Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/HLW2FdYZ36s-5iireh5nBU6bk9U.roa
File: HLW2FdYZ36s-5iireh5nBU6bk9U.roa (raw, json)
Hash identifier: qNA61ANyNXKYA5Y8eNxhXI5+LS7Qno+WCVIYsX6s+WI=
Subject key identifier: 1C:B5:B6:15:D6:19:DF:AB:3E:E6:28:AB:7A:1E:67:05:4E:9B:93:D5
Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Certificate serial: 018CC3B68671C5EA6F0FBCB5F20A337E3D5F
Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/HLW2FdYZ36s-5iireh5nBU6bk9U.roa
Signing time: Mon 01 Jan 2024 06:29:28 +0000
ROA not before: Mon 01 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 46516
IP address blocks: 2a06:2700::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft
rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 11:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:86:71:c5:ea:6f:0f:bc:b5:f2:0a:33:7e:3d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e
Validity
Not Before: Jan 1 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cb5b615d619dfab3ee628ab7a1e67054e9b93d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a8:83:b3:2f:1e:75:58:f1:3d:53:9f:fe:38:
fe:19:f3:6a:57:12:cf:dc:1b:0f:25:f7:13:d6:df:
1c:2a:a4:4b:8e:67:07:29:06:f8:8b:d8:ec:0a:8b:
c4:81:9b:0f:70:29:2a:70:90:44:4e:2c:9d:55:7c:
2b:a4:ae:0e:e7:83:52:f9:e2:0b:b8:54:26:63:02:
c9:65:99:bc:0e:0d:b4:14:dd:2c:56:74:b9:d0:c4:
ca:47:83:75:6c:6a:fe:1d:fe:83:1d:fd:83:1b:1d:
ba:0b:c3:09:de:7d:63:db:e6:e7:c5:1d:e0:dd:cd:
5d:10:dc:b8:4c:c0:9e:75:c3:8a:d0:9b:38:97:8c:
80:05:5a:3d:a8:8b:7a:07:5a:a6:54:f0:c0:18:91:
2d:15:d3:3e:2e:0b:43:10:e7:e6:73:ed:b1:dc:4e:
c2:89:4c:bb:35:39:c2:26:7f:ba:a2:e1:cf:73:a1:
f6:e4:7d:e9:67:08:79:54:39:2f:5f:7e:5c:ad:05:
2a:82:dd:f2:40:42:68:4c:cf:99:52:9a:cd:c5:b9:
ae:a5:e9:33:17:29:37:4c:71:7c:09:3a:c4:ce:dd:
60:82:a9:19:38:c5:4b:43:1f:00:18:bd:a7:3a:a5:
21:57:4c:1b:b0:b5:87:58:44:8c:d3:a5:9c:5c:bc:
d0:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B5:B6:15:D6:19:DF:AB:3E:E6:28:AB:7A:1E:67:05:4E:9B:93:D5
X509v3 Authority Key Identifier:
keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/HLW2FdYZ36s-5iireh5nBU6bk9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:2700::/29
Signature Algorithm: sha256WithRSAEncryption
aa:c5:c0:98:2c:98:04:b3:fd:fc:ee:cb:f8:00:de:54:cd:24:
1c:d9:ce:cd:b2:a5:8e:73:68:c6:09:59:dd:be:f3:06:36:1d:
c1:d6:d5:b6:c2:9d:0a:9d:f1:b4:f7:03:c3:67:d0:f1:dd:9d:
e9:b8:64:30:c0:11:42:c4:44:05:ac:1b:6a:6b:81:5f:f5:98:
b0:0d:2e:cd:e5:b9:f1:3b:f8:2e:0c:7d:fb:93:5d:b1:d8:f6:
1c:da:b1:ab:7b:ad:de:99:de:6f:7d:fd:43:6c:80:d9:49:4a:
b7:35:54:9c:f5:7b:41:64:75:58:cd:a9:7b:80:a5:46:9a:ea:
bb:5d:59:3a:ce:aa:77:45:ac:ac:1f:24:1f:13:52:6b:32:b5:
10:49:19:90:17:14:28:7e:18:38:e0:37:95:96:3d:98:81:ea:
29:e9:c8:cb:49:d4:ac:0f:6e:86:26:6c:2d:c2:e6:0a:1e:7c:
11:99:29:ec:7c:e7:14:ab:4d:50:03:ca:4f:ad:62:41:68:ef:
3a:72:5e:61:2c:35:d5:30:44:8c:25:11:0b:1e:89:ef:dd:73:
52:44:d4:38:b2:22:89:d7:21:00:1d:6e:c9:9b:20:08:a1:ea:
58:a4:80:47:43:fa:48:33:99:d5:59:98:2a:71:76:11:73:3c:
fe:a7:e2:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 19:09:09 2024 by rpki-client on console-fra.rpki-client.org