Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/HEJdIihbFGcssaI-FDUZc1Y7YvQ.roa
File: HEJdIihbFGcssaI-FDUZc1Y7YvQ.roa (raw, json)
Hash identifier: y/Qy1GfZcaZSQkZ1S2edciL5+lshVuVUhXt+RS9xeg4=
Subject key identifier: 1C:42:5D:22:28:5B:14:67:2C:B1:A2:3E:14:35:19:73:56:3B:62:F4
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 018CC5DCC7438AF6C6ADD0178794E259AD69
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/HEJdIihbFGcssaI-FDUZc1Y7YvQ.roa
Signing time: Mon 01 Jan 2024 16:30:29 +0000
ROA not before: Mon 01 Jan 2024 16:30:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 394414
IP address blocks: 2a06:c3c0:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 May 2024 14:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:c7:43:8a:f6:c6:ad:d0:17:87:94:e2:59:ad:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Jan 1 16:30:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c425d22285b14672cb1a23e14351973563b62f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:d9:c9:f3:b4:4d:35:c8:48:dd:26:94:d9:
cc:0e:57:81:7b:27:30:9a:f3:f9:60:39:4f:4b:99:
2a:16:0b:ab:bd:83:c9:8b:f8:6a:b6:e6:0f:ea:21:
a5:1c:26:72:af:71:2c:25:05:ef:38:a6:f2:3c:7d:
ee:7c:1a:00:47:64:c3:82:49:c6:2b:f8:91:9a:e9:
0d:ba:e0:7a:2b:02:95:f6:7c:3f:c8:ef:c5:b8:75:
65:88:0c:c9:dd:12:c6:23:cd:e6:37:af:f0:53:c1:
6e:52:2b:53:c1:fa:ad:e2:44:33:cb:30:05:a9:55:
6b:3b:07:02:5c:63:24:16:97:84:fd:f0:de:1e:08:
c0:9b:cb:7e:b3:39:17:d6:e6:80:90:40:42:49:a4:
69:87:cd:96:27:d9:d5:d1:90:3e:c8:c9:5e:57:b9:
2f:4d:d7:88:5c:1d:61:b2:82:0d:12:81:32:34:1c:
62:02:8f:cb:d9:eb:25:36:bb:b7:8c:8e:38:fb:5d:
d3:d9:06:e7:a9:64:85:3b:86:5c:69:43:84:17:26:
b3:49:20:f4:32:14:04:05:a6:e2:76:e5:8e:cc:51:
ec:97:a3:5e:69:32:04:af:3e:93:d6:4d:72:63:74:
07:4b:fb:c7:4c:f5:53:2e:f8:29:f8:8c:9e:b4:38:
ee:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:42:5D:22:28:5B:14:67:2C:B1:A2:3E:14:35:19:73:56:3B:62:F4
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/HEJdIihbFGcssaI-FDUZc1Y7YvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:c3c0:6::/48
Signature Algorithm: sha256WithRSAEncryption
3f:9b:08:e3:45:f1:9d:d7:e6:09:af:62:f2:a1:a8:58:17:73:
b8:ae:86:fc:7d:a5:f9:b2:42:e8:93:0c:b6:0e:5e:37:21:2e:
66:6a:41:ba:d2:7e:02:fb:b2:bb:1c:be:7e:ef:2e:81:af:69:
14:6b:f8:4e:e6:35:bb:40:36:f3:0a:07:67:24:b2:d0:ed:f5:
d6:65:c8:11:78:6d:25:c4:f7:22:86:fe:00:6a:3c:97:b3:04:
4a:51:c3:cf:ad:54:41:ba:39:cb:27:a4:04:e3:e7:82:2d:47:
02:21:38:62:6d:a9:34:2e:ba:04:2f:3e:4c:4e:15:f7:57:28:
11:91:ac:29:36:2b:b5:9a:95:e4:6e:56:c4:5c:ef:98:53:89:
e6:9b:4e:e4:cc:12:73:25:6e:0c:c8:c1:b4:0e:94:28:73:a8:
e7:c3:e7:ad:ee:3e:12:fe:d2:ca:be:dc:e6:89:a7:ac:6a:ff:
2b:f3:e3:28:c8:b2:c4:5d:06:a3:75:50:ce:3d:7b:6b:ea:c8:
e0:e2:6b:44:7f:72:8f:84:c4:9f:e3:a9:5c:1e:3d:c8:b4:ca:
13:4a:11:35:c2:30:9e:e8:18:c9:38:02:07:78:3e:43:64:b5:
40:2e:e6:59:2d:84:75:af:c3:f3:05:98:39:44:bd:0f:76:b5:
b0:54:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:11:42 2024 by rpki-client on console-ams.rpki-client.org