Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/HfKomrAsU_cIiUyu7EEs5PahOW0.roa
File: HfKomrAsU_cIiUyu7EEs5PahOW0.roa (raw, json)
Hash identifier: FU3cz28leSRlecQcdOQu1RNRxWJY2uEEIUbFY8hQ+IA=
Subject key identifier: 1D:F2:A8:9A:B0:2C:53:F7:08:89:4C:AE:EC:41:2C:E4:F6:A1:39:6D
Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial: 018DC1E588DF2474DBA72F90964E39EB74F9
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/HfKomrAsU_cIiUyu7EEs5PahOW0.roa
Signing time: Mon 19 Feb 2024 15:04:21 +0000
ROA not before: Mon 19 Feb 2024 15:04:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21350
IP address blocks: 80.244.160.0/21 maxlen: 21
80.244.160.0/24 maxlen: 24
80.244.161.0/24 maxlen: 24
80.244.163.0/24 maxlen: 24
80.244.164.0/24 maxlen: 24
80.244.165.0/24 maxlen: 24
80.244.166.0/24 maxlen: 24
80.244.168.0/24 maxlen: 24
80.244.169.0/24 maxlen: 24
80.244.170.0/24 maxlen: 24
80.244.171.0/24 maxlen: 24
80.244.172.0/23 maxlen: 23
95.175.32.0/20 maxlen: 20
95.175.38.0/24 maxlen: 24
95.175.45.0/24 maxlen: 24
95.175.48.0/24 maxlen: 24
95.175.49.0/24 maxlen: 24
95.175.51.0/24 maxlen: 24
95.175.52.0/22 maxlen: 22
95.175.52.0/24 maxlen: 24
95.175.53.0/24 maxlen: 24
95.175.56.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c1:e5:88:df:24:74:db:a7:2f:90:96:4e:39:eb:74:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Validity
Not Before: Feb 19 15:04:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1df2a89ab02c53f708894caeec412ce4f6a1396d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:01:06:5e:32:71:f7:d8:0c:05:43:61:a9:9d:
34:91:a9:18:2f:3b:ba:22:9a:88:23:bb:5d:ee:f0:
b8:fe:85:85:f1:27:99:1a:9b:72:23:a7:85:ae:4f:
c1:92:6c:c6:73:75:8e:0a:48:66:e4:17:49:b1:6e:
dd:bd:e0:0a:2c:75:d3:0f:ca:06:71:59:64:a5:71:
bf:b8:1e:9e:4f:63:00:61:00:53:1f:65:8b:b5:55:
4b:33:7a:93:98:27:5c:17:83:85:d0:24:a4:f7:df:
6d:56:8d:fd:10:c4:5f:5b:5d:d6:53:0b:97:20:15:
98:4a:47:9e:b2:cd:d0:7a:46:a0:ed:7d:42:d1:d8:
2b:02:48:7b:98:7a:3d:d1:50:62:d2:99:17:46:ca:
84:5f:c1:a3:28:42:b9:50:c1:a5:5b:41:52:a8:0b:
d5:d4:8d:44:00:0d:87:f4:ab:0c:9c:5d:0a:6e:8e:
4b:c7:2e:27:9d:8e:48:55:71:5f:73:3f:4d:b4:74:
34:e2:f1:dc:15:05:43:70:19:08:6a:c1:15:99:d7:
29:8d:30:17:b8:0d:c9:c7:13:8b:4b:8d:4a:83:81:
c1:9b:3a:7d:0c:9f:6b:58:da:cc:1d:96:25:29:f6:
34:b7:f9:b0:79:55:85:c5:77:17:19:e7:a0:3c:85:
b2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F2:A8:9A:B0:2C:53:F7:08:89:4C:AE:EC:41:2C:E4:F6:A1:39:6D
X509v3 Authority Key Identifier:
keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/HfKomrAsU_cIiUyu7EEs5PahOW0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.160.0-80.244.173.255
95.175.32.0-95.175.49.255
95.175.51.0-95.175.63.255
Signature Algorithm: sha256WithRSAEncryption
41:df:c4:a8:69:5a:70:50:f3:61:6b:7f:b8:5c:79:1b:1f:9d:
08:c9:90:9e:a1:09:81:47:e6:86:bc:88:45:16:c9:77:30:5f:
0e:90:78:dc:3b:08:84:a0:1e:93:2b:b0:aa:14:1e:c4:43:3c:
63:a6:b1:e7:a4:a1:ef:e3:27:47:78:f4:94:87:3e:fe:50:56:
da:3b:bb:d4:f1:ec:6a:b3:07:d1:f6:ef:a6:81:f8:cc:ac:7d:
92:1a:d4:99:19:0d:79:35:d6:56:11:7d:64:27:1d:2c:fd:ab:
3e:eb:18:2b:6b:1d:ba:02:e7:0e:e3:4a:78:1d:ad:8a:9c:04:
b9:1a:89:24:c7:7a:70:fe:0f:4e:7e:f5:b6:85:2c:9f:70:c8:
69:bd:d6:e7:bd:99:f7:8b:2c:87:eb:50:76:f2:f4:ad:a2:9f:
8d:eb:dd:ee:26:a0:35:bc:1f:78:00:3b:22:74:8c:5c:ab:23:
43:1d:84:c3:ff:d4:d6:43:42:6d:ad:06:46:ee:37:94:c9:91:
62:2f:31:1e:91:cd:19:ff:ea:d3:b4:99:32:7d:4f:cf:43:8e:
d5:97:8a:57:58:fd:35:18:2f:43:48:9c:87:75:30:1c:3a:6a:
3b:a9:cd:49:a2:fb:4b:df:ed:fd:ec:13:32:cd:c9:47:9a:71:
34:b5:af:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 09:33:57 2024 by rpki-client on console-fra.rpki-client.org