Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/HUfixC5zQEOQTwSnjgZvrxadU6U.roa
File: HUfixC5zQEOQTwSnjgZvrxadU6U.roa (raw, json)
Hash identifier: wUv1se6bt8XAx5Dx6PWMA3FAtRSpxXbSgjkmDh5sBd8=
Subject key identifier: 1D:47:E2:C4:2E:73:40:43:90:4F:04:A7:8E:06:6F:AF:16:9D:53:A5
Certificate issuer: /CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Certificate serial: 018CC9BBB0B2C0B655BF126CD9F8C46F6E55
Authority key identifier: 45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/HUfixC5zQEOQTwSnjgZvrxadU6U.roa
Signing time: Tue 02 Jan 2024 10:32:50 +0000
ROA not before: Tue 02 Jan 2024 10:32:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204152
IP address blocks: 185.112.232.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bb:b0:b2:c0:b6:55:bf:12:6c:d9:f8:c4:6f:6e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45e3a0c1f1d81ee069643b40c323999bb5584631
Validity
Not Before: Jan 2 10:32:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d47e2c42e734043904f04a78e066faf169d53a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:aa:fe:1d:b3:3f:46:77:13:57:3d:9b:68:23:
a6:8f:ec:50:49:ca:9e:9c:81:27:72:4a:0a:47:4d:
d9:02:08:40:c0:c4:2c:09:4e:5c:6c:66:84:f2:74:
63:a7:23:d3:3d:81:d5:da:cb:ca:0b:c2:91:3b:c4:
35:92:97:c9:9e:56:f7:96:01:91:9a:b9:ba:8f:58:
d1:f0:11:93:2b:b9:bb:6a:7b:bc:c0:6a:9a:bc:4b:
70:ba:43:bd:f0:d2:f1:8f:7b:53:00:ac:5d:c3:58:
90:9d:d5:32:f0:bd:b1:23:44:c5:54:c9:00:b6:bc:
2e:85:ee:32:c5:89:99:5a:bd:3b:e1:4f:bf:ff:60:
2d:1e:99:5b:02:e6:81:53:68:7d:fb:82:e5:68:4c:
8c:9d:64:86:10:d8:ec:e2:14:f8:59:a9:1f:89:f3:
da:01:c8:98:bc:8f:43:1d:82:18:07:6c:61:ca:ee:
5f:aa:73:30:a6:83:a4:57:83:96:df:b2:58:a4:e9:
2a:d1:69:24:a7:bd:cd:f5:02:a0:81:20:c0:42:3a:
9a:0f:14:f6:2e:6c:47:cd:dd:bb:cc:4c:23:2f:ed:
77:0e:3e:70:94:85:03:b2:30:ff:f1:a5:e5:ed:71:
d9:93:ec:6e:17:db:85:88:e7:6a:4a:bc:0f:07:e2:
5b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:47:E2:C4:2E:73:40:43:90:4F:04:A7:8E:06:6F:AF:16:9D:53:A5
X509v3 Authority Key Identifier:
keyid:45:E3:A0:C1:F1:D8:1E:E0:69:64:3B:40:C3:23:99:9B:B5:58:46:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ReOgwfHYHuBpZDtAwyOZm7VYRjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/HUfixC5zQEOQTwSnjgZvrxadU6U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/cb31da-4491-4f3e-bae5-3d57b66b2134/1/ReOgwfHYHuBpZDtAwyOZm7VYRjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.232.0/22
Signature Algorithm: sha256WithRSAEncryption
98:27:ea:c9:e2:02:3b:58:e6:ec:0e:17:42:f5:14:4a:0b:e0:
a2:11:82:95:a0:2f:09:ed:81:45:e1:cb:67:0d:d2:e4:ed:41:
47:0c:17:62:e1:af:ee:1a:59:02:3a:be:50:6d:7d:dd:ac:85:
c3:2c:39:1d:da:7b:03:44:db:62:7b:18:06:40:0c:88:45:c3:
6f:0d:c2:17:a7:3f:31:25:bd:25:78:40:43:4e:8a:97:a4:98:
18:02:f4:5a:90:24:25:d6:9a:5d:93:ea:05:2a:73:44:f5:c7:
37:7a:d1:bd:af:e0:cf:48:2a:de:78:d7:33:15:f1:96:fc:a9:
ef:98:8f:7b:ca:06:a0:a1:28:06:a7:5c:5f:34:f6:02:5f:c8:
36:cd:ad:3b:c4:f6:ed:e0:31:d0:f5:9a:33:4c:68:be:96:f8:
b1:40:7d:82:57:c1:d0:d5:78:45:e1:c6:fc:41:e6:c2:1f:ad:
bd:ae:05:4a:28:7b:d9:6d:6a:9e:4a:83:7d:eb:4b:19:76:65:
42:4f:0f:0f:4d:d1:0a:8d:0c:50:28:35:6a:91:24:3f:09:70:
64:a3:ef:91:a3:76:05:95:b0:25:d6:f4:9a:91:1a:8a:41:f9:
ce:0e:e7:35:65:87:b4:c3:5b:58:fd:bc:f1:37:78:02:50:b7:
66:ae:d7:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:21:17 2024 by rpki-client on console-ams.rpki-client.org