Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/HuqTWswe34-6MbCLsbaHFL4HKQ8.roa
File: HuqTWswe34-6MbCLsbaHFL4HKQ8.roa (raw, json)
Hash identifier: PrAiXv88A54m6WaRL3Dl4+3a6+icI69Mqwe3/+kjk60=
Subject key identifier: 1E:EA:93:5A:CC:1E:DF:8F:BA:31:B0:8B:B1:B6:87:14:BE:07:29:0F
Certificate issuer: /CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Certificate serial: 018CC94D696F4333AE4019DAA8CEE553CE21
Authority key identifier: 75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/HuqTWswe34-6MbCLsbaHFL4HKQ8.roa
Signing time: Tue 02 Jan 2024 08:32:22 +0000
ROA not before: Tue 02 Jan 2024 08:32:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60631
IP address blocks: 185.8.172.0/24 maxlen: 24
185.8.174.0/24 maxlen: 24
185.8.173.0/24 maxlen: 24
185.8.175.0/24 maxlen: 24
130.185.75.0/24 maxlen: 24
130.185.74.0/24 maxlen: 24
130.185.76.0/24 maxlen: 24
130.185.78.0/23 maxlen: 23
130.185.78.0/24 maxlen: 24
130.185.77.0/24 maxlen: 24
130.185.73.0/24 maxlen: 24
130.185.72.0/24 maxlen: 24
130.185.79.0/24 maxlen: 24
185.208.174.0/24 maxlen: 24
185.208.175.0/24 maxlen: 24
2a03:2dc0:1000::/36 maxlen: 36
2a03:2dc0::/36 maxlen: 36
2a03:2dc0:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:69:6f:43:33:ae:40:19:da:a8:ce:e5:53:ce:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759d6afb8ddf8f8c0dd660790edcba1f3b370c63
Validity
Not Before: Jan 2 08:32:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1eea935acc1edf8fba31b08bb1b68714be07290f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f2:10:f5:1b:42:e5:15:39:e8:cc:38:1c:2e:
6c:85:f7:97:fe:0c:b8:a6:00:13:d4:67:d4:5b:24:
26:32:40:29:f3:fb:0d:e9:31:e1:d6:ac:5a:6f:94:
97:4b:6a:99:78:66:64:0e:08:a0:72:8b:a5:73:c5:
f7:db:77:24:ad:3c:78:71:3e:c1:77:9b:4e:dd:2a:
a3:23:93:13:28:01:ff:7d:d6:1b:c9:4d:49:0d:0a:
a7:21:de:61:17:a1:47:05:5d:0a:11:76:7b:88:6f:
f0:dc:75:5f:ed:ba:c3:93:a3:50:16:5e:51:2e:49:
c5:8e:bd:42:46:48:83:37:dc:c3:c2:27:93:22:c5:
2f:a5:8c:c8:e7:ac:4a:8d:d1:59:8c:11:e1:d3:9d:
10:17:e3:1a:cb:d5:ef:6e:3a:6f:8c:56:59:58:27:
c6:d9:8c:ee:b1:6d:03:1a:b5:61:8a:60:f9:41:a3:
e8:4c:83:d9:92:76:4a:c3:d0:ee:dd:37:61:7e:fe:
21:23:8a:7e:8b:cc:57:06:dd:d9:a1:bf:fb:f9:eb:
8a:93:fa:c2:b5:02:f6:30:ed:ee:3f:da:ae:02:3f:
c6:26:a9:b6:6b:c8:ee:ba:46:fa:2b:32:31:35:0e:
17:49:33:6d:28:e7:c6:e4:a8:18:58:14:38:94:f3:
d8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EA:93:5A:CC:1E:DF:8F:BA:31:B0:8B:B1:B6:87:14:BE:07:29:0F
X509v3 Authority Key Identifier:
keyid:75:9D:6A:FB:8D:DF:8F:8C:0D:D6:60:79:0E:DC:BA:1F:3B:37:0C:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/HuqTWswe34-6MbCLsbaHFL4HKQ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/16b7f4-fa15-47a6-9fc5-254bcbcec037/1/dZ1q-43fj4wN1mB5Dty6Hzs3DGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.185.72.0/21
185.8.172.0/22
185.208.174.0/23
IPv6:
2a03:2dc0::-2a03:2dc0:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
22:c0:b6:da:43:93:41:9f:21:3a:29:fd:5d:41:ac:b8:20:91:
0f:7b:83:ab:72:ed:ca:5c:46:7a:ab:fe:0b:f0:37:5e:e0:fa:
a6:dd:e9:11:42:9c:b2:d9:3d:b4:59:52:75:f6:e6:32:72:24:
a9:a0:d3:c3:5a:95:f3:df:be:1a:04:9a:30:1d:a4:26:42:98:
f4:6c:a2:4c:0f:8c:99:41:c5:90:e7:46:db:6f:9e:36:74:ce:
1a:76:54:96:01:af:dc:60:83:4f:27:3d:7b:5f:f4:6b:ee:04:
ce:55:d0:47:b5:67:74:6d:50:d5:ff:78:db:16:fb:87:f4:c9:
8d:80:47:35:a8:3b:f2:98:5a:18:72:a3:bb:4d:6a:5d:9c:83:
31:e3:1a:b4:ca:f5:4c:16:f8:e7:6a:cb:39:79:34:09:6b:9d:
2c:41:c9:48:06:14:2a:c9:ed:68:a5:ae:bd:1f:4d:1b:d8:9c:
b7:22:e0:61:ab:c1:2c:41:dd:e9:c3:6c:4f:1c:ec:b0:a3:a4:
37:28:ab:09:2a:4e:9e:60:28:49:bb:63:29:be:f3:7a:d9:50:
9a:41:6f:91:53:00:26:a8:a1:0d:a8:a6:e7:6f:f1:75:94:ae:
ab:75:11:08:68:03:5a:da:de:eb:52:84:bb:26:ed:20:cc:9e:
e7:e3:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:19:14 2024 by rpki-client on console-ams.rpki-client.org