Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/HUS_JiWQPS6l8BfR4Rwo4X9fk1s.roa
File: HUS_JiWQPS6l8BfR4Rwo4X9fk1s.roa (raw, json)
Hash identifier: y/kMy6wcSz2Jb03BhBCkIUFg0bOLAMvZ2fcvO7bkfik=
Subject key identifier: 1D:44:BF:26:25:90:3D:2E:A5:F0:17:D1:E1:1C:28:E1:7F:5F:93:5B
Certificate issuer: /CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Certificate serial: 018CC7933184CDBD961ABB750B5081B0E604
Authority key identifier: 03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/HUS_JiWQPS6l8BfR4Rwo4X9fk1s.roa
Signing time: Tue 02 Jan 2024 00:29:21 +0000
ROA not before: Tue 02 Jan 2024 00:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207645
IP address blocks: 185.86.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 May 2024 00:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:31:84:cd:bd:96:1a:bb:75:0b:50:81:b0:e6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=037862b4608c79f450295ec5c80c7c7ad6dfe2a2
Validity
Not Before: Jan 2 00:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d44bf2625903d2ea5f017d1e11c28e17f5f935b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9b:a6:07:d3:56:4a:a6:c5:d0:67:83:38:fd:
ff:02:93:9a:ad:80:dd:9b:d8:bb:e3:99:bc:25:13:
28:6c:d3:21:a4:a5:77:6f:af:6c:27:28:6c:a5:4e:
72:a8:b6:c2:d8:c0:ad:17:3d:87:cd:a4:e3:7e:43:
0f:51:e7:1e:a4:1d:7f:d8:eb:95:41:85:2e:af:00:
eb:6d:e1:f4:e7:cc:6a:8d:a3:4d:15:ae:af:cc:51:
18:23:be:94:82:4a:05:20:73:46:cd:1d:83:c0:b1:
6a:76:ee:5c:da:df:b3:28:03:38:bf:f6:27:b0:11:
90:14:90:52:ff:fb:fc:da:2f:0c:94:25:ee:c9:6b:
2a:50:b6:9d:52:6f:dd:df:3f:4f:ff:4f:03:de:9f:
a3:97:17:7c:e2:6a:fc:4c:48:cd:4c:2e:87:58:43:
26:8c:6c:86:0a:e1:63:96:13:ef:3a:bb:c4:35:f4:
7c:f8:7e:2a:6d:e4:bb:63:1a:b6:97:39:be:6f:e1:
d0:49:fc:4c:c8:06:73:a0:07:2b:e2:08:9f:1b:ef:
d6:dc:0b:fc:bc:29:c4:10:fa:3b:85:c1:8d:bb:d8:
6b:b0:83:71:df:de:5e:d0:11:50:19:45:eb:e1:e9:
05:83:b0:3d:b7:b2:28:70:d7:dc:0c:8a:43:b2:3f:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:44:BF:26:25:90:3D:2E:A5:F0:17:D1:E1:1C:28:E1:7F:5F:93:5B
X509v3 Authority Key Identifier:
keyid:03:78:62:B4:60:8C:79:F4:50:29:5E:C5:C8:0C:7C:7A:D6:DF:E2:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A3hitGCMefRQKV7FyAx8etbf4qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/HUS_JiWQPS6l8BfR4Rwo4X9fk1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/1afe53-f1b8-4315-ab1c-f474f7bd3531/1/A3hitGCMefRQKV7FyAx8etbf4qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.10.0/24
Signature Algorithm: sha256WithRSAEncryption
82:fa:ad:a4:70:d2:47:14:a8:21:e1:1e:b8:85:66:19:1d:70:
e0:6a:00:55:50:0f:e6:04:a3:6d:fb:de:b3:1e:d2:7f:c5:7e:
7b:a4:29:6f:3c:2d:ae:5d:d5:13:b1:51:a2:11:f5:56:19:d4:
a1:7b:3e:65:d0:06:59:1c:03:30:9f:1b:4d:8a:04:b7:f3:7e:
70:fd:5a:e3:1b:11:77:02:32:12:c0:87:4c:b4:c6:59:2e:0e:
9f:c7:01:80:b4:15:32:78:e4:d3:6f:1b:94:3a:95:f5:63:8d:
b5:2e:42:ba:a2:ce:a3:cd:7f:2f:3d:99:90:05:68:db:6e:8d:
88:ed:79:a2:79:af:8b:09:87:f0:0b:9c:78:51:25:97:72:e6:
36:fd:55:53:84:6c:ae:97:3c:5f:02:27:e0:b7:c9:78:9c:63:
72:10:df:a9:89:f7:08:ae:ef:e2:d8:73:7d:4d:be:31:4e:ad:
e5:25:0e:26:9c:6d:65:59:e8:6a:85:2e:76:37:ff:c3:bd:4e:
ba:9f:26:f6:d6:8b:e8:d0:e6:33:0d:91:38:b5:36:9a:3a:85:
00:d0:a6:41:0f:b1:6f:46:96:46:b8:14:19:d9:e2:9b:ba:2d:
57:cb:43:d8:cd:d5:fa:f5:1a:af:e3:e4:10:65:ec:da:89:14:
3b:aa:19:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 10 07:28:49 2024 by rpki-client on console-fra.rpki-client.org