Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HuyFdUQ3u4-UD3WHFOpGH5Ob50I.roa
File: HuyFdUQ3u4-UD3WHFOpGH5Ob50I.roa (raw, json)
Hash identifier: vfz1yAD43Kfi4lwurYDHXYpkIdHNTlJa8tbZh5Nt2Z0=
Subject key identifier: 1E:EC:85:75:44:37:BB:8F:94:0F:75:87:14:EA:46:1F:93:9B:E7:42
Certificate issuer: /CN=5588f197f97e8900755544e810cddef9d90fbc41
Certificate serial: 018CC94E6B7ED437F7D463C82043E9D431C7
Authority key identifier: 55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HuyFdUQ3u4-UD3WHFOpGH5Ob50I.roa
Signing time: Tue 02 Jan 2024 08:33:28 +0000
ROA not before: Tue 02 Jan 2024 08:33:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41255
IP address blocks: 46.232.120.0/22 maxlen: 24
46.3.240.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 04:02:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:6b:7e:d4:37:f7:d4:63:c8:20:43:e9:d4:31:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5588f197f97e8900755544e810cddef9d90fbc41
Validity
Not Before: Jan 2 08:33:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1eec85754437bb8f940f758714ea461f939be742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:42:16:f4:18:0c:6f:49:3c:96:cc:05:28:b7:
8b:3c:e4:30:7c:14:09:24:aa:d2:ca:bc:9a:58:45:
6e:a2:08:12:50:6c:98:53:76:03:f4:c8:9b:8a:82:
48:6b:b6:b3:b0:d3:cc:35:93:b7:df:27:f2:53:7b:
b0:78:1c:93:9b:52:8e:fc:f5:f5:c3:77:04:e8:90:
df:e1:3e:c9:19:45:f1:3d:ca:33:84:f3:7d:59:e0:
0a:fa:76:61:fb:3f:2d:ac:15:11:6d:df:01:1a:ee:
e4:a7:80:68:8c:fc:f5:86:6e:0e:3d:a9:7f:b1:5b:
73:ce:9d:5d:0e:60:54:24:d0:be:76:a4:b4:92:01:
31:2e:1b:27:f9:d1:b2:7e:1f:2a:ff:32:e2:be:7a:
71:41:64:cb:25:6d:30:1e:54:68:66:e4:0f:8e:c3:
db:d5:1f:95:95:58:c9:66:88:dc:84:84:d8:fb:16:
fb:ba:e5:57:bd:a1:75:04:01:32:54:9d:a5:ec:3f:
60:a0:a6:90:10:12:a8:44:53:68:4f:a6:f3:d8:26:
34:67:74:0a:5f:f6:b7:89:fa:9b:8a:14:11:19:51:
c6:9b:cd:3a:dc:c3:60:e7:56:3e:69:bd:59:16:a7:
87:77:0c:40:41:f2:10:98:bd:f6:9f:5c:42:4e:5e:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:EC:85:75:44:37:BB:8F:94:0F:75:87:14:EA:46:1F:93:9B:E7:42
X509v3 Authority Key Identifier:
keyid:55:88:F1:97:F9:7E:89:00:75:55:44:E8:10:CD:DE:F9:D9:0F:BC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYjxl_l-iQB1VUToEM3e-dkPvEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/HuyFdUQ3u4-UD3WHFOpGH5Ob50I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/622981-9650-4271-92ca-7cfef4276a0f/1/VYjxl_l-iQB1VUToEM3e-dkPvEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.3.240.0/22
46.232.120.0/22
Signature Algorithm: sha256WithRSAEncryption
01:73:07:15:57:42:99:aa:f2:77:af:3f:0d:af:63:44:c0:fa:
99:6c:74:dc:5f:3e:74:0a:e3:fa:1f:7d:45:65:a6:e1:61:9c:
1a:34:b5:d0:0d:3e:51:f2:f4:13:04:9b:db:17:49:7e:e5:8b:
58:86:b2:55:7b:55:89:45:d9:05:b8:70:48:78:8c:97:0c:60:
88:b0:cf:6d:4a:52:db:c4:85:61:a8:f3:af:60:54:de:5c:82:
fa:12:72:2b:b3:01:71:57:67:7c:46:a4:27:e1:81:62:8b:0e:
68:38:4f:5b:e2:29:c3:f0:ba:9e:44:98:ee:a5:cb:57:41:c8:
92:24:42:e1:3b:2a:82:6f:61:05:87:c9:8c:ae:b4:82:d1:b5:
be:2f:fe:6f:0e:3e:f0:4b:3e:2a:06:38:a4:88:19:93:40:1d:
d9:31:12:17:44:5c:41:b0:41:aa:77:ae:61:81:f4:54:54:95:
d3:6e:ef:59:87:29:a2:10:3d:f8:eb:a0:f1:4d:a8:2c:a2:78:
00:fb:89:40:60:19:f1:da:f0:88:30:a2:09:5d:b3:0b:b2:f8:
09:9d:a3:8a:98:09:1f:c4:e6:5a:c5:fa:06:da:4a:39:e8:09:
cd:bd:2d:b7:61:77:e2:58:0e:a7:2c:cf:aa:9d:56:cb:be:00:
89:f1:a8:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 14:06:05 2024 by rpki-client on console-fra.rpki-client.org