Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/HSWPN05QNNi-VvIaYjrqtKG-Q-I.roa
File: HSWPN05QNNi-VvIaYjrqtKG-Q-I.roa (raw, json)
Hash identifier: 62rGHyvbX6AaXGqwvGxMUO4L5nagqwkac3glfq/ecck=
Subject key identifier: 1D:25:8F:37:4E:50:34:D8:BE:56:F2:1A:62:3A:EA:B4:A1:BE:43:E2
Certificate issuer: /CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Certificate serial: 018F1B2036E1570A568D21D43F5FCA4EAE37
Authority key identifier: 16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/HSWPN05QNNi-VvIaYjrqtKG-Q-I.roa
Signing time: Fri 26 Apr 2024 15:57:27 +0000
ROA not before: Fri 26 Apr 2024 15:57:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207233
IP address blocks: 45.84.124.0/22 maxlen: 24
185.162.60.0/22 maxlen: 24
2a0a:4000::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:1b:20:36:e1:57:0a:56:8d:21:d4:3f:5f:ca:4e:ae:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1609c24dae3eeffcbefa37a688664ac93300ef58
Validity
Not Before: Apr 26 15:57:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d258f374e5034d8be56f21a623aeab4a1be43e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:a8:bb:56:55:f6:92:1c:7e:a1:86:b9:37:d5:
6a:51:6f:1c:8d:5a:7e:55:52:c7:43:8e:01:f7:a7:
52:dd:22:1a:bd:c3:e4:de:68:3c:e1:4e:53:d0:6d:
47:d9:a3:6d:a0:47:d1:d7:59:40:58:0c:ec:91:47:
13:48:fd:6c:2b:20:29:ee:00:36:42:4d:ae:e1:55:
a2:14:3d:24:37:b1:e2:98:15:bd:33:88:48:c1:84:
11:54:7e:43:99:f4:63:53:cd:8e:43:09:04:cf:0d:
ca:f4:f7:71:ee:ad:4a:2d:13:0f:bb:cf:ae:d8:f1:
e6:67:1f:61:b5:99:50:3a:a3:a7:f4:23:99:48:e1:
2f:e2:eb:55:5d:19:8e:63:54:86:b3:19:73:58:b7:
b7:03:bc:8f:c1:e2:1a:b8:60:d9:f5:9f:b6:9a:c3:
ac:ce:d3:23:be:57:ee:09:e3:53:61:06:e9:b2:a9:
04:30:39:eb:ac:5b:86:6a:a1:9d:53:6c:6f:3c:9a:
bc:6a:48:df:48:9a:4f:28:58:6e:11:43:c0:ea:14:
75:fe:07:05:cd:d7:81:57:d1:db:1b:0c:62:0d:90:
40:20:1f:04:c8:b7:ed:b9:32:c4:13:34:b1:7b:67:
06:87:a8:a2:bc:c0:e1:de:f3:ed:09:2a:16:b2:4a:
2e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:25:8F:37:4E:50:34:D8:BE:56:F2:1A:62:3A:EA:B4:A1:BE:43:E2
X509v3 Authority Key Identifier:
keyid:16:09:C2:4D:AE:3E:EF:FC:BE:FA:37:A6:88:66:4A:C9:33:00:EF:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FgnCTa4-7_y--jemiGZKyTMA71g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/HSWPN05QNNi-VvIaYjrqtKG-Q-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c5f2a4-adca-4fc4-87b2-bf4b75e200a7/1/FgnCTa4-7_y--jemiGZKyTMA71g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.124.0/22
185.162.60.0/22
IPv6:
2a0a:4000::/29
Signature Algorithm: sha256WithRSAEncryption
66:34:63:8c:88:82:dc:b9:b7:36:00:4f:75:98:57:72:eb:8e:
49:a2:88:f6:23:25:ee:c9:f4:49:9c:ce:3c:d5:f1:f8:21:48:
97:a7:03:54:eb:03:7b:29:1a:2d:5a:3c:c7:a4:1d:f9:5d:b6:
21:a7:9f:2b:6d:a1:6b:ed:7a:03:05:44:97:85:0b:53:0a:b1:
65:39:e7:34:c8:c1:62:a7:cc:2a:22:93:1e:bb:c9:7c:8e:4d:
f8:9e:04:3e:3b:8a:a5:94:2f:ca:59:9d:2e:8a:4c:c7:2b:ee:
c7:1f:58:5d:26:79:93:47:95:73:4d:66:20:90:e7:aa:01:d1:
31:79:bb:18:d3:da:84:8d:d1:fb:02:a1:ed:0b:9b:08:75:00:
55:39:68:d7:47:15:77:e5:7b:7a:01:92:89:fb:21:a0:b5:2e:
60:4d:98:1a:54:69:71:38:3e:3a:99:40:19:2c:62:c0:d6:65:
4f:4f:b0:e6:14:1f:9a:2e:7f:97:40:a8:ab:57:67:e8:60:10:
5e:a7:44:92:ee:61:54:7a:bf:c0:75:c7:be:e0:2a:31:9f:a1:
9d:11:d4:c3:b9:6a:d8:7a:6c:1d:d2:54:15:ca:49:82:fd:13:
b7:3f:b7:03:86:dc:55:7b:a8:22:fd:70:80:64:7b:b7:69:72:
90:c2:3a:4e
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAY8bIDbhVwpWjSHUP1/KTq43MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MDljMjRkYWUzZWVmZmNiZWZhMzdhNjg4NjY0YWM5MzMw
MGVmNTgwHhcNMjQwNDI2MTU1NzI3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDI1OGYzNzRlNTAzNGQ4YmU1NmYyMWE2MjNhZWFiNGExYmU0M2UyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7qi7VlX2khx+oYa5N9VqUW8cjVp+
VVLHQ44B96dS3SIavcPk3mg84U5T0G1H2aNtoEfR11lAWAzskUcTSP1sKyAp7gA2
Qk2u4VWiFD0kN7HimBW9M4hIwYQRVH5DmfRjU82OQwkEzw3K9Pdx7q1KLRMPu8+u
2PHmZx9htZlQOqOn9COZSOEv4utVXRmOY1SGsxlzWLe3A7yPweIauGDZ9Z+2msOs
ztMjvlfuCeNTYQbpsqkEMDnrrFuGaqGdU2xvPJq8akjfSJpPKFhuEUPA6hR1/gcF
zdeBV9HbGwxiDZBAIB8EyLftuTLEEzSxe2cGh6iivMDh3vPtCSoWskouLwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFB0ljzdOUDTYvlbyGmI66rShvkPiMB8GA1UdIwQY
MBaAFBYJwk2uPu/8vvo3pohmSskzAO9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjIt
YmY0Yjc1ZTIwMGE3LzEvSFNXUE4wNVFOTmktVnZJYVlqcnF0S0ctUS1JLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNWYyYTQtYWRjYS00ZmM0LTg3YjItYmY0Yjc1ZTIwMGE3
LzEvRmduQ1RhNC03X3ktLWplbWlHWkt5VE1BNzFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLVR8AwQC
uaI8MA0EAgACMAcDBQMqCkAAMA0GCSqGSIb3DQEBCwUAA4IBAQBmNGOMiILcubc2
AE91mFdy645Jooj2IyXuyfRJnM481fH4IUiXpwNU6wN7KRotWjzHpB35XbYhp58r
baFr7XoDBUSXhQtTCrFlOec0yMFip8wqIpMeu8l8jk34ngQ+O4qllC/KWZ0uikzH
K+7HH1hdJnmTR5VzTWYgkOeqAdExebsY09qEjdH7AqHtC5sIdQBVOWjXRxV35Xt6
AZKJ+yGgtS5gTZgaVGlxOD46mUAZLGLA1mVPT7DmFB+aLn+XQKirV2foYBBep0SS
7mFUer/Adce+4Coxn6GdEdTDuWrYemwd0lQVykmC/RO3P7cDhtxVe6gi/XCAZHu3
aXKQwjpO
-----END CERTIFICATE-----
Generated at Sat Nov 23 10:11:53 2024 by rpki-client on console-fra.rpki-client.org