Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/HH3C6uyvny3f5cfRSuRRrkTn7p0.roa
File: HH3C6uyvny3f5cfRSuRRrkTn7p0.roa (raw, json)
Hash identifier: wnanHcSIIw4WAf2yQ80glIUxw8YiiGVuFVegnEF7FWU=
Subject key identifier: 1C:7D:C2:EA:EC:AF:9F:2D:DF:E5:C7:D1:4A:E4:51:AE:44:E7:EE:9D
Certificate issuer: /CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Certificate serial: 018CC26D186D6108F1F7EB024FE305125941
Authority key identifier: AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/HH3C6uyvny3f5cfRSuRRrkTn7p0.roa
Signing time: Mon 01 Jan 2024 00:29:38 +0000
ROA not before: Mon 01 Jan 2024 00:29:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50631
IP address blocks: 185.159.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:18:6d:61:08:f1:f7:eb:02:4f:e3:05:12:59:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa88fae35b66b4de2e41ca5ee077b5ef0b4ab649
Validity
Not Before: Jan 1 00:29:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c7dc2eaecaf9f2ddfe5c7d14ae451ae44e7ee9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5f:c0:f5:69:06:27:2f:f6:99:12:c3:c6:34:
7a:16:b3:8c:7b:20:a6:12:44:69:6a:89:1e:84:12:
45:39:6d:46:7e:9e:d4:50:39:5c:ef:04:8c:a0:5a:
ff:8e:d4:a2:67:79:d1:a1:97:65:0e:6a:17:e8:de:
45:92:41:e3:6c:8b:81:55:49:38:15:c5:6e:eb:e7:
36:c5:e3:06:91:d7:08:6b:4d:8b:3c:8b:21:a4:8d:
6d:3c:a0:b9:eb:0e:0f:13:7f:4b:8e:9e:c9:34:7a:
28:5e:35:b2:1d:6e:c5:12:8f:a7:d0:8f:a3:10:3d:
27:97:46:d4:4e:0d:ea:72:50:bf:18:cd:85:5f:7e:
15:de:98:e4:68:42:7e:08:6c:70:87:bb:99:6a:88:
0e:47:d6:d4:5c:ae:2b:87:55:44:ab:35:cd:8a:d2:
bd:ee:f5:0e:bb:0c:fd:03:19:28:9a:23:d1:de:61:
b3:69:9a:59:f2:f9:86:96:fb:fc:cd:13:d4:60:e4:
5c:e0:fb:e9:42:61:7f:05:d1:4d:c7:f0:72:fc:e1:
f5:aa:85:1d:8d:dd:1d:f2:bd:86:c7:31:30:91:b3:
76:ee:90:f2:53:11:d7:06:c5:83:b6:e3:df:94:5c:
b8:a7:61:a1:a4:69:98:4d:35:d8:38:94:2f:f3:27:
38:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:7D:C2:EA:EC:AF:9F:2D:DF:E5:C7:D1:4A:E4:51:AE:44:E7:EE:9D
X509v3 Authority Key Identifier:
keyid:AA:88:FA:E3:5B:66:B4:DE:2E:41:CA:5E:E0:77:B5:EF:0B:4A:B6:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qoj641tmtN4uQcpe4He17wtKtkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/HH3C6uyvny3f5cfRSuRRrkTn7p0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/6efd1b-3e10-4446-92c7-b92cb6113035/1/qoj641tmtN4uQcpe4He17wtKtkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.248.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:e4:1a:04:ab:f6:b7:85:98:1f:2d:a6:fa:6f:57:f8:55:08:
09:8c:9d:75:63:62:68:15:91:03:e0:ea:19:58:be:38:80:dd:
86:2f:b2:2f:d3:9d:38:e7:83:bc:ce:cc:4e:18:ee:7a:1e:49:
d5:9e:7e:f4:e8:b2:f6:d2:17:f0:1a:bd:f4:c7:e2:f5:d2:34:
ad:90:83:1c:60:81:ca:ae:47:30:9d:01:22:1c:f3:49:ca:61:
95:f7:a9:72:f5:08:27:8f:62:c0:5f:ef:ac:f6:6d:97:6c:b7:
37:97:ea:57:db:72:73:03:f4:17:f1:88:c0:da:88:57:bc:0f:
e1:51:56:a9:05:9c:17:b9:47:9a:ef:e1:8e:e5:84:09:5a:c0:
2b:d3:1e:8f:79:d6:23:80:fe:12:f3:a0:ef:8f:6c:04:79:42:
fa:1f:33:00:16:a9:9f:fa:f4:8a:97:1d:01:88:eb:99:cf:25:
74:90:08:d4:e6:9b:c5:37:32:61:0d:c9:48:08:5c:81:d3:70:
c9:d0:2a:52:b7:d9:46:38:52:72:0a:3c:42:3c:ac:37:3e:f8:
0b:5f:41:f8:e4:d9:79:e8:91:3e:bb:a8:23:c1:fc:14:21:a9:
07:ca:cd:c9:dc:e3:84:0b:12:17:54:80:da:57:f8:69:58:7f:
93:8a:e6:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbRhtYQjx9+sCT+MFEllBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhODhmYWUzNWI2NmI0ZGUyZTQxY2E1ZWUwNzdiNWVmMGI0
YWI2NDkwHhcNMjQwMTAxMDAyOTM4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzdkYzJlYWVjYWY5ZjJkZGZlNWM3ZDE0YWU0NTFhZTQ0ZTdlZTlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV/A9WkGJy/2mRLDxjR6FrOMeyCm
EkRpaokehBJFOW1Gfp7UUDlc7wSMoFr/jtSiZ3nRoZdlDmoX6N5FkkHjbIuBVUk4
FcVu6+c2xeMGkdcIa02LPIshpI1tPKC56w4PE39Ljp7JNHooXjWyHW7FEo+n0I+j
ED0nl0bUTg3qclC/GM2FX34V3pjkaEJ+CGxwh7uZaogOR9bUXK4rh1VEqzXNitK9
7vUOuwz9AxkomiPR3mGzaZpZ8vmGlvv8zRPUYORc4PvpQmF/BdFNx/By/OH1qoUd
jd0d8r2GxzEwkbN27pDyUxHXBsWDtuPflFy4p2GhpGmYTTXYOJQv8yc4hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBx9wursr58t3+XH0UrkUa5E5+6dMB8GA1UdIwQY
MBaAFKqI+uNbZrTeLkHKXuB3te8LSrZJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS82ZWZkMWItM2UxMC00NDQ2LTkyYzct
YjkyY2I2MTEzMDM1LzEvSEgzQzZ1eXZueTNmNWNmUlN1UlJya1RuN3AwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS82ZWZkMWItM2UxMC00NDQ2LTkyYzctYjkyY2I2MTEzMDM1
LzEvcW9qNjQxdG10TjR1UWNwZTRIZTE3d3RLdGtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuZ/4MA0G
CSqGSIb3DQEBCwUAA4IBAQBb5BoEq/a3hZgfLab6b1f4VQgJjJ11Y2JoFZED4OoZ
WL44gN2GL7Iv050454O8zsxOGO56HknVnn706LL20hfwGr30x+L10jStkIMcYIHK
rkcwnQEiHPNJymGV96ly9Qgnj2LAX++s9m2XbLc3l+pX23JzA/QX8YjA2ohXvA/h
UVapBZwXuUea7+GO5YQJWsAr0x6PedYjgP4S86Dvj2wEeUL6HzMAFqmf+vSKlx0B
iOuZzyV0kAjU5pvFNzJhDclICFyB03DJ0CpSt9lGOFJyCjxCPKw3PvgLX0H45Nl5
6JE+u6gjwfwUIakHys3J3OOECxIXVIDaV/hpWH+TiuZ0
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:59:58 2024 by rpki-client on console-fra.rpki-client.org