Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/HtqDmWtwmBQfdE_tPtrxWccQJM4.roa
File: HtqDmWtwmBQfdE_tPtrxWccQJM4.roa (raw, json)
Hash identifier: egquQsFJj3jThR0+fnI5ui77nu37Oj69KjXUJV6yygQ=
Subject key identifier: 1E:DA:83:99:6B:70:98:14:1F:74:4F:ED:3E:DA:F1:59:C7:10:24:CE
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 01904ECDE44E65A104E326B81902DB8D105C
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/HtqDmWtwmBQfdE_tPtrxWccQJM4.roa
Signing time: Tue 25 Jun 2024 09:50:34 +0000
ROA not before: Tue 25 Jun 2024 09:50:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215540
IP address blocks: 46.8.5.0/24 maxlen: 24
188.130.196.0/22 maxlen: 22
188.130.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:4e:cd:e4:4e:65:a1:04:e3:26:b8:19:02:db:8d:10:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jun 25 09:50:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1eda83996b7098141f744fed3edaf159c71024ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a5:ca:fc:4c:2b:cf:49:de:54:c2:db:5e:9d:
87:35:16:28:0d:4b:0f:3a:ce:99:2a:eb:a2:07:5f:
d3:e9:13:b4:a5:eb:c0:2e:4d:44:77:7d:ce:42:b0:
50:25:f0:25:bd:b6:d9:82:03:b4:3d:7e:05:f4:2b:
9b:95:87:f2:9b:18:99:81:7c:88:16:85:4f:30:ac:
bf:ea:c1:68:60:38:61:2f:25:bf:af:24:c0:db:b5:
13:18:3a:0f:02:e9:40:3b:29:f1:0f:80:12:86:34:
fb:90:8b:91:31:19:48:c7:24:77:ff:df:4e:f3:e6:
3a:ad:64:47:99:35:9b:c7:eb:63:e5:28:85:2a:67:
8b:62:5e:75:5c:ea:64:dc:5c:8f:00:b8:f2:7e:a7:
f6:f2:ec:7a:c9:76:07:bf:78:85:fd:f0:d2:0d:f0:
5a:e9:1d:66:8f:1b:11:fa:78:ec:86:36:01:d1:67:
25:91:d0:ab:e0:58:8e:2f:b9:62:15:35:ec:dd:6f:
60:38:89:53:00:8e:c7:b8:15:01:12:19:82:0f:13:
51:33:18:86:3e:e6:f7:08:7c:1e:10:3e:b4:92:d2:
03:21:60:7c:f6:22:36:e4:f1:ec:f0:f2:4e:bb:3c:
21:9b:0e:dd:ed:56:b5:f7:64:26:61:47:b8:65:3f:
28:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:DA:83:99:6B:70:98:14:1F:74:4F:ED:3E:DA:F1:59:C7:10:24:CE
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/HtqDmWtwmBQfdE_tPtrxWccQJM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.8.5.0/24
188.130.196.0/22
188.130.205.0/24
Signature Algorithm: sha256WithRSAEncryption
01:ed:1d:89:9f:bf:d5:f5:6b:43:57:2a:4e:39:35:df:11:8b:
b4:50:56:15:b7:5d:4a:d4:d6:03:96:20:07:5c:39:77:e8:a9:
0c:58:6c:8f:4f:71:ad:3a:79:a5:7b:c9:2f:4d:27:ac:8c:fc:
05:0c:01:0b:90:a7:c4:0e:66:04:c7:62:fe:74:9d:dc:46:f5:
f8:2b:3e:f0:ba:36:b5:aa:3d:5a:2c:df:58:ce:8b:14:4d:18:
ee:db:3e:e4:96:0f:74:5c:c1:27:41:bb:18:1c:20:14:bb:ab:
3b:de:03:bb:5c:e7:de:ac:26:74:56:02:89:31:86:e1:b0:28:
74:6c:58:03:53:ad:a6:ec:aa:6e:85:17:25:a5:59:c2:6d:b5:
3d:f8:42:7e:5a:ce:b9:09:9d:9b:05:bd:c1:d4:aa:64:c7:53:
a0:d8:83:62:75:81:19:f4:87:28:78:72:9c:9f:da:96:54:fd:
fb:30:3b:18:ed:ae:ba:da:46:04:07:50:2c:14:6c:de:88:01:
26:57:54:9d:df:ad:14:30:02:b7:87:48:53:d8:80:ef:7d:dc:
c6:ec:07:d7:c6:c1:fe:2a:f8:bc:e6:1c:ff:7b:b0:29:56:20:
ea:6c:25:0c:58:af:1a:f9:61:08:83:7e:a5:b9:7b:1e:55:80:
a4:dd:89:11
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZBOzeROZaEE4ya4GQLbjRBcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4NWI4NTc3MDZkYWM1NGUyMGNhMGQxMWJkNjQxNmNiNjM0
MjAzYjQwHhcNMjQwNjI1MDk1MDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWRhODM5OTZiNzA5ODE0MWY3NDRmZWQzZWRhZjE1OWM3MTAyNGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqXK/Ewrz0neVMLbXp2HNRYoDUsP
Os6ZKuuiB1/T6RO0pevALk1Ed33OQrBQJfAlvbbZggO0PX4F9CublYfymxiZgXyI
FoVPMKy/6sFoYDhhLyW/ryTA27UTGDoPAulAOynxD4AShjT7kIuRMRlIxyR3/99O
8+Y6rWRHmTWbx+tj5SiFKmeLYl51XOpk3FyPALjyfqf28ux6yXYHv3iF/fDSDfBa
6R1mjxsR+njshjYB0WclkdCr4FiOL7liFTXs3W9gOIlTAI7HuBUBEhmCDxNRMxiG
Pub3CHweED60ktIDIWB89iI25PHs8PJOuzwhmw7d7Va192QmYUe4ZT8orQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFB7ag5lrcJgUH3RP7T7a8VnHECTOMB8GA1UdIwQY
MBaAFIhbhXcG2sVOIMoNEb1kFstjQgO0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMt
MTY2OTljOTZkZDVlLzEvSHRxRG1XdHdtQlFmZEVfdFB0cnhXY2NRSk00LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8zMjFjZGMtMjE0My00YjVjLTk3MzMtMTY2OTljOTZkZDVl
LzEvaUZ1RmR3YmF4VTRneWcwUnZXUVd5Mk5DQTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALggFAwQC
vILEAwQAvILNMA0GCSqGSIb3DQEBCwUAA4IBAQAB7R2Jn7/V9WtDVypOOTXfEYu0
UFYVt11K1NYDliAHXDl36KkMWGyPT3GtOnmle8kvTSesjPwFDAELkKfEDmYEx2L+
dJ3cRvX4Kz7wuja1qj1aLN9YzosUTRju2z7klg90XMEnQbsYHCAUu6s73gO7XOfe
rCZ0VgKJMYbhsCh0bFgDU62m7KpuhRclpVnCbbU9+EJ+Ws65CZ2bBb3B1Kpkx1Og
2INidYEZ9IcoeHKcn9qWVP37MDsY7a662kYEB1AsFGzeiAEmV1Sd360UMAK3h0hT
2IDvfdzG7AfXxsH+Kvi85hz/e7ApViDqbCUMWK8a+WEIg36luXseVYCk3YkR
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:54:05 2024 by rpki-client on console-fra.rpki-client.org