Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/HRVgef9wNvFyVnGlw_up2uU0ltU.roa
File: HRVgef9wNvFyVnGlw_up2uU0ltU.roa (raw, json)
Hash identifier: IJ84BsDH1J2B9lwHxwyvMBs+SmQRIo1wjjnh5OS+LmY=
Subject key identifier: 1D:15:60:79:FF:70:36:F1:72:56:71:A5:C3:FB:A9:DA:E5:34:96:D5
Certificate issuer: /CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Certificate serial: 0190C5AEEFF04A59FE80B2E97B823246581F
Authority key identifier: C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/HRVgef9wNvFyVnGlw_up2uU0ltU.roa
Signing time: Thu 18 Jul 2024 11:51:34 +0000
ROA not before: Thu 18 Jul 2024 11:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211286
IP address blocks: 2a0d:8d04::/32 maxlen: 48
2a0d:8d04:5::/48 maxlen: 48
2a0d:8d04:71a::/48 maxlen: 48
2a0d:8d04:71b::/48 maxlen: 48
2a0d:8d04:71d::/48 maxlen: 48
2a0d:8d04:5000::/36 maxlen: 48
2a0d:8d04:6000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.mft
rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:ae:ef:f0:4a:59:fe:80:b2:e9:7b:82:32:46:58:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c64fa0ad8987149f05534724b45a2f4d5ebf475d
Validity
Not Before: Jul 18 11:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d156079ff7036f1725671a5c3fba9dae53496d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:71:00:95:35:07:fd:8f:58:97:a3:40:56:
5e:fd:ab:92:cf:c9:1d:74:36:eb:41:74:ae:b2:c9:
73:f5:7c:27:58:46:b7:dc:b7:5a:94:07:d1:46:12:
44:45:e7:f8:a4:f4:44:7a:70:dc:6a:6c:c2:52:71:
2b:2b:24:d3:00:3d:44:75:50:b3:a1:7d:c6:2e:97:
05:ea:bd:d1:ff:e2:a1:43:b6:12:2f:51:50:92:11:
b1:43:be:a9:33:27:53:4c:6a:34:d3:4c:8a:d2:b6:
11:76:4a:9e:79:2e:4b:1f:cd:df:6e:81:f2:51:9d:
f2:d5:cb:36:0e:48:c2:7a:1e:2e:65:7d:ca:86:63:
9d:19:43:d2:7b:2a:6a:ad:94:8a:08:ca:79:0b:29:
2d:c6:47:c0:8f:e8:0c:c2:fb:8d:45:b3:62:59:34:
ca:95:6b:a7:5d:b6:58:b5:a2:26:b1:5d:8f:d7:fe:
5c:88:12:38:71:08:2a:87:48:ea:50:9b:62:e4:63:
9d:e0:dc:fc:39:c1:d0:05:ed:f3:26:00:50:5a:56:
51:55:87:d0:10:ed:da:4a:73:d5:57:2b:ec:e2:8a:
01:a4:4e:62:44:09:bd:9e:f7:5d:47:07:47:36:0a:
66:a0:90:27:ff:95:18:13:d5:57:d0:3c:36:95:23:
75:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:15:60:79:FF:70:36:F1:72:56:71:A5:C3:FB:A9:DA:E5:34:96:D5
X509v3 Authority Key Identifier:
keyid:C6:4F:A0:AD:89:87:14:9F:05:53:47:24:B4:5A:2F:4D:5E:BF:47:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xk-grYmHFJ8FU0cktFovTV6_R10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/HRVgef9wNvFyVnGlw_up2uU0ltU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/24015f-091c-4c5d-b5c1-bcf77026939d/1/xk-grYmHFJ8FU0cktFovTV6_R10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:8d04::/32
Signature Algorithm: sha256WithRSAEncryption
05:39:29:99:d1:23:6c:78:91:bc:53:f4:f1:72:a7:53:a8:b3:
7f:8a:44:46:1f:02:b2:0b:27:10:cd:82:39:79:c0:88:22:4b:
f5:b9:62:47:37:e2:a0:2c:bc:19:07:95:b5:3b:b7:a4:77:ce:
2e:50:d4:60:9d:05:ba:92:c4:be:c5:2e:10:4c:36:a5:c7:c7:
b8:b5:f1:22:73:d6:97:0c:8a:0d:a5:b7:a1:f4:50:6d:5e:ed:
38:48:dd:e4:29:55:1f:6c:8f:b8:e0:b1:63:15:ab:f9:81:7a:
5d:b3:b3:a2:bd:8d:f4:53:96:b7:2b:db:d4:eb:18:3b:6b:3f:
14:07:d3:fe:80:ca:b2:bc:a8:b1:fa:f0:53:a0:5a:0a:66:09:
74:0b:7b:b1:5c:c9:46:fd:66:9e:fb:1c:42:f1:3e:47:53:ce:
96:f3:a5:3e:99:5a:cc:40:97:ea:e7:41:36:b1:ae:54:fb:c6:
65:2c:51:8e:a9:ac:8c:65:6b:0f:c8:f2:69:e7:cd:ce:98:8f:
95:9e:41:5f:b0:6b:a2:02:9e:fd:03:c9:30:24:78:dc:41:63:
24:24:dd:1f:40:70:54:f7:a9:ce:98:de:03:a6:73:2d:1f:d9:
e3:77:8c:20:ac:13:c3:b9:50:c5:76:1e:56:4e:b9:6d:58:2a:
50:38:cc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:03:04 2024 by rpki-client on console-fra.rpki-client.org