Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Hh6QzBA2hrQdscNzPPXEgZr8I8I.roa
File: Hh6QzBA2hrQdscNzPPXEgZr8I8I.roa (raw, json)
Hash identifier: 58CqJ7tSg4EJ+qHTZFF2sEp/9d3idDc3Izf8BJjHd1w=
Subject key identifier: 1E:1E:90:CC:10:36:86:B4:1D:B1:C3:73:3C:F5:C4:81:9A:FC:23:C2
Certificate issuer: /CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Certificate serial: 018CC5DC6B62BC51A9885FB2EF73F41CB942
Authority key identifier: 0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Hh6QzBA2hrQdscNzPPXEgZr8I8I.roa
Signing time: Mon 01 Jan 2024 16:30:06 +0000
ROA not before: Mon 01 Jan 2024 16:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35085
IP address blocks: 45.12.184.0/24 maxlen: 24
2a0e:b700::/32 maxlen: 48
2a0e:b702::/32 maxlen: 48
2a0e:b701::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 May 2024 16:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:6b:62:bc:51:a9:88:5f:b2:ef:73:f4:1c:b9:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a30b635d357468d7f932d3e1f59d5373cf9f465
Validity
Not Before: Jan 1 16:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e1e90cc103686b41db1c3733cf5c4819afc23c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1c:b9:81:f5:fc:f3:cc:4d:fb:39:4a:33:20:
40:5a:30:34:b9:ce:1d:4a:b3:69:9a:21:1b:ce:ab:
e5:f1:0c:58:ae:63:73:79:5f:6f:47:43:66:04:6c:
ea:8e:15:84:67:c6:f4:7d:4f:8f:ed:0c:0a:27:d0:
4a:d4:2c:45:28:17:0f:eb:97:0f:eb:36:2e:b6:60:
45:77:71:ff:cc:4c:c0:5d:94:cd:cb:75:1a:36:10:
2d:6d:4a:66:b4:ef:27:f1:2b:20:d5:39:5c:29:50:
46:5a:e1:3f:54:2b:20:ec:6f:f5:d1:e8:1a:71:0d:
af:b5:5a:08:e9:53:93:65:99:40:7c:46:81:6c:bc:
ac:02:0f:c7:05:54:62:a7:24:37:42:44:48:21:ad:
b7:3b:c8:5a:b0:05:45:a0:27:ce:9b:ae:0d:d4:6c:
60:ea:17:af:cf:91:40:06:24:70:4b:50:9a:ee:a7:
d6:2e:b0:98:57:8c:b3:93:79:f7:6d:1d:f6:41:55:
22:1f:ec:11:9d:1e:b1:81:88:6c:bf:74:3b:b7:24:
75:1b:b5:15:d1:6f:cb:2e:4e:8c:64:75:c7:ee:33:
19:2f:8e:5b:0c:70:8d:7b:6e:52:85:30:68:9a:86:
e4:88:2e:e1:dc:ec:fb:e4:2d:72:df:af:95:41:59:
f7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:1E:90:CC:10:36:86:B4:1D:B1:C3:73:3C:F5:C4:81:9A:FC:23:C2
X509v3 Authority Key Identifier:
keyid:0A:30:B6:35:D3:57:46:8D:7F:93:2D:3E:1F:59:D5:37:3C:F9:F4:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CjC2NdNXRo1_ky0-H1nVNzz59GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/Hh6QzBA2hrQdscNzPPXEgZr8I8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/1785f1-ae23-40f0-83f2-6def398ce5c9/1/CjC2NdNXRo1_ky0-H1nVNzz59GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.184.0/24
IPv6:
2a0e:b700::-2a0e:b702:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
3a:54:84:be:0e:ca:f6:6c:ff:ae:15:59:18:d7:de:ec:a1:b1:
b8:33:16:f9:5c:0b:bc:c6:20:e9:bb:36:22:eb:ec:e8:06:ce:
a8:b0:cb:fe:29:22:44:37:40:28:94:02:2c:93:84:e9:61:95:
b3:04:d5:23:60:a0:a8:c7:67:19:01:ce:07:d7:49:a6:8e:0b:
98:58:59:87:97:9d:dc:a2:38:59:15:06:4f:84:12:7f:9e:c2:
f5:cd:a3:64:eb:05:6e:0e:b8:e7:55:83:df:30:3a:b5:a8:17:
cf:57:7d:fc:5d:8b:9e:bd:09:69:1e:6f:81:4e:d1:d1:59:6e:
ae:21:5a:f0:b3:2d:17:33:ab:81:a0:4c:6d:26:d9:0f:5a:75:
d3:c1:ba:5d:ff:c5:2d:31:77:f0:ea:52:03:57:00:bb:4b:cc:
fb:94:15:35:05:ae:8a:85:c1:9b:d2:35:6c:49:3d:37:ea:24:
50:e3:0b:42:90:1e:44:57:a3:ca:14:9a:f0:6a:65:72:ab:4e:
90:f2:05:6f:9c:6b:7c:5f:ab:83:ff:2e:24:7d:a2:2b:54:bc:
ef:18:5e:c4:8d:aa:15:e3:cd:b0:cf:3a:22:c4:f3:75:bf:4c:
74:ae:14:42:27:11:62:de:f0:f7:fb:2b:14:71:3f:0b:5f:c2:
7a:2f:b6:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:51:25 2024 by rpki-client on console-fra.rpki-client.org