Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/HjLRlhYCzZpUO1bsF2UFwavhBUc.roa
File: HjLRlhYCzZpUO1bsF2UFwavhBUc.roa (raw, json)
Hash identifier: NoXK88ov053yovBPImhDICYZI4elFulObPr3Ok19Nbw=
Subject key identifier: 1E:32:D1:96:16:02:CD:9A:54:3B:56:EC:17:65:05:C1:AB:E1:05:47
Certificate issuer: /CN=d7db132b47c8edd83fed02d561e750604c20b1f8
Certificate serial: 018CCA2A7982905756B0F28C3E79724122C4
Authority key identifier: D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/HjLRlhYCzZpUO1bsF2UFwavhBUc.roa
Signing time: Tue 02 Jan 2024 12:33:50 +0000
ROA not before: Tue 02 Jan 2024 12:33:50 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199188
IP address blocks: 185.97.160.0/23 maxlen: 23
185.97.160.0/22 maxlen: 22
185.97.163.0/24 maxlen: 24
176.124.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 17:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:79:82:90:57:56:b0:f2:8c:3e:79:72:41:22:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7db132b47c8edd83fed02d561e750604c20b1f8
Validity
Not Before: Jan 2 12:33:50 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e32d1961602cd9a543b56ec176505c1abe10547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1d:36:db:b4:71:d5:36:90:fb:45:45:be:b9:
d1:c5:d5:15:2d:c8:09:c1:c7:cc:7e:7a:02:60:7e:
10:c9:c4:03:10:4d:64:82:2a:83:6f:4c:40:c0:2a:
28:8b:ac:86:7e:53:63:10:0f:37:03:33:99:50:04:
7f:ac:f9:96:f6:32:61:25:4c:3b:65:f8:f8:b6:a8:
5b:8a:7b:40:5e:2a:ef:08:ce:de:6b:8f:17:82:80:
ab:de:c7:1d:1a:e1:54:98:dc:72:7a:f6:46:27:cf:
8f:3a:ef:bd:ad:2b:bf:a1:e2:d9:61:69:4e:2a:ce:
98:d7:53:b8:30:24:12:c7:cc:f3:14:1d:0c:46:9a:
f6:da:d3:66:ea:14:06:ab:41:c0:1a:df:d2:41:bc:
ce:c5:11:43:95:ef:3d:6d:c9:b1:ef:e1:5c:30:ca:
01:eb:da:c5:29:aa:bf:4f:c6:3f:dd:24:d2:67:66:
3f:5d:4c:cd:39:95:0a:61:d1:ae:2f:72:1a:ea:73:
f1:78:45:25:4a:cf:a7:8a:ca:3f:e2:7e:56:c2:67:
07:75:73:e6:ab:28:fd:7d:44:10:d4:95:5c:ff:f0:
03:e6:b5:db:ce:e9:0f:d9:77:34:ef:3b:74:ff:3f:
36:5a:bc:cb:fa:67:bf:14:7f:38:21:40:a3:f6:b5:
d1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:32:D1:96:16:02:CD:9A:54:3B:56:EC:17:65:05:C1:AB:E1:05:47
X509v3 Authority Key Identifier:
keyid:D7:DB:13:2B:47:C8:ED:D8:3F:ED:02:D5:61:E7:50:60:4C:20:B1:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/19sTK0fI7dg_7QLVYedQYEwgsfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/HjLRlhYCzZpUO1bsF2UFwavhBUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/182632-63c5-4e8e-b299-a04603709519/1/19sTK0fI7dg_7QLVYedQYEwgsfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.124.191.0/24
185.97.160.0/22
Signature Algorithm: sha256WithRSAEncryption
71:47:05:57:20:8e:8b:8c:bf:10:b6:fb:25:78:9b:d2:13:e5:
a2:50:e2:93:0c:30:6f:df:1f:a5:1e:4d:78:ab:c8:7b:29:55:
da:1c:ba:f5:4d:37:3e:d4:c4:02:46:0a:07:e4:d2:df:3c:77:
0e:51:72:d9:c1:0b:91:29:a4:6d:64:79:87:d7:e4:9b:62:d9:
bb:cd:e8:6a:da:c1:6e:6b:e3:d8:ec:c7:dd:6d:62:20:b4:48:
ea:e5:3d:ac:e2:61:81:90:8a:c9:99:65:b6:34:bd:94:5f:cc:
c4:85:62:79:24:00:4a:0d:56:16:63:82:ee:11:36:35:7c:ea:
2b:c9:c9:b0:02:89:b3:c1:0a:b8:ee:0c:ea:f9:6c:b1:63:cb:
e2:9b:f3:90:a8:99:35:a8:92:4d:ac:c1:2e:14:7f:66:ff:ad:
85:a7:7c:23:6d:66:fa:c2:15:b3:39:7b:2e:c2:9f:90:1b:58:
62:07:e1:57:77:66:fb:6f:3a:20:45:8d:03:74:1b:fd:3d:de:
3b:72:cc:a2:e4:d6:86:9b:22:73:fe:8e:9b:b3:9d:72:41:f9:
a9:f5:b8:52:4b:07:3f:0f:2f:94:ca:4c:a5:fc:76:d3:d6:68:
92:63:44:05:c8:4b:83:47:65:49:7f:b1:7a:51:e3:11:75:c2:
10:8c:20:5e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzKKnmCkFdWsPKMPnlyQSLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3ZGIxMzJiNDdjOGVkZDgzZmVkMDJkNTYxZTc1MDYwNGMy
MGIxZjgwHhcNMjQwMTAyMTIzMzUwWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTMyZDE5NjE2MDJjZDlhNTQzYjU2ZWMxNzY1MDVjMWFiZTEwNTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih0227Rx1TaQ+0VFvrnRxdUVLcgJ
wcfMfnoCYH4QycQDEE1kgiqDb0xAwCooi6yGflNjEA83AzOZUAR/rPmW9jJhJUw7
Zfj4tqhbintAXirvCM7ea48XgoCr3scdGuFUmNxyevZGJ8+POu+9rSu/oeLZYWlO
Ks6Y11O4MCQSx8zzFB0MRpr22tNm6hQGq0HAGt/SQbzOxRFDle89bcmx7+FcMMoB
69rFKaq/T8Y/3STSZ2Y/XUzNOZUKYdGuL3Ia6nPxeEUlSs+niso/4n5WwmcHdXPm
qyj9fUQQ1JVc//AD5rXbzukP2Xc07zt0/z82WrzL+me/FH84IUCj9rXRSQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFB4y0ZYWAs2aVDtW7BdlBcGr4QVHMB8GA1UdIwQY
MBaAFNfbEytHyO3YP+0C1WHnUGBMILH4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTlzVEswZkk3ZGdfN1FMVlllZFFZRXdnc2ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8xODI2MzItNjNjNS00ZThlLWIyOTkt
YTA0NjAzNzA5NTE5LzEvSGpMUmxoWUN6WnBVTzFic0YyVUZ3YXZoQlVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8xODI2MzItNjNjNS00ZThlLWIyOTktYTA0NjAzNzA5NTE5
LzEvMTlzVEswZkk3ZGdfN1FMVlllZFFZRXdnc2ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAsHy/AwQC
uWGgMA0GCSqGSIb3DQEBCwUAA4IBAQBxRwVXII6LjL8QtvsleJvSE+WiUOKTDDBv
3x+lHk14q8h7KVXaHLr1TTc+1MQCRgoH5NLfPHcOUXLZwQuRKaRtZHmH1+SbYtm7
zehq2sFua+PY7MfdbWIgtEjq5T2s4mGBkIrJmWW2NL2UX8zEhWJ5JABKDVYWY4Lu
ETY1fOorycmwAomzwQq47gzq+WyxY8vim/OQqJk1qJJNrMEuFH9m/62Fp3wjbWb6
whWzOXsuwp+QG1hiB+FXd2b7bzogRY0DdBv9Pd47csyi5NaGmyJz/o6bs51yQfmp
9bhSSwc/Dy+Uykyl/HbT1miSY0QFyEuDR2VJf7F6UeMRdcIQjCBe
-----END CERTIFICATE-----
Generated at Sat May 18 03:03:02 2024 by rpki-client on console-ams.rpki-client.org