Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/HzDiXMcCJ1-RMhfLZCIExmAWLgQ.roa
File: HzDiXMcCJ1-RMhfLZCIExmAWLgQ.roa (raw, json)
Hash identifier: 0wCWpYvtfVtu9a0szuX7e7pEfpeNJZl2C/5h3Xl5gBY=
Subject key identifier: 1F:30:E2:5C:C7:02:27:5F:91:32:17:CB:64:22:04:C6:60:16:2E:04
Certificate issuer: /CN=441d4b92dd150364c65b7d21299028678b0a5296
Certificate serial: 018CC94DA2A4D208B7A65373E1CCF8E3B64B
Authority key identifier: 44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/HzDiXMcCJ1-RMhfLZCIExmAWLgQ.roa
Signing time: Tue 02 Jan 2024 08:32:37 +0000
ROA not before: Tue 02 Jan 2024 08:32:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57370
IP address blocks: 178.238.160.0/20 maxlen: 20
178.238.160.0/22 maxlen: 24
178.238.160.0/21 maxlen: 24
178.238.168.0/21 maxlen: 24
185.119.179.0/24 maxlen: 24
185.119.177.0/24 maxlen: 24
185.119.178.0/24 maxlen: 24
185.119.178.0/23 maxlen: 24
185.119.176.0/22 maxlen: 24
185.119.176.0/24 maxlen: 24
185.119.176.0/23 maxlen: 24
144.2.80.0/20 maxlen: 24
144.2.96.0/20 maxlen: 24
144.2.96.0/19 maxlen: 24
144.2.112.0/20 maxlen: 24
144.2.64.0/20 maxlen: 24
144.2.64.0/19 maxlen: 24
144.2.64.0/18 maxlen: 24
2a02:21b2:b2ee::/48 maxlen: 48
2a02:21b2:b3ee::/48 maxlen: 48
2a02:21b2:beee::/48 maxlen: 48
2a02:21b2:ac18::/48 maxlen: 48
2a02:21b2:ac14::/48 maxlen: 48
2a02:21b1::/32 maxlen: 48
2a02:21b4::/32 maxlen: 48
2a02:21b4::/33 maxlen: 48
2a02:21b4::/34 maxlen: 48
2a02:21b4:4000::/34 maxlen: 48
2a02:21b4:8000::/33 maxlen: 48
2a02:21b4:8000::/34 maxlen: 48
2a02:21b4:c000::/34 maxlen: 48
2a02:21b0::/32 maxlen: 48
2a02:21b2:ac10::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:a2:a4:d2:08:b7:a6:53:73:e1:cc:f8:e3:b6:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=441d4b92dd150364c65b7d21299028678b0a5296
Validity
Not Before: Jan 2 08:32:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f30e25cc702275f913217cb642204c660162e04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a8:0c:3a:5c:6b:45:85:49:50:aa:43:80:5f:
0a:c3:9c:56:d0:03:aa:0a:1b:0a:55:67:74:9c:4c:
c5:13:40:41:a9:5a:db:11:57:a2:4f:10:a3:83:78:
f9:e9:2c:64:68:89:fb:3f:ca:09:6b:85:2d:ac:c6:
a2:0c:5f:61:c0:02:89:fd:c6:72:09:b9:a6:d7:59:
1a:23:ae:6d:6c:89:e3:c3:55:71:51:ce:31:93:69:
b5:05:24:47:76:5f:87:67:b9:61:d7:5d:8b:4d:a3:
2e:28:b0:b2:6f:62:c9:9d:7d:4f:4e:4d:73:67:46:
d1:ea:43:cf:a3:5b:0a:44:94:34:75:d0:d9:38:64:
f8:09:63:68:46:63:0f:78:84:a8:aa:b3:2a:2a:56:
29:f4:f5:d4:81:26:69:fc:33:b6:6e:58:21:4d:b5:
8e:65:0e:bd:b3:db:2d:bd:56:2d:96:55:ab:03:48:
8c:61:8c:b4:79:de:a8:8f:0b:17:43:3e:fb:2f:16:
94:ed:b2:b1:2b:95:b9:dd:26:0c:cb:ee:c5:09:2a:
31:ed:2e:81:18:b2:55:47:95:ad:d6:6a:f6:69:8a:
2c:31:bd:cb:d3:e6:16:3c:e1:39:ad:d0:eb:39:1e:
da:5d:ec:c4:ea:fe:c9:32:3c:b1:14:24:01:50:63:
82:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:30:E2:5C:C7:02:27:5F:91:32:17:CB:64:22:04:C6:60:16:2E:04
X509v3 Authority Key Identifier:
keyid:44:1D:4B:92:DD:15:03:64:C6:5B:7D:21:29:90:28:67:8B:0A:52:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/HzDiXMcCJ1-RMhfLZCIExmAWLgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5d454b-9d1d-4e7d-ae73-7f5f4d604731/1/RB1Lkt0VA2TGW30hKZAoZ4sKUpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.2.64.0/18
178.238.160.0/20
185.119.176.0/22
IPv6:
2a02:21b0::/31
2a02:21b2:ac10::/48
2a02:21b2:ac14::/48
2a02:21b2:ac18::/48
2a02:21b2:b2ee::/48
2a02:21b2:b3ee::/48
2a02:21b2:beee::/48
2a02:21b4::/32
Signature Algorithm: sha256WithRSAEncryption
9b:0c:d2:23:68:da:d9:0b:d9:5d:f5:72:4a:a8:ce:75:4c:ba:
30:df:ed:50:f4:2b:c4:88:3e:70:31:19:62:45:15:a3:d6:50:
b8:f0:7a:58:42:03:1f:40:16:b4:12:64:aa:60:c2:73:86:db:
bb:cd:1f:a1:36:aa:ee:08:ff:92:96:b7:a5:64:0f:1c:e9:12:
dc:dc:7b:fb:4b:5c:0b:56:38:67:13:30:fa:72:fe:6c:d5:5f:
f4:45:17:2d:c8:4f:e6:81:41:3e:fd:d9:98:a0:76:64:cf:9a:
34:6a:44:76:39:dd:d5:90:b5:08:41:0a:42:65:8e:56:01:56:
fd:b8:85:9e:a0:8f:7f:56:40:0f:ce:3f:b8:fe:42:fd:b4:da:
07:c7:14:22:a1:c4:37:66:28:8e:2d:94:8f:4b:71:c6:3c:f4:
9d:9a:c3:92:9e:50:f9:08:6e:b7:5a:1e:b8:81:c5:d6:1a:d8:
88:89:a1:d4:c8:88:27:e2:6f:00:54:d8:6c:45:51:99:34:0e:
c7:52:0d:de:84:6c:44:1e:e4:71:35:79:b4:fd:42:46:8f:8c:
b9:f1:cf:ed:ab:5b:6c:6f:f3:3a:58:4d:19:cb:43:72:2a:1c:
ca:7d:96:f6:bc:2a:d2:86:f7:09:14:9a:09:74:4d:79:14:b8:
66:12:e5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:45:34 2024 by rpki-client on console-ams.rpki-client.org