Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/HBLcsyu0jJir52V3Mrk2qgpXI_c.roa
File: HBLcsyu0jJir52V3Mrk2qgpXI_c.roa (raw, json)
Hash identifier: l2wV2l4200L73DVOplI/oUf2wh0Ewmc0mCnfbR2VpCI=
Subject key identifier: 1C:12:DC:B3:2B:B4:8C:98:AB:E7:65:77:32:B9:36:AA:0A:57:23:F7
Certificate issuer: /CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Certificate serial: 018CC8DE14CADF8439056AB3531F1D9D47C3
Authority key identifier: 28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/HBLcsyu0jJir52V3Mrk2qgpXI_c.roa
Signing time: Tue 02 Jan 2024 06:30:46 +0000
ROA not before: Tue 02 Jan 2024 06:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 45.150.175.0/24 maxlen: 24
193.239.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 16:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:14:ca:df:84:39:05:6a:b3:53:1f:1d:9d:47:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28107ab6921ef8cb2deca3eb766478cff3e5fc6d
Validity
Not Before: Jan 2 06:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c12dcb32bb48c98abe7657732b936aa0a5723f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:08:77:c5:79:1b:cd:0d:ae:30:c9:83:1d:d8:
35:0d:66:ed:d5:41:d7:f8:68:be:23:b1:a7:9f:fb:
53:84:c1:f9:a2:07:81:42:da:22:b6:30:16:a9:27:
61:27:52:9d:7f:c1:da:ef:f3:54:f4:a9:53:25:6e:
75:92:bc:bd:c3:ab:e9:6d:35:35:0a:50:4b:59:f5:
83:05:5a:fa:17:14:ba:a4:55:b6:1b:f9:73:33:1b:
1e:b4:c8:1e:9b:12:9f:31:fa:33:1c:06:98:55:54:
1b:58:82:86:0b:ad:a8:b6:f5:25:f7:fe:22:11:9a:
a0:b9:78:9c:58:73:de:b7:e7:e7:a0:ce:ee:3e:7e:
64:25:0e:c6:ab:71:41:97:95:f5:d6:3d:1a:6a:46:
00:9a:81:ee:dd:cf:df:28:ac:da:cc:e9:a5:74:9d:
e1:d2:b4:a8:6b:16:5b:10:92:67:96:45:e8:22:fb:
d4:fc:db:62:70:b1:ee:d8:3f:95:fd:2f:38:89:86:
ed:5b:0a:c3:8c:ef:e8:41:c6:b4:95:f5:78:1d:92:
7e:bf:74:a1:4c:d5:6a:4c:36:50:1b:81:e2:c0:37:
0d:d2:0f:41:d1:72:ad:2b:be:28:bb:9a:e7:19:33:
15:88:c5:1a:20:4d:cb:51:3f:09:63:57:73:d8:00:
94:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:12:DC:B3:2B:B4:8C:98:AB:E7:65:77:32:B9:36:AA:0A:57:23:F7
X509v3 Authority Key Identifier:
keyid:28:10:7A:B6:92:1E:F8:CB:2D:EC:A3:EB:76:64:78:CF:F3:E5:FC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/HBLcsyu0jJir52V3Mrk2qgpXI_c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/08826e-77d0-437b-a1c2-c0fb3ef7640e/1/KBB6tpIe-Mst7KPrdmR4z_Pl_G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.150.175.0/24
193.239.197.0/24
Signature Algorithm: sha256WithRSAEncryption
68:62:cb:ff:42:ae:d7:d3:20:76:b6:b2:59:05:94:ea:47:c7:
75:5b:d1:60:d2:22:98:25:ad:bb:71:0c:81:c5:2f:1d:b5:ed:
8b:f6:3e:34:25:f6:93:9d:0b:5c:04:b2:2f:a8:55:ec:64:f2:
57:b2:d9:63:7f:43:ca:81:41:c7:6f:85:f9:eb:ef:48:7b:c5:
e7:cc:89:37:e4:0c:0a:b7:5c:87:a3:b9:42:49:bd:94:7c:5e:
48:c0:d1:8e:b9:3f:48:94:c7:41:3a:ba:95:44:d6:5e:1a:a8:
17:e5:2c:0e:4a:32:58:ef:6a:ab:7a:5b:de:a5:47:3c:e3:b3:
d7:bd:8b:6d:eb:df:a2:3c:92:8a:7c:4b:05:8e:26:73:bf:e3:
10:bc:a4:6f:f9:a3:a1:bb:1e:bf:ff:e8:18:d2:97:c2:44:39:
00:79:ad:bb:fb:15:d5:9a:3c:ea:3c:4b:ad:3b:02:3d:eb:40:
28:85:68:87:92:6c:1b:e5:49:89:47:94:99:76:81:50:60:6c:
2a:20:58:97:c9:a6:8c:cb:73:62:44:36:0f:41:c5:b4:08:d4:
a8:78:45:2e:c7:46:7e:93:cd:be:f7:b0:b3:50:37:9d:62:c2:
68:2a:c0:16:18:2f:dd:b0:23:e2:f1:4e:12:f3:6a:58:02:c9:
8f:86:09:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 22:58:42 2024 by rpki-client on console-ams.rpki-client.org