Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/Hk8Dg2Jmohd7dtQlRpwGrY96Y7E.roa
File: Hk8Dg2Jmohd7dtQlRpwGrY96Y7E.roa (raw, json)
Hash identifier: 3WEa/3kKLKfM5/TCp1H4Ts5d/DZ76jD51/0D3oalVIc=
Subject key identifier: 1E:4F:03:83:62:66:A2:17:7B:76:D4:25:46:9C:06:AD:8F:7A:63:B1
Certificate issuer: /CN=d476b006351a2f9cf2a91386de50ce27f1550595
Certificate serial: 018CC86FB496F0D6D0AFEE8CA13B9154D3CF
Authority key identifier: D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/Hk8Dg2Jmohd7dtQlRpwGrY96Y7E.roa
Signing time: Tue 02 Jan 2024 04:30:13 +0000
ROA not before: Tue 02 Jan 2024 04:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8586
IP address blocks: 178.239.96.0/20 maxlen: 24
195.12.0.0/19 maxlen: 24
164.40.208.0/20 maxlen: 24
195.74.128.0/19 maxlen: 24
212.58.32.0/19 maxlen: 24
185.13.140.0/22 maxlen: 24
84.252.192.0/18 maxlen: 24
146.255.0.0/20 maxlen: 24
213.83.64.0/18 maxlen: 24
94.250.224.0/20 maxlen: 24
62.8.96.0/19 maxlen: 24
5.102.80.0/20 maxlen: 24
37.152.32.0/20 maxlen: 24
213.246.128.0/18 maxlen: 24
2001:4160::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:b4:96:f0:d6:d0:af:ee:8c:a1:3b:91:54:d3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d476b006351a2f9cf2a91386de50ce27f1550595
Validity
Not Before: Jan 2 04:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e4f03836266a2177b76d425469c06ad8f7a63b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:18:e2:06:d7:22:62:0f:42:77:8d:2f:a2:d1:
78:af:84:f3:df:39:3b:fe:48:ea:fd:99:14:e7:71:
3d:8f:0d:20:5c:3f:22:76:12:e6:16:7c:3e:9e:d8:
60:ab:a7:02:f2:09:97:34:46:02:00:04:94:30:c2:
6a:72:62:a8:7b:e7:77:96:0b:98:59:da:ad:5f:f9:
16:12:62:7d:fe:83:17:be:8d:d4:29:13:75:59:a3:
ee:d9:f1:7a:27:48:fa:de:c2:8e:75:7e:9e:21:8b:
6d:b4:2a:ea:36:3b:26:bf:2b:ce:15:14:d5:ad:1c:
d0:51:ee:98:04:6f:8b:b5:a5:82:15:e4:37:ac:c7:
20:55:ef:fd:19:17:02:c1:06:68:dc:93:d7:4d:d5:
04:ee:6e:e4:0a:e2:93:65:1a:54:17:65:d6:c8:23:
47:21:f3:16:df:bd:0d:56:b4:fd:92:b7:b4:5f:76:
32:22:35:02:d5:8e:9b:f6:56:1c:9a:3f:99:52:b5:
a5:1f:3c:34:af:f4:cd:3a:9c:82:8a:cd:a3:bc:fc:
3d:c4:fd:68:e6:c8:66:6a:71:ec:0b:02:03:a7:46:
0c:5f:51:b3:96:dd:47:8d:69:02:01:94:aa:f1:da:
99:21:42:2e:b5:05:b5:b9:c1:2e:d4:3e:eb:43:55:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:4F:03:83:62:66:A2:17:7B:76:D4:25:46:9C:06:AD:8F:7A:63:B1
X509v3 Authority Key Identifier:
keyid:D4:76:B0:06:35:1A:2F:9C:F2:A9:13:86:DE:50:CE:27:F1:55:05:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HawBjUaL5zyqROG3lDOJ_FVBZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/Hk8Dg2Jmohd7dtQlRpwGrY96Y7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/46207f-7e34-4292-b14a-44c07f314904/1/1HawBjUaL5zyqROG3lDOJ_FVBZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.102.80.0/20
37.152.32.0/20
62.8.96.0/19
84.252.192.0/18
94.250.224.0/20
146.255.0.0/20
164.40.208.0/20
178.239.96.0/20
185.13.140.0/22
195.12.0.0/19
195.74.128.0/19
212.58.32.0/19
213.83.64.0/18
213.246.128.0/18
IPv6:
2001:4160::/32
Signature Algorithm: sha256WithRSAEncryption
6a:b6:92:d3:22:cb:09:e0:d6:a6:c2:67:a5:ff:c0:1b:5a:1f:
bd:ee:39:37:7b:e8:0d:cd:d1:bb:10:64:e0:2f:fb:6b:ad:da:
75:a8:b1:68:34:79:fa:3d:b3:8e:79:18:dd:c0:60:d4:9f:3e:
6a:98:5a:eb:8d:77:a6:a7:67:12:77:75:6b:18:ed:5c:dd:7c:
53:a6:4d:8b:ba:10:f9:fb:d7:27:fc:13:5f:44:36:aa:95:9c:
3a:14:cf:a8:19:db:ec:f6:98:49:fd:06:0a:04:b7:cd:b3:bf:
7e:2c:86:c7:49:e7:50:ae:d9:e9:1a:e3:28:70:05:6e:8e:83:
be:2d:27:ab:08:f2:90:f1:89:9b:a6:7e:28:f0:3b:92:c2:fd:
02:af:22:85:3f:92:44:14:11:6c:bf:af:af:bc:57:d4:f1:6d:
d3:06:a9:82:15:19:5d:11:b4:d4:ef:77:95:41:5b:cc:a9:e7:
1a:ea:ef:d0:b2:88:08:3b:ab:2a:dc:1f:b3:ec:2a:fd:a9:32:
07:94:4c:cc:57:da:ff:fa:96:93:28:c4:85:34:5d:c9:34:24:
07:b6:dc:42:29:57:7d:e6:60:6e:88:11:e2:1f:5b:2e:51:4d:
a4:71:38:8b:cc:87:c8:5b:20:7c:ed:cb:b6:c1:54:cf:a6:2f:
be:ca:c0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 13:11:57 2024 by rpki-client on console-ams.rpki-client.org