Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/HHf47rJ60AMcgzoYHArlPw0MQpQ.roa
File: HHf47rJ60AMcgzoYHArlPw0MQpQ.roa (raw, json)
Hash identifier: gP6xXL7/Arj6ZU9tLgbiIj25TpVtOUK5qCTNCXC2L/c=
Subject key identifier: 1C:77:F8:EE:B2:7A:D0:03:1C:83:3A:18:1C:0A:E5:3F:0D:0C:42:94
Certificate issuer: /CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Certificate serial: 018E88F24FE90B210CE3542B8ABF257B895D
Authority key identifier: 12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/HHf47rJ60AMcgzoYHArlPw0MQpQ.roa
Signing time: Fri 29 Mar 2024 06:42:45 +0000
ROA not before: Fri 29 Mar 2024 06:42:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 208041
IP address blocks: 93.159.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:88:f2:4f:e9:0b:21:0c:e3:54:2b:8a:bf:25:7b:89:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=122a646bed4c417a6b4805f93d77a7a465e34b93
Validity
Not Before: Mar 29 06:42:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c77f8eeb27ad0031c833a181c0ae53f0d0c4294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:63:42:28:3c:87:15:0c:20:83:d9:d1:cc:4c:
14:2c:42:18:30:c5:5c:0d:0f:84:04:3b:f4:d6:dd:
c8:b4:ec:5c:84:30:c6:cf:cc:49:06:33:ac:9b:65:
b9:fd:88:f0:44:72:88:47:77:85:50:b1:79:9e:86:
2f:fd:09:3b:98:ca:b5:32:84:a6:17:77:6c:61:b2:
83:fc:10:e9:f4:56:91:ea:5b:85:9f:81:45:ac:a1:
92:85:be:e4:c1:a6:0a:c5:76:0b:48:6b:f9:d9:ff:
9f:d8:de:e6:a6:cb:c6:6c:6b:be:4c:c6:79:a9:6e:
e1:cf:56:5e:8d:63:8e:15:a7:0a:21:da:28:95:e9:
91:0b:ad:52:ee:4f:b1:8e:e1:39:2c:ab:a9:d6:73:
b3:86:0f:88:39:ad:51:b7:77:0c:98:95:09:01:52:
9f:d5:38:f6:b8:d7:59:2b:ae:6a:c1:f8:a7:a6:6d:
bf:8c:80:8e:e3:af:41:29:6d:a6:60:1b:03:41:39:
91:fa:6f:c9:76:fe:cb:c8:bf:d4:d4:65:cd:50:7c:
d7:2e:eb:ee:c8:9e:41:8f:65:9c:c5:38:97:52:b8:
10:41:ee:4b:bd:00:bc:1f:4a:41:8a:14:48:45:e4:
00:d4:ec:79:43:46:be:6b:20:87:74:dd:79:dc:0f:
f0:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:77:F8:EE:B2:7A:D0:03:1C:83:3A:18:1C:0A:E5:3F:0D:0C:42:94
X509v3 Authority Key Identifier:
keyid:12:2A:64:6B:ED:4C:41:7A:6B:48:05:F9:3D:77:A7:A4:65:E3:4B:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Eipka-1MQXprSAX5PXenpGXjS5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/HHf47rJ60AMcgzoYHArlPw0MQpQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a596e2-29d2-48c6-9bab-5cbd1f3ff39a/1/Eipka-1MQXprSAX5PXenpGXjS5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.159.179.0/24
Signature Algorithm: sha256WithRSAEncryption
25:8c:f5:b8:c9:fe:b1:6e:36:9b:bd:a5:18:fd:e8:0e:fa:b5:
99:8b:1c:6d:5a:5d:79:70:55:df:c7:25:5b:3b:d4:d0:9b:c6:
af:39:65:88:07:df:04:46:ee:2a:40:c6:ad:51:6e:0b:de:fb:
47:4d:9c:f0:55:5e:c4:ab:02:b5:a8:9f:81:49:10:67:4f:db:
a6:a5:43:e2:43:01:4f:d3:75:be:e6:b7:a1:51:17:5f:7b:eb:
28:6f:ff:66:0b:67:e6:30:18:c5:13:93:15:3b:7e:38:2e:df:
7c:4f:b2:fb:eb:9c:a2:cd:3e:56:26:d4:8b:3c:ef:24:8f:6f:
8d:1e:cd:39:a1:69:b7:3a:55:ec:c5:d5:33:b3:c1:4c:4c:53:
69:83:6a:02:84:df:42:61:27:23:52:b3:6f:85:55:0d:58:d4:
20:30:55:97:11:07:17:25:fe:e9:39:0f:8f:6d:1b:aa:3f:1c:
81:0c:7c:e1:36:5b:8e:57:0b:b3:1b:3f:d3:f3:b6:92:15:f4:
c9:dc:3c:46:d6:a8:87:43:e3:c4:80:0e:a1:28:99:72:18:6f:
e8:99:ec:6b:dc:3e:41:f2:3d:63:62:b0:69:38:5a:e5:dc:e2:
fe:03:f8:97:58:8a:43:31:06:72:b8:02:72:0c:25:20:f5:de:
d2:a6:0c:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY6I8k/pCyEM41Qrir8le4ldMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyMmE2NDZiZWQ0YzQxN2E2YjQ4MDVmOTNkNzdhN2E0NjVl
MzRiOTMwHhcNMjQwMzI5MDY0MjQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxYzc3ZjhlZWIyN2FkMDAzMWM4MzNhMTgxYzBhZTUzZjBkMGM0Mjk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgmNCKDyHFQwgg9nRzEwULEIYMMVc
DQ+EBDv01t3ItOxchDDGz8xJBjOsm2W5/YjwRHKIR3eFULF5noYv/Qk7mMq1MoSm
F3dsYbKD/BDp9FaR6luFn4FFrKGShb7kwaYKxXYLSGv52f+f2N7mpsvGbGu+TMZ5
qW7hz1ZejWOOFacKIdoolemRC61S7k+xjuE5LKup1nOzhg+IOa1Rt3cMmJUJAVKf
1Tj2uNdZK65qwfinpm2/jICO469BKW2mYBsDQTmR+m/Jdv7LyL/U1GXNUHzXLuvu
yJ5Bj2WcxTiXUrgQQe5LvQC8H0pBihRIReQA1Ox5Q0a+ayCHdN153A/wtQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBx3+O6yetADHIM6GBwK5T8NDEKUMB8GA1UdIwQY
MBaAFBIqZGvtTEF6a0gF+T13p6Rl40uTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWIt
NWNiZDFmM2ZmMzlhLzEvSEhmNDdySjYwQU1jZ3pvWUhBcmxQdzBNUXBRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS9hNTk2ZTItMjlkMi00OGM2LTliYWItNWNiZDFmM2ZmMzlh
LzEvRWlwa2EtMU1RWHByU0FYNVBYZW5wR1hqUzVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZ+zMA0G
CSqGSIb3DQEBCwUAA4IBAQAljPW4yf6xbjabvaUY/egO+rWZixxtWl15cFXfxyVb
O9TQm8avOWWIB98ERu4qQMatUW4L3vtHTZzwVV7EqwK1qJ+BSRBnT9umpUPiQwFP
03W+5rehURdfe+sob/9mC2fmMBjFE5MVO344Lt98T7L765yizT5WJtSLPO8kj2+N
Hs05oWm3OlXsxdUzs8FMTFNpg2oChN9CYScjUrNvhVUNWNQgMFWXEQcXJf7pOQ+P
bRuqPxyBDHzhNluOVwuzGz/T87aSFfTJ3DxG1qiHQ+PEgA6hKJlyGG/omexr3D5B
8j1jYrBpOFrl3OL+A/iXWIpDMQZyuAJyDCUg9d7Spgwe
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:12:15 2024 by rpki-client on console-ams.rpki-client.org