Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/HNHIvQsW7EvpyA_AZAmPZBSO0KA.roa
File: HNHIvQsW7EvpyA_AZAmPZBSO0KA.roa (raw, json)
Hash identifier: JdEA+/QdXJpwY1zZPPq+pYJ9EzRx+ZvKYc2JSeBFVgc=
Subject key identifier: 1C:D1:C8:BD:0B:16:EC:4B:E9:C8:0F:C0:64:09:8F:64:14:8E:D0:A0
Certificate issuer: /CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Certificate serial: 018CC8DF1B776722CFB3EE38E4B28EB87DC3
Authority key identifier: 4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/HNHIvQsW7EvpyA_AZAmPZBSO0KA.roa
Signing time: Tue 02 Jan 2024 06:31:53 +0000
ROA not before: Tue 02 Jan 2024 06:31:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39216
IP address blocks: 185.222.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:1b:77:67:22:cf:b3:ee:38:e4:b2:8e:b8:7d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee0b21c89a302be9dc03870c098f23280304b0f
Validity
Not Before: Jan 2 06:31:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cd1c8bd0b16ec4be9c80fc064098f64148ed0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ce:50:e4:06:50:92:cc:d4:dd:01:32:04:4d:
44:e6:9c:5e:cc:c6:8d:b3:38:71:6d:35:fa:9b:cc:
dc:b1:b7:58:6d:db:1b:2e:25:f4:e6:13:dd:cf:34:
d1:4c:1a:c4:2a:d8:1c:8e:ca:d1:e8:16:7c:92:4d:
db:b0:6e:41:e4:fa:d1:b0:20:ab:31:52:cc:c1:e1:
1b:2f:ee:9c:ce:39:7f:6f:87:53:e5:7e:55:a5:e6:
8d:a5:ee:76:71:30:e6:7c:b1:fc:b2:06:eb:59:b0:
85:3b:1f:e0:ce:1a:7c:40:44:68:b8:f1:71:f9:52:
95:92:92:8e:7b:9c:e7:49:58:7e:0d:6c:a6:1a:49:
6b:bf:df:a3:31:cf:49:c9:3c:ee:89:f4:73:53:6b:
08:d5:9d:f5:91:51:e8:c5:dc:f1:eb:54:21:5d:7d:
70:20:bb:0a:1c:5e:11:7d:32:41:e2:75:1d:65:d9:
95:d2:92:6d:86:94:ca:a4:56:06:a2:45:57:93:a9:
68:ae:32:89:25:46:17:b0:f1:bb:73:0b:14:c3:da:
92:26:b2:ed:ec:b1:24:54:d7:ad:b3:b2:f8:6f:e5:
c4:fb:f1:a1:14:d5:21:7d:ca:c7:96:28:f8:a8:2d:
5d:50:45:66:18:1b:7c:eb:c5:19:bc:3f:ec:56:44:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D1:C8:BD:0B:16:EC:4B:E9:C8:0F:C0:64:09:8F:64:14:8E:D0:A0
X509v3 Authority Key Identifier:
keyid:4E:E0:B2:1C:89:A3:02:BE:9D:C0:38:70:C0:98:F2:32:80:30:4B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuCyHImjAr6dwDhwwJjyMoAwSw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/HNHIvQsW7EvpyA_AZAmPZBSO0KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fa278b-1246-48e3-9a05-509611b59c4a/1/TuCyHImjAr6dwDhwwJjyMoAwSw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.20.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:61:46:bb:1c:ca:35:63:79:91:4c:04:f4:27:43:0f:3b:e1:
4c:3e:4e:16:ed:99:f1:d2:c9:4d:2f:8f:a0:e5:f1:f9:f8:88:
2d:a2:5b:ce:d7:f6:1f:b1:5d:20:1a:bd:c2:dc:ff:c6:2e:66:
db:e4:e5:4f:85:51:d9:13:b3:79:76:b9:71:a0:fa:c9:cc:c2:
f3:4b:fa:f7:55:fc:a4:95:68:ee:38:1b:fe:d3:4b:3b:be:8c:
37:ea:64:62:58:b7:0b:6c:38:1f:a9:bb:b7:5b:88:2d:c8:cb:
d4:f6:92:a5:b6:7d:ad:24:f5:ec:9f:44:85:b8:70:51:a2:20:
6e:13:30:19:76:8d:65:4f:7d:e6:62:cd:c8:f5:1f:09:14:53:
bb:be:fa:32:34:4a:d7:fb:67:6e:05:eb:75:ad:ba:ec:8f:16:
06:5a:ca:b2:74:e1:3a:80:24:b7:55:52:af:c7:ec:73:ee:74:
dd:b6:71:51:95:4a:c8:01:fa:f8:e9:e1:87:03:a0:13:88:fc:
ff:75:ed:4d:1f:1b:8e:5e:ac:06:f4:ac:1c:63:cd:8c:d1:74:
74:73:02:d2:21:d6:4f:5b:3c:34:20:34:a4:61:bd:d1:71:f9:
8b:be:2c:5a:de:3d:ff:44:40:02:6c:2f:6a:fd:d6:b0:d8:5c:
4a:98:8e:9f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzI3xt3ZyLPs+445LKOuH3DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlZTBiMjFjODlhMzAyYmU5ZGMwMzg3MGMwOThmMjMyODAz
MDRiMGYwHhcNMjQwMTAyMDYzMTUzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2QxYzhiZDBiMTZlYzRiZTljODBmYzA2NDA5OGY2NDE0OGVkMGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn85Q5AZQkszU3QEyBE1E5pxezMaN
szhxbTX6m8zcsbdYbdsbLiX05hPdzzTRTBrEKtgcjsrR6BZ8kk3bsG5B5PrRsCCr
MVLMweEbL+6czjl/b4dT5X5VpeaNpe52cTDmfLH8sgbrWbCFOx/gzhp8QERouPFx
+VKVkpKOe5znSVh+DWymGklrv9+jMc9JyTzuifRzU2sI1Z31kVHoxdzx61QhXX1w
ILsKHF4RfTJB4nUdZdmV0pJthpTKpFYGokVXk6lorjKJJUYXsPG7cwsUw9qSJrLt
7LEkVNets7L4b+XE+/GhFNUhfcrHlij4qC1dUEVmGBt868UZvD/sVkRqeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBzRyL0LFuxL6cgPwGQJj2QUjtCgMB8GA1UdIwQY
MBaAFE7gshyJowK+ncA4cMCY8jKAMEsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHVDeUhJbWpBcjZkd0Rod3dKanlNb0F3U3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mYTI3OGItMTI0Ni00OGUzLTlhMDUt
NTA5NjExYjU5YzRhLzEvSE5ISXZRc1c3RXZweUFfQVpBbVBaQlNPMEtBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mYTI3OGItMTI0Ni00OGUzLTlhMDUtNTA5NjExYjU5YzRh
LzEvVHVDeUhJbWpBcjZkd0Rod3dKanlNb0F3U3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAud4UMA0G
CSqGSIb3DQEBCwUAA4IBAQCPYUa7HMo1Y3mRTAT0J0MPO+FMPk4W7Znx0slNL4+g
5fH5+IgtolvO1/YfsV0gGr3C3P/GLmbb5OVPhVHZE7N5drlxoPrJzMLzS/r3Vfyk
lWjuOBv+00s7vow36mRiWLcLbDgfqbu3W4gtyMvU9pKltn2tJPXsn0SFuHBRoiBu
EzAZdo1lT33mYs3I9R8JFFO7vvoyNErX+2duBet1rbrsjxYGWsqydOE6gCS3VVKv
x+xz7nTdtnFRlUrIAfr46eGHA6ATiPz/de1NHxuOXqwG9KwcY82M0XR0cwLSIdZP
Wzw0IDSkYb3RcfmLvixa3j3/REACbC9q/daw2FxKmI6f
-----END CERTIFICATE-----
Generated at Wed May 15 16:23:05 2024 by rpki-client on console-ams.rpki-client.org