Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Hmfu_JJBsAcC6UFLzT7qFUHj9ng.roa
File: Hmfu_JJBsAcC6UFLzT7qFUHj9ng.roa (raw, json)
Hash identifier: TZs8ugbpjg+aIUnOnqITTQ+IK2zuNgq1vFCxJclFgdE=
Subject key identifier: 1E:67:EE:FC:92:41:B0:07:02:E9:41:4B:CD:3E:EA:15:41:E3:F6:78
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018CC50122BDDD91B02197EFBF5CD6E12E8E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Hmfu_JJBsAcC6UFLzT7qFUHj9ng.roa
Signing time: Mon 01 Jan 2024 12:30:35 +0000
ROA not before: Mon 01 Jan 2024 12:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201814
IP address blocks: 185.241.208.0/24 maxlen: 24
45.80.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 06 May 2024 16:03:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:22:bd:dd:91:b0:21:97:ef:bf:5c:d6:e1:2e:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 1 12:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e67eefc9241b00702e9414bcd3eea1541e3f678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:72:d5:65:ea:53:b8:26:54:05:74:54:4e:75:
40:0e:85:ef:bf:ae:0f:34:b8:72:a5:ca:eb:f0:bd:
4e:3e:40:84:16:61:ff:0f:58:f7:7b:17:e1:fd:fd:
3d:2e:97:42:c7:64:39:55:48:b9:d3:20:b4:a2:25:
48:83:02:15:2d:e3:dc:70:c2:cd:0b:6d:ae:df:0f:
6a:97:dd:ab:4c:03:90:4f:89:40:7a:12:84:6b:ef:
ba:f9:3b:84:93:30:87:1e:07:c5:c7:62:af:d1:09:
29:1b:93:82:3a:ed:1b:21:c9:c4:fd:2b:3f:7e:4f:
6c:ea:99:df:8e:86:8b:3f:39:e2:54:d5:ea:e0:3e:
0e:0a:4a:a5:51:bc:bf:a0:cb:d9:00:3a:d0:5f:5b:
83:3a:37:2f:bc:ef:7f:f7:d9:50:00:5c:17:8e:c3:
24:fc:ab:e2:cc:8a:0e:62:aa:c7:1d:ac:bb:1c:09:
41:d5:4a:d4:21:b0:d7:a1:74:55:23:90:de:83:ea:
93:a1:d8:de:ca:df:2e:31:f2:42:4a:db:43:15:b6:
a6:03:4e:ae:9c:a8:0b:6d:f0:d8:51:66:9e:70:f3:
28:b0:a8:0a:27:bd:72:cd:ce:d8:8d:e2:2d:26:60:
a4:c8:e0:40:1c:a9:1d:15:1d:14:a8:d2:5e:fb:fd:
e7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:67:EE:FC:92:41:B0:07:02:E9:41:4B:CD:3E:EA:15:41:E3:F6:78
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/Hmfu_JJBsAcC6UFLzT7qFUHj9ng.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.80.158.0/24
185.241.208.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:53:62:37:8c:32:8e:49:65:29:51:69:38:99:1d:18:3e:1f:
a1:54:c3:ed:8b:40:57:3e:f5:ce:45:78:cc:ec:92:a8:67:d7:
77:46:ce:f8:46:55:c8:14:e4:f4:91:9a:53:e4:bc:3b:42:58:
e1:d4:50:6a:77:cd:eb:ad:21:0c:d0:16:3f:21:7c:fc:5a:53:
be:c0:d8:64:3e:60:c5:14:fa:e1:df:07:79:81:bb:7c:1c:3f:
70:72:f2:a8:76:19:98:e3:f0:a5:5f:51:9a:90:2d:92:ba:00:
77:38:7a:3c:aa:d9:4e:b7:1f:3b:a4:6c:05:35:40:f5:c2:e4:
77:c3:b7:e8:c9:6b:6c:80:fd:ca:28:bf:18:ac:eb:6d:04:bf:
2c:70:26:b2:79:05:38:ad:1c:1a:cb:e6:7a:88:5f:95:78:4c:
44:f5:c5:58:a0:33:71:78:33:50:80:ab:2b:3a:3d:79:0d:4c:
c5:e6:5c:19:53:0f:c1:68:00:35:41:23:de:44:68:f4:fe:7e:
fd:2b:1e:3c:b8:34:33:9d:ed:dc:86:9f:24:53:dc:bd:47:53:
d1:d2:56:6b:cc:dc:bc:f5:bb:12:e3:f9:a5:24:11:78:00:fe:
f7:ce:78:24:06:4e:2e:5b:a5:c5:16:31:3d:77:b0:97:1b:79:
28:10:aa:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 20:04:47 2024 by rpki-client on console-ams.rpki-client.org