Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/hq1lkg0xeFsfGT9QRJBT2o4OuCs.roa
File: hq1lkg0xeFsfGT9QRJBT2o4OuCs.roa (raw, json)
Hash identifier: E61rx2c0X46c/XsS1nS5cemATfXlD0pjuguyWAtYcpY=
Subject key identifier: 86:AD:65:92:0D:31:78:5B:1F:19:3F:50:44:90:53:DA:8E:0E:B8:2B
Certificate issuer: /CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Certificate serial: 018CC64B6002E60EACDFCAC3BAB5BEA63416
Authority key identifier: D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/hq1lkg0xeFsfGT9QRJBT2o4OuCs.roa
Signing time: Mon 01 Jan 2024 18:31:17 +0000
ROA not before: Mon 01 Jan 2024 18:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44794
IP address blocks: 185.235.80.0/24 maxlen: 24
2a0d:4d00::/48 maxlen: 48
2a0d:4d00:80::/48 maxlen: 48
2a0d:4d00:3::/48 maxlen: 48
2a0d:4d00:1::/48 maxlen: 48
2a0d:4d00:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:60:02:e6:0e:ac:df:ca:c3:ba:b5:be:a6:34:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3860a9b36585fb8aa051fc37fcc6a0773990cbf
Validity
Not Before: Jan 1 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86ad65920d31785b1f193f50449053da8e0eb82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1a:bb:d4:87:68:2b:96:a7:c2:4a:a3:33:1b:
22:e8:39:58:2d:47:b4:01:f2:11:fb:0e:79:5c:39:
56:1c:a0:53:b6:c4:32:f0:22:79:75:4b:76:4c:35:
be:17:23:2c:50:8c:17:20:a5:21:c1:48:10:f4:af:
54:9a:07:01:1f:9d:a9:59:c0:ca:c4:1e:d1:25:66:
f4:d2:02:b1:d9:35:6b:ae:3c:be:8e:7e:b9:0a:65:
44:ce:f4:0c:df:0e:33:39:cd:47:39:89:0f:99:96:
5f:79:03:f4:78:dc:b0:37:90:75:2e:fa:5f:5d:a8:
56:5f:b5:7a:6e:91:7f:43:73:29:98:6b:a8:de:ef:
39:24:d3:bc:1d:e5:95:2e:69:12:ba:71:a0:c4:98:
80:00:1f:79:82:a6:3d:87:50:ed:a7:88:39:2b:04:
b6:36:54:05:1b:d1:5d:82:80:56:0a:00:d5:69:4b:
bc:38:e2:65:b6:db:7a:0b:d7:e3:5a:8d:56:00:0b:
cb:5a:67:48:fc:0c:e1:e0:cd:ef:23:61:da:d3:e5:
d1:30:2c:e5:ad:98:b8:28:e6:e7:99:39:62:0b:3a:
1f:f7:e9:7c:28:24:78:91:63:34:5e:77:92:c4:52:
7a:e4:72:45:bf:cf:be:32:51:a2:cb:88:04:9f:a8:
36:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:AD:65:92:0D:31:78:5B:1F:19:3F:50:44:90:53:DA:8E:0E:B8:2B
X509v3 Authority Key Identifier:
keyid:D3:86:0A:9B:36:58:5F:B8:AA:05:1F:C3:7F:CC:6A:07:73:99:0C:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/04YKmzZYX7iqBR_Df8xqB3OZDL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/hq1lkg0xeFsfGT9QRJBT2o4OuCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/03c430-fb04-40ea-85d1-c92c6165de18/1/04YKmzZYX7iqBR_Df8xqB3OZDL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.235.80.0/24
IPv6:
2a0d:4d00::/46
2a0d:4d00:80::/48
Signature Algorithm: sha256WithRSAEncryption
6d:83:5a:ac:14:4a:90:ae:98:f3:4c:80:8a:67:df:48:1d:98:
4f:89:26:01:3f:03:ca:e6:8b:32:08:b8:5a:70:93:58:39:09:
4e:fa:b6:82:75:c5:53:d6:7d:a3:11:67:d8:16:05:0c:e9:09:
ed:44:d1:af:de:06:f2:ca:c6:d9:75:5c:47:78:6a:0f:fc:f2:
52:d4:d8:09:cc:35:a8:99:40:61:53:4c:f0:11:03:62:30:0b:
97:35:05:2f:66:d3:2d:a8:b9:d8:4f:a7:aa:1d:8d:c4:a7:03:
be:3d:82:ea:ba:2d:bf:1d:8d:01:ad:2c:a5:14:0a:9a:0a:1b:
7f:57:56:8f:7e:8f:3a:c3:52:f3:77:b6:e4:df:9c:44:fb:61:
f2:f0:a6:dc:07:82:ae:0e:0b:c3:07:70:43:01:f6:0d:c8:1f:
c7:f2:e8:94:73:8b:88:0d:35:2e:7b:ba:2b:82:d2:bd:0e:4f:
04:99:8a:4b:1a:64:08:fb:6a:80:da:62:d4:a4:a2:c8:07:9f:
29:1f:4c:0b:92:06:d8:6d:30:b9:9b:f9:50:4e:b2:95:d8:48:
af:e9:e8:47:dd:39:05:37:d1:29:75:05:4e:d2:49:32:76:70:
c8:80:aa:49:50:23:29:2c:de:88:b2:6d:fe:a0:fb:6d:b9:70:
ec:6c:62:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 15:02:03 2024 by rpki-client on console-ams.rpki-client.org