Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/H3ja-_RpNJZ9XVHPpNArKTAr64A.roa
File: H3ja-_RpNJZ9XVHPpNArKTAr64A.roa (raw, json)
Hash identifier: U0ffCz+03xDi+ASWYMhIvpBZEJ2skYSY9b9r6mOI2U8=
Subject key identifier: 1F:78:DA:FB:F4:69:34:96:7D:5D:51:CF:A4:D0:2B:29:30:2B:EB:80
Certificate issuer: /CN=3a34889251e7cb133e906c70891ba1a0495ed860
Certificate serial: 018CC3B72DF933A9CF5824EE1B1D8CE6D524
Authority key identifier: 3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/H3ja-_RpNJZ9XVHPpNArKTAr64A.roa
Signing time: Mon 01 Jan 2024 06:30:11 +0000
ROA not before: Mon 01 Jan 2024 06:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212238
IP address blocks: 185.240.78.0/24 maxlen: 24
185.240.77.0/24 maxlen: 24
185.240.76.0/24 maxlen: 24
185.185.209.0/24 maxlen: 24
185.185.211.0/24 maxlen: 24
185.185.208.0/24 maxlen: 24
185.185.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:2d:f9:33:a9:cf:58:24:ee:1b:1d:8c:e6:d5:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a34889251e7cb133e906c70891ba1a0495ed860
Validity
Not Before: Jan 1 06:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f78dafbf46934967d5d51cfa4d02b29302beb80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:68:49:66:db:e8:26:86:8f:07:8b:56:f1:
05:27:e9:44:4c:c6:d7:3c:f1:ec:ec:5a:09:f8:54:
1e:23:de:a4:75:a8:59:32:07:41:87:17:fb:8f:e6:
cf:1e:72:fb:b0:d1:16:bc:b6:1c:cf:d5:19:7c:2c:
16:e7:a8:f7:1a:ab:0b:07:02:6f:85:6d:57:2a:a3:
3b:db:d0:c9:03:b1:de:b6:e1:0e:b0:1a:8d:08:e8:
01:30:f4:41:9b:f0:4b:a1:13:54:07:a6:c9:c5:c5:
4c:9d:8e:bc:78:c1:e5:e5:be:21:2e:5f:3e:c9:1d:
3b:a4:42:98:65:c9:d4:c2:ed:54:a8:21:04:06:db:
46:8f:ab:91:f9:37:01:2a:a0:4e:e0:7e:13:85:33:
c1:a5:29:c0:5c:8a:c9:ec:c7:91:aa:bd:c5:21:97:
07:f0:1a:27:6d:84:7f:c3:70:b3:f4:44:58:8c:c0:
9b:9c:6b:ba:0f:27:67:1f:69:a4:5c:57:b7:7c:15:
e4:14:06:c3:b7:a0:0b:2f:bd:03:cf:bc:13:b6:c7:
e2:f9:ff:35:d7:7a:f5:f2:0a:48:65:63:53:c1:fa:
f9:1a:c3:2b:1d:62:0c:3a:0c:73:48:75:a3:d3:d8:
f2:b7:9d:1c:69:87:e4:e4:f5:da:67:27:dd:56:7a:
74:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:78:DA:FB:F4:69:34:96:7D:5D:51:CF:A4:D0:2B:29:30:2B:EB:80
X509v3 Authority Key Identifier:
keyid:3A:34:88:92:51:E7:CB:13:3E:90:6C:70:89:1B:A1:A0:49:5E:D8:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OjSIklHnyxM-kGxwiRuhoEle2GA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/H3ja-_RpNJZ9XVHPpNArKTAr64A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/91182a-f34b-4a15-b363-84f9ed87ac31/1/OjSIklHnyxM-kGxwiRuhoEle2GA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.208.0/22
185.240.76.0-185.240.78.255
Signature Algorithm: sha256WithRSAEncryption
31:de:b2:1c:29:30:f2:c9:21:47:1c:3d:a6:f5:d5:ce:46:cd:
e7:7d:ae:ef:a6:c4:94:2a:6f:3d:17:a2:f0:d7:34:6b:25:fe:
1e:30:c2:59:ad:b9:7a:46:d1:78:0f:44:8d:13:90:08:cf:c8:
06:36:e6:d0:a2:a9:31:04:54:e1:59:a7:4b:e4:ca:06:fb:bd:
0d:65:6c:d8:20:7c:6b:8e:cc:a3:88:7e:1d:5d:f1:1b:08:8d:
1c:91:63:b1:68:da:1a:59:8b:da:21:b1:88:32:9a:40:fe:a7:
6b:7c:01:83:4a:38:c7:3a:e2:22:48:43:08:5d:51:09:fe:ff:
0d:e1:a3:ce:1c:98:a0:d5:73:cb:27:c7:75:e4:75:d8:82:10:
30:4d:b8:4a:fb:5f:da:d2:69:d9:cc:22:6b:ba:58:fb:4e:83:
7f:9b:83:7f:c1:a1:33:b7:24:cb:ab:07:dd:89:df:0b:36:c6:
be:a7:94:d2:3f:ed:6b:86:ab:6e:99:d1:0a:b4:26:b9:ea:76:
5f:c4:90:c8:b9:a5:e0:0d:c4:56:d9:eb:a8:85:51:b2:48:9c:
e1:2f:de:2b:bb:cc:67:73:ae:1d:02:4c:56:2b:ad:99:15:3e:
95:4b:36:13:d7:7b:ca:4a:0a:ce:4f:c9:f5:dc:f3:4d:39:1c:
4e:99:6f:0f
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAYzDty35M6nPWCTuGx2M5tUkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhMzQ4ODkyNTFlN2NiMTMzZTkwNmM3MDg5MWJhMWEwNDk1
ZWQ4NjAwHhcNMjQwMTAxMDYzMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZjc4ZGFmYmY0NjkzNDk2N2Q1ZDUxY2ZhNGQwMmIyOTMwMmJlYjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkRloSWbb6CaGjweLVvEFJ+lETMbX
PPHs7FoJ+FQeI96kdahZMgdBhxf7j+bPHnL7sNEWvLYcz9UZfCwW56j3GqsLBwJv
hW1XKqM729DJA7HetuEOsBqNCOgBMPRBm/BLoRNUB6bJxcVMnY68eMHl5b4hLl8+
yR07pEKYZcnUwu1UqCEEBttGj6uR+TcBKqBO4H4ThTPBpSnAXIrJ7MeRqr3FIZcH
8BonbYR/w3Cz9ERYjMCbnGu6DydnH2mkXFe3fBXkFAbDt6ALL70Dz7wTtsfi+f81
13r18gpIZWNTwfr5GsMrHWIMOgxzSHWj09jyt50caYfk5PXaZyfdVnp0WwIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFB942vv0aTSWfV1Rz6TQKykwK+uAMB8GA1UdIwQY
MBaAFDo0iJJR58sTPpBscIkboaBJXthgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMt
ODRmOWVkODdhYzMxLzEvSDNqYS1fUnBOSlo5WFZIUHBOQXJLVEFyNjRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS85MTE4MmEtZjM0Yi00YTE1LWIzNjMtODRmOWVkODdhYzMx
LzEvT2pTSWtsSG55eE0ta0d4d2lSdWhvRWxlMkdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQCubnQMAwD
BAK58EwDBAC58E4wDQYJKoZIhvcNAQELBQADggEBADHeshwpMPLJIUccPab11c5G
zed9ru+mxJQqbz0XovDXNGsl/h4wwlmtuXpG0XgPRI0TkAjPyAY25tCiqTEEVOFZ
p0vkygb7vQ1lbNggfGuOzKOIfh1d8RsIjRyRY7Fo2hpZi9ohsYgymkD+p2t8AYNK
OMc64iJIQwhdUQn+/w3ho84cmKDVc8snx3XkddiCEDBNuEr7X9rSadnMImu6WPtO
g3+bg3/BoTO3JMurB92J3ws2xr6nlNI/7WuGq26Z0Qq0Jrnqdl/EkMi5peANxFbZ
66iFUbJInOEv3iu7zGdzrh0CTFYrrZkVPpVLNhPXe8pKCs5PyfXc8005HE6Zbw8=
-----END CERTIFICATE-----
Generated at Sun Apr 28 10:11:38 2024 by rpki-client on console-ams.rpki-client.org