9f:dd:06:24:c9:75:8a:8e:2b:c9:fb:67:
e5:7b:24:79:68:ba:6c:44:a8:7d:c3:b0:3a:37:a6:
5e:a0:0a:ea:c3:0e:a3:44:d4:b3:a0:e0:bc:f2:3a:
68:21:7b:db:9f:bb:0e:5f:85:b9:2f:9f:6d:7b:b9:
bd:5e:0f:26:02:a6:d0:bd:cb:68:ef:d3:39:69:35:
bf:4e:10:6b:d2:1b:d8:af:e4:11:9d:c2:83:ee:02:
c9:40:85:5d:c9:6c:2a:5e:85:0a:48:17:87:61:e7:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C4:A9:D2:74:8E:F0:9C:76:25:23:6B:5B:13:0C:9B:49:4A:24:00
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/HMSp0nSO8Jx2JSNrWxMMm0lKJAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.42.192.0/22
Signature Algorithm: sha256WithRSAEncryption
03:5e:39:c6:cc:9f:57:8d:e6:7c:81:3f:2d:a0:96:80:ab:26:
1f:dd:8c:e7:a1:b4:e9:b8:10:01:a2:c1:a0:75:a6:39:a0:09:
75:80:a0:f8:4b:6f:f4:d8:cd:3a:dd:86:c9:e6:bc:fc:ec:d9:
c4:fd:fb:7c:43:ce:b3:7a:3f:ef:a4:82:ce:3e:61:94:91:c2:
3f:44:74:e3:82:84:e1:90:c5:3b:f8:10:11:ef:af:c6:c8:37:
3e:28:9b:12:7a:1c:84:9c:ae:d8:48:0f:4b:75:85:57:54:fb:
f2:f9:39:56:43:bc:e9:81:05:a3:4d:65:12:59:71:12:32:08:
9e:13:cd:7c:2c:7b:be:91:15:74:9d:a1:c6:6c:f7:da:b1:fb:
23:40:4c:9f:62:ed:c3:c6:74:9d:99:c4:82:0c:11:51:53:13:
62:73:dd:0d:3d:89:77:00:6a:c6:c2:f4:dc:9b:97:f9:5a:7f:
9b:df:74:15:9b:46:b7:18:5a:94:f8:03:66:34:71:f8:ca:db:
3c:ae:f7:1d:da:6e:34:cf:1f:55:3b:cf:9f:c8:d0:4f:7d:6a:
ff:e0:d6:54:14:ef:31:22:2f:4a:de:5e:1b:77:b7:3d:85:d4:
f7:de:3b:0c:db:b1:00:15:8d:5a:86:6e:44:a9:90:07:20:00:
69:d9:7a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 11:39:28 2024 by rpki-client on console-ams.rpki-client.org