Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/HNVXsKAHIc5PErIvpg7BQwXWQ8o.roa
File: HNVXsKAHIc5PErIvpg7BQwXWQ8o.roa (raw, json)
Hash identifier: C2TQG2PuvKXKQXo4iDDNaUqRR+KZNYxl8SunmUVNJRw=
Subject key identifier: 1C:D5:57:B0:A0:07:21:CE:4F:12:B2:2F:A6:0E:C1:43:05:D6:43:CA
Certificate issuer: /CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Certificate serial: 018CCA96DF8212F515331E705FCC62E33B52
Authority key identifier: A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/HNVXsKAHIc5PErIvpg7BQwXWQ8o.roa
Signing time: Tue 02 Jan 2024 14:32:14 +0000
ROA not before: Tue 02 Jan 2024 14:32:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30823
IP address blocks: 147.189.175.0/24 maxlen: 24
147.189.174.0/24 maxlen: 24
147.189.173.0/24 maxlen: 24
147.189.171.0/24 maxlen: 24
147.189.172.0/24 maxlen: 24
147.189.168.0/24 maxlen: 24
147.189.170.0/24 maxlen: 24
147.189.169.0/24 maxlen: 24
193.23.127.0/24 maxlen: 24
193.23.126.0/24 maxlen: 24
194.156.88.0/24 maxlen: 24
194.156.90.0/24 maxlen: 24
194.156.91.0/24 maxlen: 24
88.214.58.0/24 maxlen: 24
88.214.57.0/24 maxlen: 24
88.214.56.0/24 maxlen: 24
5.249.161.0/24 maxlen: 24
5.249.160.0/24 maxlen: 24
5.249.163.0/24 maxlen: 24
5.249.162.0/24 maxlen: 24
5.249.164.0/24 maxlen: 24
92.42.44.0/24 maxlen: 24
92.42.44.0/22 maxlen: 22
193.23.160.0/24 maxlen: 24
193.23.161.0/24 maxlen: 24
92.42.46.0/24 maxlen: 24
92.42.45.0/24 maxlen: 24
92.42.47.0/24 maxlen: 24
193.203.238.0/24 maxlen: 24
185.239.239.0/24 maxlen: 24
185.239.236.0/24 maxlen: 24
185.239.238.0/24 maxlen: 24
185.239.237.0/24 maxlen: 24
185.223.28.0/24 maxlen: 24
185.223.30.0/24 maxlen: 24
185.223.29.0/24 maxlen: 24
185.223.31.0/24 maxlen: 24
45.146.253.0/24 maxlen: 24
45.146.252.0/24 maxlen: 24
45.146.254.0/24 maxlen: 24
45.146.255.0/24 maxlen: 24
185.249.197.0/24 maxlen: 24
185.249.199.0/24 maxlen: 24
185.249.198.0/24 maxlen: 24
2a0c:3580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 01:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:96:df:82:12:f5:15:33:1e:70:5f:cc:62:e3:3b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3513d288dabde7dee069bdb636573ce9c3ecb60
Validity
Not Before: Jan 2 14:32:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cd557b0a00721ce4f12b22fa60ec14305d643ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:48:47:c1:8f:04:ce:dc:ee:70:a1:2d:ba:1f:
f5:de:0d:d7:06:8c:7c:b8:1d:5e:5b:e8:93:f7:5c:
20:16:2d:8c:56:7c:ad:93:32:4c:5d:48:41:32:40:
c7:4d:74:7b:56:a2:22:a4:a9:8b:6b:31:6a:fc:6a:
11:58:54:00:87:69:41:d1:13:dd:ae:99:15:09:b8:
85:d9:0b:02:c7:be:bb:ad:0e:bd:e5:20:95:46:0e:
9b:5c:d9:6f:39:33:8b:a9:ba:91:59:48:6c:93:82:
b0:d5:ee:62:31:c9:f3:ab:bb:64:4c:12:ce:c9:d5:
dd:75:51:93:36:e4:4e:bf:cf:7a:01:d7:37:ac:26:
6c:5c:64:28:44:cd:38:5b:48:73:4c:4a:8c:1f:40:
7b:2b:76:53:66:92:4e:81:87:75:8e:c8:f7:cd:11:
7b:6a:a7:e3:68:99:bb:21:50:96:1c:65:44:c5:7a:
16:94:a8:3f:29:f8:07:72:cc:c3:2a:17:3b:e7:3d:
0b:7c:7d:16:05:39:8c:cd:be:41:6a:21:6f:a5:cc:
62:9a:67:27:fb:00:ee:5d:f2:a1:3f:92:5d:57:24:
a4:0c:30:f3:74:e2:3c:7a:ab:a7:cc:9f:73:a3:13:
37:1b:8f:d6:36:e6:aa:b4:7c:2d:bc:3b:f8:b9:e5:
81:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D5:57:B0:A0:07:21:CE:4F:12:B2:2F:A6:0E:C1:43:05:D6:43:CA
X509v3 Authority Key Identifier:
keyid:A3:51:3D:28:8D:AB:DE:7D:EE:06:9B:DB:63:65:73:CE:9C:3E:CB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/HNVXsKAHIc5PErIvpg7BQwXWQ8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/792113-e13c-43ee-84d7-e0d7dd5e2e6f/1/o1E9KI2r3n3uBpvbY2Vzzpw-y2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.249.160.0-5.249.164.255
45.146.252.0/22
88.214.56.0-88.214.58.255
92.42.44.0/22
147.189.168.0/21
185.223.28.0/22
185.239.236.0/22
185.249.197.0-185.249.199.255
193.23.126.0/23
193.23.160.0/23
193.203.238.0/24
194.156.88.0/24
194.156.90.0/23
IPv6:
2a0c:3580::/29
Signature Algorithm: sha256WithRSAEncryption
94:20:f9:43:7c:81:1f:80:ab:57:db:45:dc:9c:c6:ca:d7:33:
e2:ad:51:ac:72:ff:47:f6:17:b9:e8:f9:c5:c6:14:32:4c:b5:
5f:5a:c8:6d:a4:e4:6b:8d:85:c2:4a:e7:a8:ff:a0:0a:52:29:
49:0b:24:49:da:cb:f2:61:01:7e:65:00:fb:2c:d8:c6:32:54:
bc:4a:ee:3c:80:67:c6:63:7f:00:db:c5:c0:9f:cd:de:bb:88:
d0:05:09:1a:b1:f3:00:a9:63:8e:ca:2a:36:72:40:a7:fb:6f:
84:e2:d8:50:d9:7c:0e:57:83:a0:da:1a:e4:97:42:5d:a6:7a:
10:c4:4a:37:b8:ad:95:f0:83:b7:38:e8:a9:34:f3:b9:e9:b9:
76:7e:f7:ab:5d:00:b1:cc:ac:da:bc:fc:7b:87:6a:7c:83:72:
8d:18:4f:74:6c:7b:c7:4d:a0:d1:e1:26:8c:e2:7e:ef:d7:b8:
53:51:21:18:1f:e5:d5:55:a3:e8:cb:77:6b:c7:86:fd:2e:ef:
65:64:40:bc:09:94:68:bc:c8:d0:4b:e2:6f:e7:c3:20:f4:e3:
d7:17:b6:6c:b7:6b:f4:f8:db:b0:74:32:43:e4:0d:c4:11:3b:
25:64:b4:c0:5f:19:6e:25:e1:28:27:a2:34:7f:8b:75:df:ee:
ab:eb:41:c4
-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgISAYzKlt+CEvUVMx5wX8xi4ztSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzNTEzZDI4OGRhYmRlN2RlZTA2OWJkYjYzNjU3M2NlOWMz
ZWNiNjAwHhcNMjQwMTAyMTQzMjE0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxY2Q1NTdiMGEwMDcyMWNlNGYxMmIyMmZhNjBlYzE0MzA1ZDY0M2NhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0hHwY8EztzucKEtuh/13g3XBox8
uB1eW+iT91wgFi2MVnytkzJMXUhBMkDHTXR7VqIipKmLazFq/GoRWFQAh2lB0RPd
rpkVCbiF2QsCx767rQ695SCVRg6bXNlvOTOLqbqRWUhsk4Kw1e5iMcnzq7tkTBLO
ydXddVGTNuROv896Adc3rCZsXGQoRM04W0hzTEqMH0B7K3ZTZpJOgYd1jsj3zRF7
aqfjaJm7IVCWHGVExXoWlKg/KfgHcszDKhc75z0LfH0WBTmMzb5BaiFvpcximmcn
+wDuXfKhP5JdVySkDDDzdOI8equnzJ9zoxM3G4/WNuaqtHwtvDv4ueWBqwIDAQAB
o4ICeTCCAnUwHQYDVR0OBBYEFBzVV7CgByHOTxKyL6YOwUMF1kPKMB8GA1UdIwQY
MBaAFKNRPSiNq9597gab22Nlc86cPstgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDct
ZTBkN2RkNWUyZTZmLzEvSE5WWHNLQUhJYzVQRXJJdnBnN0JRd1hXUThvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS83OTIxMTMtZTEzYy00M2VlLTg0ZDctZTBkN2RkNWUyZTZm
LzEvbzFFOUtJMnIzbjN1QnB2YlkyVnp6cHcteTJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZjAMAwQFBfmg
AwQABfmkAwQCLZL8MAwDBANY1jgDBABY1joDBAJcKiwDBAOTvagDBAK53xwDBAK5
7+wwDAMEALn5xQMEA7n5wAMEAcEXfgMEAcEXoAMEAMHL7gMEAMKcWAMEAcKcWjAN
BAIAAjAHAwUDKgw1gDANBgkqhkiG9w0BAQsFAAOCAQEAlCD5Q3yBH4CrV9tF3JzG
ytcz4q1RrHL/R/YXuej5xcYUMky1X1rIbaTka42FwkrnqP+gClIpSQskSdrL8mEB
fmUA+yzYxjJUvEruPIBnxmN/ANvFwJ/N3ruI0AUJGrHzAKljjsoqNnJAp/tvhOLY
UNl8DleDoNoa5JdCXaZ6EMRKN7itlfCDtzjoqTTzuem5dn73q10Ascys2rz8e4dq
fINyjRhPdGx7x02g0eEmjOJ+79e4U1EhGB/l1VWj6Mt3a8eG/S7vZWRAvAmUaLzI
0Evib+fDIPTj1xe2bLdr9PjbsHQyQ+QNxBE7JWS0wF8ZbiXhKCeiNH+Ldd/uq+tB
xA==
-----END CERTIFICATE-----
Generated at Fri May 3 08:03:38 2024 by rpki-client on console-fra.rpki-client.org