Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/Hcx8R0DOz6IJUhSSN_wCIRlSMWw.roa
File: Hcx8R0DOz6IJUhSSN_wCIRlSMWw.roa (raw, json)
Hash identifier: cWgbsGW0YlT2vapOBZ6CPs8pcjiah/ckKm0B5XFmHSg=
Subject key identifier: 1D:CC:7C:47:40:CE:CF:A2:09:52:14:92:37:FC:02:21:19:52:31:6C
Certificate issuer: /CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Certificate serial: 018E74C4324CD3EF448A31EC4ADCBB98F2F0
Authority key identifier: 4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/Hcx8R0DOz6IJUhSSN_wCIRlSMWw.roa
Signing time: Mon 25 Mar 2024 08:39:58 +0000
ROA not before: Mon 25 Mar 2024 08:39:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62459
IP address blocks: 46.243.60.0/24 maxlen: 24
46.243.61.0/24 maxlen: 24
185.35.36.0/22 maxlen: 22
185.35.36.0/24 maxlen: 24
185.35.37.0/24 maxlen: 24
185.35.38.0/24 maxlen: 24
185.35.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 21:03:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:74:c4:32:4c:d3:ef:44:8a:31:ec:4a:dc:bb:98:f2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a2c863762ce9d996d2abab6ede1929ccedcb632
Validity
Not Before: Mar 25 08:39:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1dcc7c4740cecfa20952149237fc02211952316c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:11:2e:11:5f:0f:ac:b8:9f:96:63:81:9b:a7:
6d:a5:bc:f5:c1:6e:f5:1d:0e:a8:41:25:c9:9b:c7:
95:b1:b3:e4:f6:4e:b1:f8:40:97:22:1b:aa:56:ba:
aa:f6:a4:9c:60:04:7f:f9:80:ff:ec:ef:8a:79:f3:
9b:fa:1a:69:c2:9e:66:2f:57:5a:0c:7d:f6:ca:6b:
7d:f3:02:91:c4:e3:2f:93:db:73:1f:ae:f5:0a:e2:
76:69:e1:c7:d4:b0:86:49:f1:a1:98:0d:10:a7:9d:
b8:58:e1:66:ad:b6:9c:6c:95:73:8a:93:80:72:5e:
10:c3:9f:e3:8f:d5:1a:59:24:71:8c:f9:58:03:f8:
ff:ee:63:7c:74:13:3b:95:2f:37:0c:e2:c4:f5:60:
ff:bd:c2:be:b5:24:28:f2:1d:20:b6:de:eb:b5:0f:
93:97:33:05:f5:69:90:6a:d6:f3:eb:f2:b6:aa:2d:
d3:8a:f9:f8:c2:d2:98:ce:ab:d8:9b:77:67:d1:c2:
92:cd:99:de:6f:1a:eb:04:9f:17:5e:d5:17:97:ac:
c1:81:bb:88:09:28:2a:e3:5a:38:88:c2:c1:1d:ed:
7f:23:be:27:26:78:8e:e9:4c:38:79:ca:e0:1f:64:
67:e0:cb:4d:ed:d0:54:cf:9c:4f:91:3d:4d:d1:3f:
93:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:CC:7C:47:40:CE:CF:A2:09:52:14:92:37:FC:02:21:19:52:31:6C
X509v3 Authority Key Identifier:
keyid:4A:2C:86:37:62:CE:9D:99:6D:2A:BA:B6:ED:E1:92:9C:CE:DC:B6:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SiyGN2LOnZltKrq27eGSnM7ctjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/Hcx8R0DOz6IJUhSSN_wCIRlSMWw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a8e3c-cc02-4255-9892-c47184fdac39/1/SiyGN2LOnZltKrq27eGSnM7ctjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.60.0/23
185.35.36.0/22
Signature Algorithm: sha256WithRSAEncryption
52:d9:0d:31:f0:4f:9b:05:e7:88:8e:09:ff:75:97:27:53:ac:
f2:d7:9c:60:c4:d7:2f:34:93:7d:31:88:5e:2a:eb:cf:40:49:
66:2e:66:92:01:15:4e:3a:54:4a:b1:32:f4:6d:79:79:b1:d8:
d2:c8:2e:6b:a1:e8:47:02:79:65:78:d4:ca:0a:74:28:a5:a8:
cb:83:85:6c:66:a7:cc:22:ba:fc:6e:0d:29:bb:9c:26:d2:5b:
bb:62:8a:3e:22:d7:14:15:85:ce:db:4a:de:a4:e3:16:9b:eb:
d2:7c:7b:92:ae:6c:59:30:cf:16:36:37:6e:c3:87:30:dd:9e:
f8:56:b3:31:cd:82:e7:f7:29:8e:d3:74:51:cd:76:65:f5:21:
63:83:41:4a:01:f8:db:29:0d:68:c9:52:9d:06:c6:74:85:03:
7e:56:58:7c:ad:9f:14:53:b4:18:4c:83:7e:15:bd:26:80:ac:
ca:64:17:15:e6:9f:dc:1c:1f:46:f2:01:42:27:37:0d:04:cb:
fd:9a:2a:7b:a5:f4:64:ea:11:4b:c9:38:30:9a:16:58:32:6b:
15:37:03:18:03:ad:69:6d:c9:f0:85:ca:c6:e4:4c:02:1b:2a:
2a:5c:a2:8b:e9:25:00:44:cd:00:ee:26:d8:7b:87:35:57:62:
a1:3a:97:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 01:17:59 2024 by rpki-client on console-ams.rpki-client.org