Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/HXSHBJElYHomnXckdEeEm7-axT4.roa
File: HXSHBJElYHomnXckdEeEm7-axT4.roa (raw, json)
Hash identifier: MzYLS0aqJHW5ugSgfJDNCAYht/rqwv+iYj07jwtX87U=
Subject key identifier: 1D:74:87:04:91:25:60:7A:26:9D:77:24:74:47:84:9B:BF:9A:C5:3E
Certificate issuer: /CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Certificate serial: 018CC3489A3B93919900581FABF339826E14
Authority key identifier: DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/HXSHBJElYHomnXckdEeEm7-axT4.roa
Signing time: Mon 01 Jan 2024 04:29:24 +0000
ROA not before: Mon 01 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201679
IP address blocks: 185.64.132.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:9a:3b:93:91:99:00:58:1f:ab:f3:39:82:6e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de286d03a373bd689ef04610a1c8ad8473ebddad
Validity
Not Before: Jan 1 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d7487049125607a269d77247447849bbf9ac53e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ec:e2:f2:df:bd:d8:03:17:55:cd:36:ae:34:
7a:d4:a6:02:8f:fd:ca:ad:b9:9b:13:86:19:d5:67:
78:c0:54:7b:e2:42:f8:e1:6c:ff:df:ea:71:9b:6b:
0e:0c:2d:12:f0:13:f5:f6:31:fe:e5:ad:67:13:b8:
91:37:b2:de:bc:e5:0b:92:a3:bc:92:26:86:29:3f:
87:ef:7b:b1:f6:d6:51:79:33:e2:51:84:da:44:f4:
58:01:3a:9d:de:73:b4:11:a7:86:46:6a:9f:26:d4:
3d:b2:c9:39:51:a6:8c:cb:48:7f:7f:83:04:38:e1:
4f:71:57:34:d8:ee:c0:f5:c1:7d:7a:2f:cc:5b:96:
31:0b:17:46:51:11:0c:04:70:e0:b7:76:d0:cc:c1:
6e:9c:6c:be:e5:13:42:62:1e:39:be:34:c1:79:b5:
dd:78:73:e4:ea:30:6c:68:b7:9a:6f:22:56:c7:4b:
cb:32:37:39:7b:0c:99:81:31:4d:e5:e7:2e:78:af:
66:6f:39:e7:9d:3f:ff:2f:10:e6:f0:4c:5f:35:8a:
6e:2f:5a:06:36:74:fe:5b:bf:b8:ef:4a:47:37:f8:
53:5c:a2:b0:98:c5:2f:cd:be:a6:c6:96:f0:2f:56:
70:9f:58:3c:0f:76:f9:7f:48:6a:8b:17:1d:9f:fd:
2e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:74:87:04:91:25:60:7A:26:9D:77:24:74:47:84:9B:BF:9A:C5:3E
X509v3 Authority Key Identifier:
keyid:DE:28:6D:03:A3:73:BD:68:9E:F0:46:10:A1:C8:AD:84:73:EB:DD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ihtA6NzvWie8EYQocithHPr3a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/HXSHBJElYHomnXckdEeEm7-axT4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/dbef17-9bb8-46bc-9343-cadf0ca1dd0d/1/3ihtA6NzvWie8EYQocithHPr3a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.132.0/22
Signature Algorithm: sha256WithRSAEncryption
12:7f:1d:81:21:c4:85:ae:26:de:dc:08:bf:be:2f:6d:21:3c:
8f:02:d1:53:35:ca:81:b0:d3:5a:7f:90:6a:83:6d:25:49:e4:
f9:3e:1c:bd:b5:9f:fd:02:7e:d7:cd:29:47:c4:30:5b:38:98:
7e:46:89:61:5e:e0:c7:15:75:97:41:65:4d:b6:f2:7c:70:6b:
e5:fb:d3:64:a4:c1:40:00:7e:6b:e9:a3:77:e8:00:17:de:a8:
bc:b7:0d:be:50:cd:0d:2c:61:89:7d:d4:60:24:05:d1:9f:5d:
a0:d9:2f:9f:a0:ef:78:67:91:ba:68:ee:4b:16:f6:46:3d:c7:
77:ba:fb:a7:2a:9e:dc:29:f0:d8:1a:ad:09:01:1c:fc:3e:dc:
ef:a6:79:79:f5:06:8e:57:5b:51:6f:95:72:6f:fb:be:cd:8c:
00:10:ac:a0:a2:2a:3e:35:40:a3:bc:48:d7:96:26:e0:37:de:
60:3b:53:10:4c:92:f2:a9:17:3d:06:43:82:49:3d:f7:80:a5:
9e:d1:31:4b:1f:e6:33:8c:ea:f1:be:2e:c6:64:19:69:da:ce:
4c:b4:dc:73:2e:e5:c8:72:71:09:a3:f4:35:74:09:fb:2d:fa:
e7:e0:0d:65:fe:eb:0f:2e:24:ed:0e:d7:75:c2:b6:8c:5c:59:
09:57:cd:4d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSJo7k5GZAFgfq/M5gm4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlMjg2ZDAzYTM3M2JkNjg5ZWYwNDYxMGExYzhhZDg0NzNl
YmRkYWQwHhcNMjQwMTAxMDQyOTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDc0ODcwNDkxMjU2MDdhMjY5ZDc3MjQ3NDQ3ODQ5YmJmOWFjNTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOzi8t+92AMXVc02rjR61KYCj/3K
rbmbE4YZ1Wd4wFR74kL44Wz/3+pxm2sODC0S8BP19jH+5a1nE7iRN7LevOULkqO8
kiaGKT+H73ux9tZReTPiUYTaRPRYATqd3nO0EaeGRmqfJtQ9ssk5UaaMy0h/f4ME
OOFPcVc02O7A9cF9ei/MW5YxCxdGUREMBHDgt3bQzMFunGy+5RNCYh45vjTBebXd
eHPk6jBsaLeabyJWx0vLMjc5ewyZgTFN5ecueK9mbznnnT//LxDm8ExfNYpuL1oG
NnT+W7+470pHN/hTXKKwmMUvzb6mxpbwL1Zwn1g8D3b5f0hqixcdn/0u2QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB10hwSRJWB6Jp13JHRHhJu/msU+MB8GA1UdIwQY
MBaAFN4obQOjc71onvBGEKHIrYRz692tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMt
Y2FkZjBjYTFkZDBkLzEvSFhTSEJKRWxZSG9tblhja2RFZUVtNy1heFQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kYmVmMTctOWJiOC00NmJjLTkzNDMtY2FkZjBjYTFkZDBk
LzEvM2lodEE2Tnp2V2llOEVZUW9jaXRoSFByM2EwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuUCEMA0G
CSqGSIb3DQEBCwUAA4IBAQASfx2BIcSFribe3Ai/vi9tITyPAtFTNcqBsNNaf5Bq
g20lSeT5Phy9tZ/9An7XzSlHxDBbOJh+RolhXuDHFXWXQWVNtvJ8cGvl+9NkpMFA
AH5r6aN36AAX3qi8tw2+UM0NLGGJfdRgJAXRn12g2S+foO94Z5G6aO5LFvZGPcd3
uvunKp7cKfDYGq0JARz8Ptzvpnl59QaOV1tRb5Vyb/u+zYwAEKygoio+NUCjvEjX
libgN95gO1MQTJLyqRc9BkOCST33gKWe0TFLH+YzjOrxvi7GZBlp2s5MtNxzLuXI
cnEJo/Q1dAn7Lfrn4A1l/usPLiTtDtd1wraMXFkJV81N
-----END CERTIFICATE-----
Generated at Wed May 15 16:46:43 2024 by rpki-client on console-fra.rpki-client.org