Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/HupaTFZuGCcIfr0IgspoWUoeYX4.roa
File: HupaTFZuGCcIfr0IgspoWUoeYX4.roa (raw, json)
Hash identifier: hy83rMvE1ot7ukylHoJcLwBj0L0Rh7YCyAjDxiVRucw=
Subject key identifier: 1E:EA:5A:4C:56:6E:18:27:08:7E:BD:08:82:CA:68:59:4A:1E:61:7E
Certificate issuer: /CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Certificate serial: 018CC8DEFBD4363BF996E833BFAF5B2636C5
Authority key identifier: FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/HupaTFZuGCcIfr0IgspoWUoeYX4.roa
Signing time: Tue 02 Jan 2024 06:31:45 +0000
ROA not before: Tue 02 Jan 2024 06:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8798
IP address blocks: 212.69.76.0/24 maxlen: 24
212.69.72.0/22 maxlen: 22
212.69.78.0/23 maxlen: 23
212.69.80.0/23 maxlen: 23
212.69.64.0/21 maxlen: 21
2001:4028::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:de:fb:d4:36:3b:f9:96:e8:33:bf:af:5b:26:36:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1e9b4e8dc49be3aba597425aefd8b3a5362ffc
Validity
Not Before: Jan 2 06:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1eea5a4c566e1827087ebd0882ca68594a1e617e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:35:ae:9e:eb:15:5a:94:00:26:7e:4f:f1:80:
5f:54:3d:14:e7:8b:5d:5d:c9:cf:9e:3e:ff:d1:8a:
a4:83:af:01:32:b8:ee:10:be:6c:dc:25:40:f6:a1:
6d:43:00:d5:95:22:b5:e4:d9:97:7f:79:f0:9f:12:
87:c7:81:60:cc:c6:d9:d6:6d:5e:53:ab:04:15:c4:
0a:da:24:e0:7b:25:0d:0f:1c:0c:22:14:d0:28:d1:
d8:e4:05:c1:c4:50:40:ef:ba:49:d9:d3:08:aa:b1:
93:c3:2f:c1:f2:99:eb:e9:a6:05:f6:fe:e4:4f:a6:
50:b2:01:f3:28:c8:48:ad:cb:9d:9c:37:55:13:21:
1b:4f:4b:26:63:0b:e1:ee:ae:4c:ae:4d:76:a4:a3:
87:87:37:f8:2b:42:2a:ab:1b:95:63:1e:c1:06:44:
09:e0:63:76:7b:17:a0:46:01:c9:0d:e9:04:a5:07:
5e:a6:b0:4d:05:3a:1e:16:69:7d:3c:0a:84:4d:cd:
d2:5e:49:f7:57:95:68:7c:1a:4b:f6:c2:74:63:d4:
e6:b5:0a:b3:f2:3e:3c:9d:07:f2:32:bd:de:64:e3:
06:c9:d6:0d:b0:d0:1b:76:2c:b0:d7:32:5e:a0:39:
5f:02:d6:19:f2:1e:75:e9:1e:ed:be:0b:94:21:a1:
ae:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:5A:4C:56:6E:18:27:08:7E:BD:08:82:CA:68:59:4A:1E:61:7E
X509v3 Authority Key Identifier:
keyid:FA:1E:9B:4E:8D:C4:9B:E3:AB:A5:97:42:5A:EF:D8:B3:A5:36:2F:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/HupaTFZuGCcIfr0IgspoWUoeYX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4707b4-0032-4ac7-bcc7-40c1a72702ef/1/1-h6bTo3Em-OrpZdCWu_Ys6U2L_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.69.64.0-212.69.76.255
212.69.78.0-212.69.81.255
IPv6:
2001:4028::/29
Signature Algorithm: sha256WithRSAEncryption
79:a2:d5:82:67:60:ba:00:52:4b:3a:00:6c:20:78:fa:52:a4:
7f:b2:af:eb:7b:f5:d7:26:49:95:b4:41:ac:13:67:8a:a8:b0:
10:a7:7b:a5:94:e0:69:dd:74:73:28:86:9b:b0:60:71:60:c8:
26:8e:a5:41:cc:c0:a6:91:47:f8:60:89:88:56:06:34:f7:74:
86:f2:b2:43:4d:0b:d1:fe:1d:de:70:82:10:45:03:8f:7e:03:
f6:2d:59:c9:6a:d4:2f:4d:70:50:f4:4b:10:e5:b5:1a:e7:dd:
6f:74:6f:1b:8e:40:17:61:69:89:34:07:4a:a2:86:3c:0c:ec:
22:cd:58:aa:fd:7b:fa:27:b5:9b:76:64:bd:e2:9f:73:ec:f5:
6b:39:bb:51:19:0f:94:b9:7a:59:fc:f4:df:4c:93:9c:9a:c9:
08:93:cf:37:3c:ad:1c:62:3b:4a:a5:63:29:40:7d:f0:fc:92:
19:a8:94:96:b6:ff:e5:2f:4a:fb:b9:96:5c:69:50:b3:2f:2b:
9f:5c:f8:a0:9c:a1:9c:a5:7c:17:ff:5b:25:99:72:34:59:73:
e8:56:88:50:1e:43:e3:fd:d9:85:a7:3b:ad:1f:ff:b6:2a:f0:
8c:d1:c9:c3:3b:1f:dd:67:fd:ec:f9:09:95:c3:57:48:88:c1:
95:d1:a9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 19:13:03 2024 by rpki-client on console-fra.rpki-client.org