Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/HX_UHT2wr7WtrFst0qBPD3YFyI0.roa
File: HX_UHT2wr7WtrFst0qBPD3YFyI0.roa (raw, json)
Hash identifier: phznvmkkEPXra9EQR+Nk6jF+b0JA7NVv420tkkowjK4=
Subject key identifier: 1D:7F:D4:1D:3D:B0:AF:B5:AD:AC:5B:2D:D2:A0:4F:0F:76:05:C8:8D
Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Certificate serial: 018CC5DCD9615C8ED3E109C13A1A4A3B194E
Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/HX_UHT2wr7WtrFst0qBPD3YFyI0.roa
Signing time: Mon 01 Jan 2024 16:30:34 +0000
ROA not before: Mon 01 Jan 2024 16:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62047
IP address blocks: 176.126.59.0/24 maxlen: 24
178.216.40.0/21 maxlen: 21
2001:7f8:5b::/48 maxlen: 48
2001:67c:778::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 May 2024 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:d9:61:5c:8e:d3:e1:09:c1:3a:1a:4a:3b:19:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a
Validity
Not Before: Jan 1 16:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d7fd41d3db0afb5adac5b2dd2a04f0f7605c88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:89:88:2d:cb:fd:07:c2:ec:26:63:77:82:
55:6c:a1:93:91:de:e7:26:e4:94:d0:af:99:19:6b:
79:43:47:87:60:66:5d:e9:cc:32:85:3e:78:b9:e5:
9e:07:7e:72:77:2e:4b:12:13:7a:45:5a:d4:7e:83:
70:42:ee:20:91:a2:24:c8:22:4a:60:0c:7b:1d:03:
76:6f:7f:6b:2a:6a:cc:2e:01:7c:4d:62:d5:85:73:
b3:6e:f0:43:8e:b0:43:da:3c:0f:7e:17:26:a2:01:
15:ed:36:d7:04:80:81:f8:ea:2d:d1:51:77:64:09:
ba:bc:f2:60:1b:d4:a9:5f:9f:b1:bb:44:8a:3a:80:
0d:11:44:87:f2:76:d0:38:63:32:06:69:98:b9:9e:
ce:dc:d8:63:37:3e:3d:6a:48:87:d6:6e:e3:6c:46:
c5:b2:d2:a6:6c:db:36:0f:7d:4b:cb:37:fd:4e:f0:
e6:27:10:d0:16:28:96:06:07:46:c3:e5:56:3d:e7:
7f:f0:8a:c7:0f:a7:ba:54:01:d2:52:aa:e9:f6:bf:
27:72:86:e2:c1:43:26:9a:72:0e:d7:ba:d7:96:74:
0d:bd:4d:d4:e8:31:9b:36:0d:84:cc:a1:f8:db:85:
05:ea:c8:6e:00:fa:d0:c1:dc:ad:fa:51:5c:b9:2e:
9e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:7F:D4:1D:3D:B0:AF:B5:AD:AC:5B:2D:D2:A0:4F:0F:76:05:C8:8D
X509v3 Authority Key Identifier:
keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/HX_UHT2wr7WtrFst0qBPD3YFyI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.59.0/24
178.216.40.0/21
IPv6:
2001:67c:778::/48
2001:7f8:5b::/48
Signature Algorithm: sha256WithRSAEncryption
11:53:29:ce:42:b0:9c:46:57:b4:43:57:aa:58:ed:53:c1:29:
54:f6:7c:43:e8:60:8f:e5:63:e8:d0:9d:58:9c:fa:d9:46:48:
89:1a:ef:42:af:6f:8e:7e:83:28:c6:55:85:9b:23:03:34:07:
55:1a:2b:a2:12:f7:e3:ae:08:17:b6:08:c5:57:04:5e:22:f0:
5a:df:a8:20:03:ac:d1:4e:80:b4:d6:3e:69:cc:4d:53:c4:aa:
5c:8f:48:70:6e:13:50:f5:0f:a3:bf:3c:a3:39:9d:e3:92:6b:
c0:c0:ef:d5:18:82:d2:d9:ec:97:da:30:ce:b9:66:96:ca:c6:
10:b1:06:42:f5:b9:a4:1b:f0:45:ee:40:f2:94:fa:5b:e8:23:
75:e1:79:f0:47:5c:98:01:07:53:d0:cc:47:d6:1f:19:da:52:
01:ec:e3:62:5f:16:e3:c2:eb:ee:c9:53:50:f8:6d:de:2a:f6:
b9:37:c7:28:7e:74:56:1d:5b:dd:99:4e:79:c5:6c:9b:19:8f:
28:c5:05:e5:41:6a:d6:e9:14:16:8d:fe:f8:2d:43:d2:d6:b5:
32:31:d8:8a:94:32:8d:41:67:ce:9c:c5:cd:38:ed:05:57:c4:
25:72:ef:e3:c7:26:3c:d8:d1:47:da:b1:0a:83:eb:1e:15:b9:
a9:d9:b5:79
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAYzF3NlhXI7T4QnBOhpKOxlOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx
NmMzMmEwHhcNMjQwMTAxMTYzMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZDdmZDQxZDNkYjBhZmI1YWRhYzViMmRkMmEwNGYwZjc2MDVjODhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpuJiC3L/QfC7CZjd4JVbKGTkd7n
JuSU0K+ZGWt5Q0eHYGZd6cwyhT54ueWeB35ydy5LEhN6RVrUfoNwQu4gkaIkyCJK
YAx7HQN2b39rKmrMLgF8TWLVhXOzbvBDjrBD2jwPfhcmogEV7TbXBICB+Oot0VF3
ZAm6vPJgG9SpX5+xu0SKOoANEUSH8nbQOGMyBmmYuZ7O3NhjNz49akiH1m7jbEbF
stKmbNs2D31Lyzf9TvDmJxDQFiiWBgdGw+VWPed/8IrHD6e6VAHSUqrp9r8ncobi
wUMmmnIO17rXlnQNvU3U6DGbNg2EzKH424UF6shuAPrQwdyt+lFcuS6eSwIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFB1/1B09sK+1raxbLdKgTw92BciNMB8GA1UdIwQY
MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt
MWIwNmQxYzcwNGMxLzEvSFhfVUhUMndyN1d0ckZzdDBxQlBEM1lGeUkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx
LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAsH47AwQD
stgoMBgEAgACMBIDBwAgAQZ8B3gDBwAgAQf4AFswDQYJKoZIhvcNAQELBQADggEB
ABFTKc5CsJxGV7RDV6pY7VPBKVT2fEPoYI/lY+jQnVic+tlGSIka70Kvb45+gyjG
VYWbIwM0B1UaK6IS9+OuCBe2CMVXBF4i8FrfqCADrNFOgLTWPmnMTVPEqlyPSHBu
E1D1D6O/PKM5neOSa8DA79UYgtLZ7JfaMM65ZpbKxhCxBkL1uaQb8EXuQPKU+lvo
I3XhefBHXJgBB1PQzEfWHxnaUgHs42JfFuPC6+7JU1D4bd4q9rk3xyh+dFYdW92Z
TnnFbJsZjyjFBeVBatbpFBaN/vgtQ9LWtTIx2IqUMo1BZ86cxc047QVXxCVy7+PH
JjzY0UfasQqD6x4VuanZtXk=
-----END CERTIFICATE-----
Generated at Wed May 29 01:56:57 2024 by rpki-client on console-fra.rpki-client.org