Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/HDd6V6Wkt0qsCqGxLNOU98wB3f4.roa
File: HDd6V6Wkt0qsCqGxLNOU98wB3f4.roa (raw, json)
Hash identifier: gIUZ8E+yowEFGJM/UWYEYeweJMiW/NdZZVlFmvvgwYw=
Subject key identifier: 1C:37:7A:57:A5:A4:B7:4A:AC:0A:A1:B1:2C:D3:94:F7:CC:01:DD:FE
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 018CC94C104D2D1F356AFF525DEAB0C0C6B6
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/HDd6V6Wkt0qsCqGxLNOU98wB3f4.roa
Signing time: Tue 02 Jan 2024 08:30:54 +0000
ROA not before: Tue 02 Jan 2024 08:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210680
IP address blocks: 2a09:c280::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:10:4d:2d:1f:35:6a:ff:52:5d:ea:b0:c0:c6:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Jan 2 08:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c377a57a5a4b74aac0aa1b12cd394f7cc01ddfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d9:11:ab:a1:6f:35:55:df:00:d4:6e:4a:a0:
50:c0:b0:85:59:a6:fd:28:d4:e7:51:04:89:85:80:
13:2c:bd:8d:95:47:1a:c2:aa:5d:cf:51:03:15:c0:
df:30:02:6d:ec:84:85:09:e6:eb:3e:b8:d1:f9:ff:
20:e2:5e:14:da:8d:bf:af:60:f5:03:08:26:d2:aa:
9c:63:d8:f0:ad:54:6f:5f:59:5e:26:c2:43:a4:20:
f7:d1:94:4d:fa:3c:a0:61:55:94:97:56:bf:99:6f:
bf:80:b1:9c:92:6d:b7:0f:71:08:e4:4b:a7:4c:99:
00:b7:2e:c4:e2:a5:42:d5:7b:19:67:c2:3c:5d:4a:
78:fa:c4:e5:e7:57:21:8d:a4:ba:2b:6b:df:8b:63:
c8:8b:a5:72:75:96:2a:93:28:41:25:30:d4:49:44:
88:ff:5e:24:87:93:a0:62:4d:75:98:3b:f7:ae:6d:
46:95:99:99:c8:df:af:79:28:fe:f6:0e:29:d0:ec:
ad:10:4f:a4:07:05:7b:46:cc:d7:6e:98:07:0b:62:
04:c9:92:52:f3:d2:f6:d6:eb:76:ec:f5:22:a6:6e:
93:77:ef:72:a6:b8:80:cd:cc:00:6d:e2:7d:1f:e2:
4b:80:bb:5a:0b:f4:aa:75:9e:82:c0:2b:ad:1a:37:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:37:7A:57:A5:A4:B7:4A:AC:0A:A1:B1:2C:D3:94:F7:CC:01:DD:FE
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/HDd6V6Wkt0qsCqGxLNOU98wB3f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:c280::/29
Signature Algorithm: sha256WithRSAEncryption
2b:18:e9:37:24:6b:95:49:25:12:1a:1a:01:9c:30:a0:b5:45:
39:35:09:67:27:90:e0:83:8d:f3:7c:b8:6c:2c:16:45:55:96:
7f:f1:e4:56:54:6a:c7:8d:8a:0a:27:6e:c7:c3:91:5b:66:dc:
0f:88:1d:de:a4:b4:0e:e9:db:d0:35:3d:27:17:21:57:ce:a8:
8e:3c:24:c2:47:2a:9f:e6:75:35:3d:16:ba:ec:8e:27:69:13:
3e:7e:d4:e1:08:60:c6:aa:da:f0:e6:19:06:98:a3:a2:d6:28:
40:e2:01:c1:d5:f4:bb:e7:1f:7e:4a:5d:8c:07:7e:76:33:ad:
f9:cd:4c:34:ce:2b:0d:bf:6f:47:4b:96:c1:be:c9:54:68:b0:
d7:63:bc:1f:10:13:de:3e:25:79:d5:11:34:29:1e:0f:9e:84:
9a:18:5e:0d:ff:a8:ed:58:29:fa:40:f3:03:48:f5:ff:5c:ea:
10:e4:a7:b6:7d:6a:98:8d:1d:84:21:59:bd:b2:c8:56:6b:71:
df:bc:a8:a0:f6:f1:10:eb:a0:c3:af:da:b0:4a:bb:b1:1a:ec:
f8:c3:5b:64:59:0c:9d:45:e3:38:9a:36:d4:3f:64:4d:f5:4d:
4f:97:7b:ee:2c:24:04:d2:af:cc:a9:71:4e:ad:e9:15:62:bd:
2f:6d:10:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 02:39:36 2024 by rpki-client on console-fra.rpki-client.org