Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/HAoocx5ZYE9ZWccmSqMIwInwTZ8.roa
File: HAoocx5ZYE9ZWccmSqMIwInwTZ8.roa (raw, json)
Hash identifier: cYCQSBHROs/+MrytOkkgCEzhDwX3BwfjosS4rAQszJM=
Subject key identifier: 1C:0A:28:73:1E:59:60:4F:59:59:C7:26:4A:A3:08:C0:89:F0:4D:9F
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 018CC64B84E085CDD66843E70553A67D4545
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/HAoocx5ZYE9ZWccmSqMIwInwTZ8.roa
Signing time: Mon 01 Jan 2024 18:31:27 +0000
ROA not before: Mon 01 Jan 2024 18:31:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15457
IP address blocks: 89.109.64.0/18 maxlen: 18
188.125.192.0/19 maxlen: 19
185.80.76.0/22 maxlen: 22
213.138.224.0/19 maxlen: 19
95.172.160.0/19 maxlen: 19
213.190.192.0/19 maxlen: 19
159.255.48.0/20 maxlen: 20
83.223.160.0/19 maxlen: 19
84.23.192.0/19 maxlen: 19
2a00:d180::/29 maxlen: 29
2a00:d180::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:84:e0:85:cd:d6:68:43:e7:05:53:a6:7d:45:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Jan 1 18:31:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c0a28731e59604f5959c7264aa308c089f04d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:a3:ed:91:da:3f:4b:bf:fe:ae:0a:7c:03:86:
5e:54:2f:47:ec:47:60:02:94:cb:ce:dc:47:f2:bb:
fb:55:6f:bf:4d:32:82:82:df:0c:b7:2c:6b:2a:b1:
0a:6b:e2:39:b0:87:d0:69:e1:45:1c:2c:5b:6d:a9:
20:cd:be:1c:7f:c1:6d:7f:e3:5a:57:99:77:54:e2:
4f:da:42:38:af:6f:05:27:1d:2e:9b:ed:0c:f8:d5:
14:4d:6c:a0:22:dc:96:dd:3c:3e:1f:e7:21:2b:e9:
28:31:9d:9c:10:8d:c1:8e:91:2e:05:fb:2e:7d:80:
da:61:0b:d4:a9:85:ca:d0:98:0b:65:07:cb:ad:0b:
e6:89:79:af:8b:d3:9a:49:f9:32:13:f2:03:c7:9b:
63:49:c0:19:29:57:98:66:fe:f8:a2:27:5f:bf:98:
10:f1:49:28:81:a0:b7:89:2e:c4:ef:ee:1e:68:fc:
cc:b0:bd:49:d8:09:20:10:ba:82:3a:89:b2:d8:56:
ce:67:4d:ac:7c:8d:87:2b:8d:df:22:6a:20:99:b4:
57:34:d1:e3:2c:65:b8:23:54:f0:2c:8d:43:45:7d:
ea:82:74:00:4e:e6:81:7e:6f:0d:4b:b7:4e:00:78:
e6:16:11:17:d9:63:98:06:1a:59:90:c0:ae:24:21:
80:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:0A:28:73:1E:59:60:4F:59:59:C7:26:4A:A3:08:C0:89:F0:4D:9F
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/HAoocx5ZYE9ZWccmSqMIwInwTZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.223.160.0/19
84.23.192.0/19
89.109.64.0/18
95.172.160.0/19
159.255.48.0/20
185.80.76.0/22
188.125.192.0/19
213.138.224.0/19
213.190.192.0/19
IPv6:
2a00:d180::/29
Signature Algorithm: sha256WithRSAEncryption
3d:b2:e6:d4:4e:dd:5f:6e:e5:0b:18:52:ab:bd:6d:18:c3:92:
e2:d3:74:3f:d8:b1:40:14:f2:7e:5c:e2:26:30:7f:9d:4a:af:
14:da:77:8d:34:bf:e3:b9:84:61:45:98:65:f9:0d:38:46:26:
bf:d4:c8:cc:4d:18:94:6d:57:cc:3d:b8:b6:a4:a8:3e:c5:da:
07:c0:30:7b:70:6e:d0:35:05:e0:67:5c:39:50:2d:61:8a:c7:
fa:6f:16:02:6a:ac:93:12:c1:e1:ef:e3:ec:99:cb:b9:d6:08:
09:8c:3f:5e:f8:00:73:c5:85:ed:92:21:56:f0:f5:1c:6b:a2:
87:d4:08:fe:ec:b7:7c:3a:78:49:a9:6a:12:46:3e:60:12:97:
b7:66:50:23:3a:10:19:88:15:30:53:07:23:a0:d4:ff:a8:48:
1a:6d:f1:b5:f1:0e:77:99:67:cf:a6:b2:5d:e9:0b:62:6a:0f:
95:bb:e4:3c:9a:da:1d:32:ee:bf:a9:63:56:2c:97:be:9f:c1:
6f:bd:d0:ac:a5:ce:51:28:1c:30:5b:d7:da:0f:d2:9a:10:0a:
d2:ff:74:13:a6:fc:01:6d:9f:26:d5:3a:c5:a4:33:1f:5d:31:
3a:ee:7a:c6:f4:1c:11:dc:06:76:2f:5c:0c:b2:6d:20:bf:1f:
8c:54:5f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 13:16:53 2024 by rpki-client on console-ams.rpki-client.org