Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/h8YiA4U4138FUoHPWZdv24R2F_Q.roa
File: h8YiA4U4138FUoHPWZdv24R2F_Q.roa (raw, json)
Hash identifier: LMkkb5UobgcmMXtNWQ3cKHh4u//nPhn4uObkTkgszRA=
Subject key identifier: 87:C6:22:03:85:38:D7:7F:05:52:81:CF:59:97:6F:DB:84:76:17:F4
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 018CC26D5A80119BFF56F54381A1803AA039
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/h8YiA4U4138FUoHPWZdv24R2F_Q.roa
Signing time: Mon 01 Jan 2024 00:29:55 +0000
ROA not before: Mon 01 Jan 2024 00:29:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50013
IP address blocks: 2a01:5a8:2:2::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 25 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5a:80:11:9b:ff:56:f5:43:81:a1:80:3a:a0:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 1 00:29:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87c622038538d77f055281cf59976fdb847617f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:b6:86:00:f8:dc:8e:5f:ec:3b:72:bf:b6:
a7:b0:fd:a8:33:9e:6b:2a:c9:6c:8f:2a:d4:0b:58:
18:2c:d2:91:20:59:a2:8f:61:d0:27:95:11:3e:d4:
0a:26:df:74:e0:dd:89:0e:a7:84:73:53:23:4e:c5:
62:40:14:07:66:92:c6:a3:1e:11:50:c8:6d:55:53:
c6:82:7e:c0:5c:88:4a:d7:8d:46:3b:64:35:a2:4e:
56:18:3f:76:df:2f:48:4f:1a:d6:66:e7:1d:56:01:
5c:8b:d6:78:54:f1:e5:12:e7:f8:75:2c:25:4f:93:
29:28:a8:db:c5:d9:9f:60:fd:fc:82:21:f0:35:ec:
39:de:a2:9f:8f:b0:c0:7c:a9:7f:75:16:32:10:cd:
17:29:12:ee:62:2d:e7:0e:9c:28:b3:8a:ef:10:be:
95:8f:d4:e6:ee:63:3b:1c:47:9e:28:4d:d7:45:49:
45:dc:29:58:7f:21:d4:c4:ef:10:65:d5:9c:1b:4e:
f7:0c:93:54:06:ab:ff:75:52:d0:33:f0:d5:97:3d:
ec:35:bb:ee:bb:40:25:25:e4:87:a3:56:eb:ac:40:
5c:d7:6e:52:19:b4:ab:41:4d:02:82:aa:8e:5d:ed:
a6:79:54:cf:99:bf:4d:1c:73:14:af:2c:f4:22:f9:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:C6:22:03:85:38:D7:7F:05:52:81:CF:59:97:6F:DB:84:76:17:F4
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/h8YiA4U4138FUoHPWZdv24R2F_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:5a8:2:2::/64
Signature Algorithm: sha256WithRSAEncryption
ae:41:b0:24:60:68:c5:54:52:79:b7:e3:dc:c1:97:ab:56:75:
cd:11:c6:da:fd:a3:9d:3f:04:54:10:d7:d7:e4:db:50:0a:a2:
eb:2b:6a:82:3a:41:0b:21:4d:e1:53:c7:68:e2:01:d3:76:98:
56:7c:c2:78:70:9d:2b:38:c3:cb:25:1d:4d:0b:82:f6:f3:9f:
60:fa:18:57:ee:e3:c4:c3:0a:65:f5:ca:59:fa:33:2f:aa:82:
53:2f:e5:bf:ee:dd:c2:aa:19:6e:a2:f8:df:d3:cb:77:ba:9e:
88:b5:9b:0b:88:d3:bd:b6:aa:33:e8:c4:02:51:c7:6d:04:c5:
58:eb:00:65:d3:44:ad:c1:63:ff:1c:d1:51:ca:e8:1d:fd:95:
15:49:18:d8:56:29:42:08:61:b3:29:2d:3e:fd:d6:85:24:ac:
4e:3d:b1:d2:f7:55:ab:62:9f:ed:a3:d1:7d:3a:56:00:0c:5f:
c2:20:a7:40:b1:37:54:52:bf:90:5b:49:8a:13:2a:ad:50:27:
3d:1b:38:13:74:45:4b:17:f2:24:ad:93:20:a2:80:c0:e5:d3:
48:ea:d8:12:77:ab:07:26:75:70:2b:2c:dd:90:e5:32:31:a5:
5d:86:58:8d:c0:03:5c:9f:1b:10:dd:b1:27:9b:b7:1e:47:ad:
8a:09:c3:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 12:31:54 2024 by rpki-client on console-fra.rpki-client.org