Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/HWHrVQyJEsq8SHCLrRCrs-onlTw.roa
File: HWHrVQyJEsq8SHCLrRCrs-onlTw.roa (raw, json)
Hash identifier: 5TAHkZuJVsj6UjxXfPeP5hLsLg00keLjAhuGjMwJn8o=
Subject key identifier: 1D:61:EB:55:0C:89:12:CA:BC:48:70:8B:AD:10:AB:B3:EA:27:95:3C
Certificate issuer: /CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Certificate serial: 018CC86EFD84AF31030C2A5AA41E1D8532A9
Authority key identifier: AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/HWHrVQyJEsq8SHCLrRCrs-onlTw.roa
Signing time: Tue 02 Jan 2024 04:29:26 +0000
ROA not before: Tue 02 Jan 2024 04:29:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20771
IP address blocks: 185.163.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:fd:84:af:31:03:0c:2a:5a:a4:1e:1d:85:32:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa679589c1c48897d09b2d4fed7a66044a876ea3
Validity
Not Before: Jan 2 04:29:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d61eb550c8912cabc48708bad10abb3ea27953c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9e:6c:5b:42:50:88:ca:98:c2:b7:55:84:24:
a2:8b:aa:48:a9:5d:a2:8f:79:2b:f8:f7:46:a1:5c:
1d:a6:d5:e0:18:67:35:56:1e:6c:13:65:ab:58:49:
c0:40:37:ba:94:49:7e:33:84:43:b8:99:1e:dc:06:
72:1a:86:cc:5b:a3:20:54:1e:2b:33:b5:1e:bb:40:
a4:31:bc:56:ab:06:ca:a1:79:e2:65:b0:f9:fc:06:
99:73:85:98:ae:34:a2:40:da:5c:8a:3e:77:cd:ef:
ae:1f:62:7f:7f:bf:dd:c4:63:30:6c:f2:81:a4:64:
24:3b:80:37:71:51:45:5f:93:78:5c:50:f3:5d:9d:
c1:f0:86:0b:09:c8:04:dc:1d:63:5c:4d:97:00:e1:
bb:35:f7:ae:92:bd:22:5b:da:7f:25:97:df:4a:36:
2f:bf:0b:4a:1a:41:b1:2f:a7:a8:b7:a5:ee:8c:40:
64:d2:8b:dd:b1:3e:e2:8e:b4:4c:29:72:27:e3:ae:
f2:8e:2b:2c:95:d7:b8:4b:49:ec:03:02:d6:68:df:
d3:3c:dd:58:47:dc:7a:0d:f6:3e:90:cc:e6:a5:b3:
bf:40:76:af:cb:07:e4:7e:84:58:5c:15:e7:ee:77:
ab:1a:cc:c2:f3:ad:62:5f:d5:91:df:3f:3f:9c:36:
69:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:61:EB:55:0C:89:12:CA:BC:48:70:8B:AD:10:AB:B3:EA:27:95:3C
X509v3 Authority Key Identifier:
keyid:AA:67:95:89:C1:C4:88:97:D0:9B:2D:4F:ED:7A:66:04:4A:87:6E:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qmeVicHEiJfQmy1P7XpmBEqHbqM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/HWHrVQyJEsq8SHCLrRCrs-onlTw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/008f91-aee3-4408-8393-14b76b76f2bb/1/qmeVicHEiJfQmy1P7XpmBEqHbqM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.163.200.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:a7:c2:a5:e2:48:bd:2a:74:82:43:1c:a8:35:ca:c9:ac:86:
55:83:18:ba:ad:eb:d0:e3:36:9e:3e:80:24:aa:0e:f3:f8:81:
8d:41:2d:92:7d:64:56:da:b1:1c:dd:cf:bd:17:ca:b6:bd:9c:
31:c4:9d:64:8b:0f:d2:b8:bf:26:d6:60:56:e4:71:fb:11:46:
dd:3b:f2:0c:73:98:1b:d1:be:13:a1:ce:c2:02:b6:f6:ea:2e:
3a:ee:fb:a1:dc:46:29:65:60:9a:df:60:6a:b8:ef:5e:fc:03:
5a:4c:be:1c:61:08:7a:9c:ab:a7:1f:39:8d:20:2b:0a:fd:7b:
39:14:d6:b8:34:49:9b:16:c6:f3:b4:e0:c8:ea:01:c0:dd:23:
0c:a6:33:f7:cb:47:4b:3e:0b:2a:66:6f:69:7d:7f:f7:51:31:
a6:72:37:63:86:af:07:4c:67:af:27:07:ce:db:7e:f6:6a:52:
dc:77:11:f8:b6:81:76:0b:64:2d:7f:72:12:0f:33:2d:a4:89:
29:fd:91:23:36:4b:76:00:d4:c8:f1:f8:1e:3b:ba:94:dc:02:
5f:e7:86:07:ea:1c:7d:94:66:ee:a7:6f:bd:a8:52:05:94:ed:
86:9c:86:20:ee:b6:73:ca:a6:da:96:93:55:a0:22:a2:05:17:
d1:35:18:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:42:48 2024 by rpki-client on console-fra.rpki-client.org