Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/hphHIGP1pnd82JYu0dD7iJmPFC8.roa
File: hphHIGP1pnd82JYu0dD7iJmPFC8.roa (raw, json)
Hash identifier: 32Wj6sUojFm8C4LG0cC1+S8akDkUCP5eSAgSs33IRj0=
Subject key identifier: 86:98:47:20:63:F5:A6:77:7C:D8:96:2E:D1:D0:FB:88:99:8F:14:2F
Certificate issuer: /CN=44fc887c977393575de6257e75fa99cde2037c6c
Certificate serial: 018CC7934D311BAE6D3B70DA6C135DD38A62
Authority key identifier: 44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/hphHIGP1pnd82JYu0dD7iJmPFC8.roa
Signing time: Tue 02 Jan 2024 00:29:28 +0000
ROA not before: Tue 02 Jan 2024 00:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 174
IP address blocks: 45.85.13.0/24 maxlen: 24
45.85.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Apr 2024 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:4d:31:1b:ae:6d:3b:70:da:6c:13:5d:d3:8a:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44fc887c977393575de6257e75fa99cde2037c6c
Validity
Not Before: Jan 2 00:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8698472063f5a6777cd8962ed1d0fb88998f142f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:f5:74:79:db:3a:36:a0:61:0c:7c:13:eb:f0:
99:01:a2:77:87:b4:d4:ab:d3:31:8c:c4:f4:2c:f3:
4b:a6:47:60:fd:35:23:84:75:4e:17:fb:50:63:23:
ba:da:d3:61:93:56:8e:79:f8:9a:43:47:4c:d2:0a:
7d:f5:70:c3:e7:0c:fa:1f:e4:76:6e:9d:19:4d:10:
68:5d:d6:13:1e:08:58:69:1c:6e:92:6d:2a:96:3d:
c8:42:61:af:15:50:e9:29:5e:89:d8:29:45:8b:44:
90:f5:f6:a5:d0:89:57:82:ca:f0:0b:6c:99:06:27:
26:0f:7e:14:61:ac:4c:e8:fd:0d:09:80:f3:d5:42:
c8:27:6d:97:3b:9a:67:4d:ab:66:da:11:1e:7d:57:
4d:f6:81:fe:63:40:8c:dc:6a:f1:f1:52:3f:e3:cd:
32:2b:b7:32:2e:b8:84:a1:47:d2:8c:56:b8:2c:30:
82:5f:84:d1:8e:b9:39:8d:33:9e:18:35:33:c7:c3:
3d:cd:3e:c6:9a:e7:08:71:ea:01:a1:31:38:c2:f0:
b4:3d:6c:90:2e:5c:62:39:68:5b:68:ea:18:52:f7:
35:97:eb:e6:91:cb:9a:94:ce:7a:e7:8a:76:5a:38:
d6:7b:4d:e6:da:2b:56:32:b5:6d:a3:6b:24:01:d2:
68:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:98:47:20:63:F5:A6:77:7C:D8:96:2E:D1:D0:FB:88:99:8F:14:2F
X509v3 Authority Key Identifier:
keyid:44:FC:88:7C:97:73:93:57:5D:E6:25:7E:75:FA:99:CD:E2:03:7C:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RPyIfJdzk1dd5iV-dfqZzeIDfGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/hphHIGP1pnd82JYu0dD7iJmPFC8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/f07c66-473d-435a-b693-c369c1d4c337/1/RPyIfJdzk1dd5iV-dfqZzeIDfGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.12.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:75:cc:1e:74:58:e0:f7:d8:d2:a7:c7:1a:aa:ba:13:74:d5:
fd:ce:1b:61:20:97:b1:b9:5a:dc:4d:d2:ff:4d:1b:22:dc:63:
e3:27:66:42:70:01:ae:cd:47:24:90:69:11:b5:22:a3:b1:43:
dd:6d:b1:e2:73:b8:94:ea:f2:32:fb:76:62:38:cb:b5:45:cd:
dc:2a:dd:85:85:67:c4:7c:7f:d3:75:bd:b3:e0:0c:1f:19:fd:
eb:31:90:af:2b:62:9f:b7:ae:39:9e:38:9d:be:b5:83:ba:d5:
cc:01:63:54:a0:5e:e8:41:c4:aa:96:db:07:39:0d:e9:f4:ac:
82:20:c6:57:8d:ea:59:28:17:95:6c:aa:fa:61:76:01:68:9c:
0a:b3:1a:59:ff:8b:01:30:9d:32:29:3b:2f:07:2a:35:41:5e:
2c:d5:2d:2d:fa:1e:cd:29:37:e3:b2:86:1d:05:b7:dd:64:4b:
fc:bd:80:3e:ef:48:e2:47:cb:97:9f:a6:c5:d4:c0:e3:e0:3c:
08:8c:21:a4:1f:0f:64:2a:5f:ea:10:2b:02:c9:24:70:d2:16:
a4:e5:61:5a:e2:23:a8:f9:fb:30:67:ab:60:6a:4b:b7:d2:e8:
0d:7a:20:3f:33:cd:49:5f:95:cb:58:8f:73:50:9d:50:29:4c:
b5:fd:74:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 19:04:34 2024 by rpki-client on console-ams.rpki-client.org