Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/HHR4cYvVjqGsg52k0QAorLoKZlg.roa
File: HHR4cYvVjqGsg52k0QAorLoKZlg.roa (raw, json)
Hash identifier: sWzCYcyrLHEkVPpJWkSrR04ly49lpPPKO9cviEqFt8c=
Subject key identifier: 1C:74:78:71:8B:D5:8E:A1:AC:83:9D:A4:D1:00:28:AC:BA:0A:66:58
Certificate issuer: /CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Certificate serial: 018CC26CFBB83AB312190B7692A920402DA5
Authority key identifier: 71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/HHR4cYvVjqGsg52k0QAorLoKZlg.roa
Signing time: Mon 01 Jan 2024 00:29:31 +0000
ROA not before: Mon 01 Jan 2024 00:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201333
IP address blocks: 212.54.240.0/20 maxlen: 23
212.54.232.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 06:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6c:fb:b8:3a:b3:12:19:0b:76:92:a9:20:40:2d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712c99cc338f692da8f81b716bad79d1c9d7c820
Validity
Not Before: Jan 1 00:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c7478718bd58ea1ac839da4d10028acba0a6658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:26:ff:65:0c:46:4b:02:e8:a3:a8:e1:45:
92:54:16:f6:46:94:30:ad:9a:e3:b1:a4:0d:30:a7:
6d:0d:d3:4e:c9:71:97:39:e5:8f:83:55:b3:a7:92:
5d:f0:e8:65:e3:22:81:40:12:22:1e:43:2c:44:a0:
86:dc:b5:42:30:46:30:b7:d6:8a:d4:0f:79:4d:58:
90:18:e2:5e:8a:fb:91:8c:14:c3:9c:07:c2:d8:f5:
5d:13:81:76:50:da:aa:de:ac:74:8e:f7:43:42:6e:
54:6c:9c:d2:5b:7a:e8:77:78:31:be:b3:38:33:67:
aa:7c:7f:d3:14:44:bd:86:07:67:55:a9:24:c9:45:
e2:1f:de:1f:d6:42:c3:a2:53:61:e5:69:26:86:3e:
21:3a:8b:b9:53:25:0c:85:24:b9:71:8e:a9:d3:94:
4b:56:5c:8f:af:7f:2e:83:0c:ff:be:02:aa:38:b6:
e0:fa:53:49:a6:df:19:61:3d:6e:da:44:7a:7f:97:
a3:04:ab:ac:c0:b2:8a:f3:71:2c:e6:d2:a2:49:dc:
70:80:42:da:20:56:62:88:5a:11:2c:ec:b5:cb:56:
04:d7:e4:8a:2f:48:3d:bf:0f:ad:1f:19:bb:e3:be:
7c:c0:23:3d:c1:97:26:2a:73:91:62:d5:fa:49:25:
9e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:74:78:71:8B:D5:8E:A1:AC:83:9D:A4:D1:00:28:AC:BA:0A:66:58
X509v3 Authority Key Identifier:
keyid:71:2C:99:CC:33:8F:69:2D:A8:F8:1B:71:6B:AD:79:D1:C9:D7:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSyZzDOPaS2o-Btxa6150cnXyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/HHR4cYvVjqGsg52k0QAorLoKZlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d95f32-822a-4cfe-9853-4ebef8884396/1/cSyZzDOPaS2o-Btxa6150cnXyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.54.232.0-212.54.255.255
Signature Algorithm: sha256WithRSAEncryption
7c:40:28:66:e6:55:a5:1d:6a:7d:85:df:28:98:e7:66:37:70:
3c:0f:c5:29:09:0d:94:7b:12:07:c7:c2:9b:5f:11:53:a1:81:
02:b7:43:b9:59:17:b5:fd:61:50:6c:08:3a:c8:b5:81:9e:18:
21:0d:6f:3f:1a:26:74:fd:cb:14:b7:b9:70:a4:d3:2c:39:26:
5c:95:03:b0:d6:9e:ff:48:50:36:e2:d3:b2:83:f9:1d:86:bb:
c4:25:7e:c4:f0:19:33:6d:99:12:ec:80:fa:f3:1f:c5:df:7b:
e7:23:b6:62:0f:7c:18:f4:e4:5a:ca:a1:a6:22:1b:c9:0b:bc:
a2:5d:21:f3:d1:1c:75:e2:57:4e:56:80:fa:9e:e3:58:a0:4a:
d0:05:48:69:78:44:9d:42:42:6e:b9:a4:28:8b:ed:28:aa:54:
fc:2e:b8:e9:a7:80:9b:23:c3:b5:d2:85:f2:a9:28:3d:f2:05:
c9:3d:71:3e:03:08:92:4b:9c:15:3e:53:95:8c:0b:95:d1:27:
0e:c2:e2:83:bc:0e:4c:7b:fa:23:c3:68:47:0d:23:ac:9e:9a:
80:6e:82:34:4c:ee:dc:b5:49:7c:4c:3b:d9:4f:3a:9c:72:80:
5e:f2:9e:5e:39:00:d1:6c:2a:dd:98:ff:5b:3d:cc:d7:09:dc:
ca:4d:ec:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 12:04:45 2024 by rpki-client on console-fra.rpki-client.org