Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/huMljE-KYCIBJxVYEZ4-3Ji6nZo.roa
File: huMljE-KYCIBJxVYEZ4-3Ji6nZo.roa (raw, json)
Hash identifier: eHncgH3KnL5pAUNs7fGdnxrgNdt8uHvS1CR03pUHQXE=
Subject key identifier: 86:E3:25:8C:4F:8A:60:22:01:27:15:58:11:9E:3E:DC:98:BA:9D:9A
Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial: 018CC56E493A795A6CB50005423D7D1721B8
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/huMljE-KYCIBJxVYEZ4-3Ji6nZo.roa
Signing time: Mon 01 Jan 2024 14:29:48 +0000
ROA not before: Mon 01 Jan 2024 14:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198432
IP address blocks: 185.68.111.0/24 maxlen: 24
185.18.198.0/24 maxlen: 24
185.18.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:49:3a:79:5a:6c:b5:00:05:42:3d:7d:17:21:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Validity
Not Before: Jan 1 14:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86e3258c4f8a602201271558119e3edc98ba9d9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c2:10:47:2a:20:cb:d8:ec:a1:8d:06:0d:33:
bc:97:63:e5:5d:07:ec:38:89:ef:2b:a9:73:cd:4f:
33:b5:62:49:ea:65:2d:d6:3e:5e:ca:10:e0:f1:49:
46:ed:38:1c:95:f9:39:f7:cd:72:35:ef:ed:a2:f4:
c3:3c:cc:97:10:90:17:14:28:77:32:9d:1d:64:af:
e3:e7:a7:21:8a:d3:0c:56:d9:4a:cf:fb:b6:3f:fb:
0f:3f:86:4d:70:5a:8b:d0:08:b7:e2:8a:ab:9a:4e:
ec:18:2f:fd:ff:c5:11:3b:3c:6c:ee:72:6b:ca:dd:
af:af:82:30:f3:5e:d4:37:98:19:25:22:d9:36:f9:
55:53:ed:14:00:ce:a9:c1:04:c0:38:12:29:3d:4e:
5a:5b:05:6d:80:2d:af:54:16:28:be:53:07:f8:64:
77:a7:ae:3b:ee:c7:8c:3e:1a:96:df:6e:8b:f4:ae:
35:8c:19:58:15:38:d1:cd:06:a3:87:39:2e:cc:4e:
fa:16:a5:f6:7a:fa:eb:cf:b8:dd:e0:ed:7d:50:7a:
f7:05:94:b6:e4:ba:e3:b0:52:c3:6b:07:c2:67:e3:
4e:c1:97:7c:1c:b5:a4:31:a7:28:92:ed:58:49:e6:
b3:51:be:f4:0f:c8:0d:17:00:87:f0:73:7c:ca:45:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:E3:25:8C:4F:8A:60:22:01:27:15:58:11:9E:3E:DC:98:BA:9D:9A
X509v3 Authority Key Identifier:
keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/huMljE-KYCIBJxVYEZ4-3Ji6nZo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.198.0/23
185.68.111.0/24
Signature Algorithm: sha256WithRSAEncryption
41:cc:19:a4:9a:83:f2:5b:76:a2:b7:17:97:c4:56:d6:65:6c:
68:93:10:54:be:42:5a:14:1e:ed:4a:71:87:bf:b8:8e:e3:9e:
d9:20:2c:c4:7b:d2:8d:9f:fd:2e:c5:c6:d0:19:94:16:1c:4e:
00:b4:4e:b0:5a:4d:b2:80:47:10:34:75:3d:1d:f0:71:a5:17:
39:18:15:e6:14:da:f9:7b:a3:5a:19:d7:c2:7e:fc:b8:bb:e3:
eb:03:66:c1:b0:0b:5a:01:93:d9:d2:c4:50:a8:0e:e1:76:da:
db:62:16:83:3e:ff:1a:dc:28:91:9c:c6:d9:f7:5b:71:cb:a2:
38:f2:bf:f5:44:12:f1:d2:aa:b8:85:10:05:e0:f6:82:c3:49:
57:10:7e:a4:65:70:82:e1:60:a5:50:b3:f7:d8:75:2f:cf:a0:
24:c8:7a:86:4a:8f:8e:00:6c:81:d0:bb:b3:ed:7f:6e:6e:7d:
23:ba:c9:e3:8a:ce:86:9c:c9:7f:fb:67:18:4f:7c:0c:00:90:
b1:40:f9:7d:ad:3c:02:a2:0f:fd:b2:e1:2b:31:b2:a0:7a:7a:
10:88:ad:71:a6:38:ac:c2:63:37:34:b1:30:b6:ee:e6:03:a0:
75:b8:91:7f:cd:82:65:fc:03:a3:0e:f8:14:4f:a4:dc:b5:40:
63:c6:37:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:14:08 2024 by rpki-client on console-ams.rpki-client.org