Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/HdukltayHTNB2OHDWlM1F_QCttU.roa
File: HdukltayHTNB2OHDWlM1F_QCttU.roa (raw, json)
Hash identifier: 6A4hUo3t8fRtN4b3sgQ6WW4j3GjPT380gWmkyRD8Jdw=
Subject key identifier: 1D:DB:A4:96:D6:B2:1D:33:41:D8:E1:C3:5A:53:35:17:F4:02:B6:D5
Certificate issuer: /CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
Certificate serial: 018CC56E5B3F2B282B990223A01B3819F1E3
Authority key identifier: E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/HdukltayHTNB2OHDWlM1F_QCttU.roa
Signing time: Mon 01 Jan 2024 14:29:53 +0000
ROA not before: Mon 01 Jan 2024 14:29:53 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 185.43.192.0/24 maxlen: 24
185.43.195.0/24 maxlen: 24
185.43.194.0/24 maxlen: 24
185.43.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:5b:3f:2b:28:2b:99:02:23:a0:1b:38:19:f1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9d2721f2e2bd011b8a6860ad2572c405c0b540f
Validity
Not Before: Jan 1 14:29:53 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ddba496d6b21d3341d8e1c35a533517f402b6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b2:48:3b:22:69:98:a5:c5:00:76:c2:49:32:
6b:73:0b:f0:b1:d8:60:36:0e:c0:7e:ba:98:a7:f4:
6a:e6:38:d1:0b:8f:00:9b:b3:8f:be:49:ef:fb:33:
f7:6c:c4:fb:07:8a:17:c6:90:09:8e:f8:88:d0:46:
c0:84:7d:c7:2b:13:83:49:a5:1a:0c:5f:a2:d1:c3:
db:79:32:ec:55:8c:54:be:a6:c0:3e:7c:c5:0d:4d:
a9:93:a1:82:91:f4:2d:75:08:fb:3a:36:4e:4a:37:
65:8c:ae:b4:48:70:90:21:d4:5f:04:0a:b8:84:77:
e2:7c:b0:f0:2a:2e:35:4c:38:cc:ef:6e:f7:04:60:
f9:b8:68:3b:03:4d:5f:3b:50:52:b9:49:53:99:4f:
f0:09:35:f3:ab:50:67:8b:19:34:6f:a9:29:3c:87:
1f:52:d9:53:71:e3:dd:80:29:9f:b1:b5:43:7c:7f:
28:17:1f:e1:45:a9:d6:a6:1c:15:8b:1f:97:ae:3f:
ef:cb:bc:32:1a:6b:8a:62:74:3b:34:6c:04:87:10:
83:da:6f:17:23:53:13:1f:20:c0:b6:c3:7b:9b:54:
6a:a8:4d:07:27:ee:01:34:a6:d8:65:c9:df:36:46:
3f:04:c2:76:b1:e0:22:75:22:a8:ef:41:6c:b4:bd:
d6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:DB:A4:96:D6:B2:1D:33:41:D8:E1:C3:5A:53:35:17:F4:02:B6:D5
X509v3 Authority Key Identifier:
keyid:E9:D2:72:1F:2E:2B:D0:11:B8:A6:86:0A:D2:57:2C:40:5C:0B:54:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6dJyHy4r0BG4poYK0lcsQFwLVA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/HdukltayHTNB2OHDWlM1F_QCttU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/368df0-5c41-49d3-a9a9-c45903c3b329/1/6dJyHy4r0BG4poYK0lcsQFwLVA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.43.192.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:eb:b4:e3:27:93:b9:0f:86:ce:81:61:e6:8c:b8:d9:86:9f:
4f:7c:42:f0:4f:9b:f8:29:8c:4c:df:a9:89:51:98:9f:98:33:
fa:38:75:13:2f:72:b4:0d:e1:f3:9c:b9:a8:a3:06:ac:30:09:
5f:f8:40:45:4a:59:21:1e:1d:59:15:53:a6:4c:4b:d9:75:98:
a0:67:90:5a:2f:da:1d:8f:a9:3d:3f:63:bd:72:97:cd:55:1e:
67:34:e2:1f:62:a9:e9:bc:2f:04:08:fd:c4:26:42:bc:72:13:
79:c1:f8:1f:3b:8c:3b:8a:7b:e3:8a:d1:5e:fe:ab:e5:9b:1e:
1f:95:03:d4:f1:01:c1:6a:c2:34:ed:ef:f9:e1:ed:a9:72:10:
43:73:7d:58:40:57:03:6a:8d:45:d2:1d:b6:52:da:17:24:16:
1c:e7:b9:6c:52:e2:1e:3a:f9:57:cd:cb:61:13:a2:6d:ab:b7:
39:00:ec:9b:04:8e:4c:57:3d:66:64:0c:5d:6c:b1:c5:6c:89:
57:f6:76:8a:2b:20:a8:8e:92:dc:a5:83:85:d1:42:7f:d3:84:
d6:0b:e8:0f:2f:bf:b5:bd:96:f2:31:b4:65:71:b3:25:24:c9:
0c:e1:ec:8e:86:56:89:60:54:ad:cf:89:ef:f4:d2:67:9d:f8:
98:74:f6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 18:06:44 2024 by rpki-client on console-ams.rpki-client.org