Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/HRNXY-oATs2m5HgWECQ1ybF0Vt4.roa
File: HRNXY-oATs2m5HgWECQ1ybF0Vt4.roa (raw, json)
Hash identifier: ec5+fvPRc5Y8lTJ3H1Dsere0YW+tdP7rMVZnZijQ9KE=
Subject key identifier: 1D:13:57:63:EA:00:4E:CD:A6:E4:78:16:10:24:35:C9:B1:74:56:DE
Certificate issuer: /CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Certificate serial: 018CC5014E4537B7C165D1DDD64EE0F52F1F
Authority key identifier: D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/HRNXY-oATs2m5HgWECQ1ybF0Vt4.roa
Signing time: Mon 01 Jan 2024 12:30:46 +0000
ROA not before: Mon 01 Jan 2024 12:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202232
IP address blocks: 62.228.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 14 May 2024 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4e:45:37:b7:c1:65:d1:dd:d6:4e:e0:f5:2f:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d411abc4c0468ab2891eaacadba0dc0377936fd5
Validity
Not Before: Jan 1 12:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d135763ea004ecda6e47816102435c9b17456de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0e:25:d6:b3:b3:b9:53:76:01:b1:24:21:33:
96:ed:75:6e:51:d4:0c:5f:78:1e:49:0e:96:d8:a6:
4d:52:56:7f:85:e1:bf:15:5e:63:26:84:d2:5b:01:
c8:27:95:5c:b5:3d:fe:99:f2:8a:94:24:9d:cd:e8:
62:a7:81:45:75:65:02:1c:96:18:a6:bc:59:b0:1f:
68:0c:fd:c0:1a:10:7d:a9:55:dd:7b:40:64:2a:d0:
1f:7f:1f:5a:cd:fb:61:6d:ba:5d:c2:4b:ec:ca:18:
10:aa:35:b8:bd:1c:69:6f:86:a7:55:3a:5c:f7:91:
80:9e:e1:27:c3:27:f8:d2:d0:be:5a:ae:74:f1:a6:
b9:63:05:28:bf:71:9e:91:14:ef:4a:80:bf:bf:e7:
6f:a8:bd:9a:3c:1e:99:d6:6f:7d:c9:f2:79:1e:89:
f1:3d:b5:85:6b:9e:98:4b:ce:56:76:9d:9a:7b:a2:
ed:47:18:a5:21:07:30:61:24:58:96:5e:df:6c:d2:
03:a3:dd:ee:f3:36:3b:06:60:c4:ff:32:3e:53:e6:
f4:33:34:e2:fc:14:74:e0:29:f2:70:ab:61:72:98:
1d:20:54:f6:a3:82:7a:aa:68:89:74:57:55:1f:0e:
a7:42:47:f2:b8:14:36:75:08:cb:c3:bf:3a:e9:b5:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:13:57:63:EA:00:4E:CD:A6:E4:78:16:10:24:35:C9:B1:74:56:DE
X509v3 Authority Key Identifier:
keyid:D4:11:AB:C4:C0:46:8A:B2:89:1E:AA:CA:DB:A0:DC:03:77:93:6F:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1BGrxMBGirKJHqrK26DcA3eTb9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/HRNXY-oATs2m5HgWECQ1ybF0Vt4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/618e53-afc4-40df-8612-b0f4b9c37e49/1/1BGrxMBGirKJHqrK26DcA3eTb9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.228.250.0/24
Signature Algorithm: sha256WithRSAEncryption
52:0f:73:a4:06:d0:65:50:11:67:0e:9b:8b:ab:bc:15:69:fb:
db:b4:51:99:be:8d:0c:9d:89:0a:b4:35:ca:a0:2f:12:e4:d8:
18:b0:f7:23:a9:78:51:d3:54:9c:66:fb:d8:03:12:e0:1a:6f:
41:51:4a:a6:b6:1a:f6:02:d7:f1:d9:11:0f:10:33:ae:f8:ce:
00:4a:61:a5:ad:b3:6a:57:26:30:d0:ed:6b:cd:bd:00:97:8e:
49:ef:eb:8b:9c:bc:3f:cd:aa:79:ef:50:72:5b:e5:cf:50:37:
38:c1:89:88:5d:e0:68:45:be:09:6e:51:0a:e3:0f:0a:3a:b7:
f8:70:ff:9b:28:2d:a7:0f:16:c4:bc:88:bf:ee:ab:d0:d3:09:
43:18:aa:3f:cb:52:bd:51:de:83:6a:22:cc:b0:6d:cc:18:ad:
2b:25:92:c9:7f:f8:6a:7a:c7:3c:1e:f2:2f:b5:26:0a:2b:d9:
8e:95:c3:7d:c2:0e:63:ab:b4:c6:3f:19:aa:ea:41:79:6f:72:
a3:8e:ee:77:09:d1:d3:e8:7c:a0:8b:6b:d6:95:6e:eb:e3:c4:
d6:ef:74:07:ca:bc:c6:41:0a:fa:2e:b4:1e:e2:f0:e1:72:c2:
60:30:a6:51:c5:c5:f1:c6:64:39:56:2a:d4:45:fd:84:f8:92:
d7:25:8b:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 13 13:47:53 2024 by rpki-client on console-fra.rpki-client.org