Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/HbiPECGCihGyX7NGCdrptrhu0co.roa
File: HbiPECGCihGyX7NGCdrptrhu0co.roa (raw, json)
Hash identifier: c9xbSvGJl5ha60BzXhXx58nIOdxX6AN8EjOcYXf8pr4=
Subject key identifier: 1D:B8:8F:10:21:82:8A:11:B2:5F:B3:46:09:DA:E9:B6:B8:6E:D1:CA
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 0191314C87AF9640B1C13D129F7560621D3E
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/HbiPECGCihGyX7NGCdrptrhu0co.roa
Signing time: Thu 08 Aug 2024 09:23:04 +0000
ROA not before: Thu 08 Aug 2024 09:23:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214400
IP address blocks: 2a0c:9a46:100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:31:4c:87:af:96:40:b1:c1:3d:12:9f:75:60:62:1d:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Aug 8 09:23:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1db88f1021828a11b25fb34609dae9b6b86ed1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:80:2d:cc:75:72:b1:76:bd:3f:c1:1b:08:38:
af:8c:cc:b9:4b:89:fc:e2:38:58:ad:e3:6e:6c:0e:
25:bf:9f:62:a0:33:3d:c2:00:a4:a2:31:7b:51:cb:
8b:db:22:72:bf:d3:a6:7a:5b:92:a5:de:92:a0:1c:
52:ff:01:02:52:a4:94:12:61:93:a1:8f:ff:4f:69:
d4:7d:ee:49:ae:18:37:01:f1:f4:47:c0:8b:4c:fb:
90:8c:06:3c:8f:25:b4:54:03:2a:46:22:ba:f3:05:
78:5a:9e:b2:06:74:fa:3b:32:5c:62:1b:f9:da:9d:
a5:ff:da:66:70:90:87:dd:15:bb:d3:6a:78:a7:78:
86:ee:12:1e:96:df:07:84:42:fb:2b:f2:51:b2:76:
84:91:5c:84:45:4a:ee:32:bf:02:4d:db:d3:04:d2:
72:1e:c9:5b:36:34:40:fc:82:65:2f:c6:1e:1d:9c:
12:50:19:eb:37:17:a6:d9:b5:8f:97:d3:aa:ed:e9:
33:5a:fe:9d:7a:8f:da:4e:5a:19:b9:a9:eb:51:43:
bc:d0:5f:3f:b2:f7:41:ba:ab:65:6d:60:22:e2:eb:
81:a5:1d:a4:83:33:d6:e7:9a:d1:0b:7d:71:fa:65:
9d:cc:f2:fd:92:d5:c2:21:ac:a1:6b:c4:c0:e1:75:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:B8:8F:10:21:82:8A:11:B2:5F:B3:46:09:DA:E9:B6:B8:6E:D1:CA
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/HbiPECGCihGyX7NGCdrptrhu0co.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a46:100::/40
Signature Algorithm: sha256WithRSAEncryption
4c:86:a6:a1:0f:fc:7b:ed:e6:d8:21:b6:e8:e2:47:4b:81:88:
b9:3f:5f:e6:e5:59:d0:96:62:9a:4f:3c:c4:7c:fc:6e:d4:73:
f1:85:dd:e5:d7:18:74:41:f6:dd:b1:36:48:5b:9c:82:fd:c0:
2e:54:4e:d7:d4:16:f8:43:5d:cd:b4:50:a1:1c:2a:68:fb:83:
de:4a:14:a0:71:4b:d3:44:d7:17:89:1a:59:77:95:58:86:ac:
2b:0e:79:f3:1f:68:53:48:9f:aa:55:10:90:8d:0d:2c:df:d7:
f6:85:fa:b1:fd:60:8b:06:21:4a:7d:fd:69:68:7d:f1:f2:97:
60:d4:41:65:d6:ec:1a:3e:5f:d7:28:17:fc:14:2e:b8:5c:5f:
04:91:9c:62:40:62:b5:2f:85:60:d2:27:92:42:c2:0a:39:2f:
76:11:a9:f7:de:e9:06:90:74:b0:47:c5:98:ae:96:a4:00:ac:
63:2f:86:04:35:ed:93:5b:6e:c0:e1:1c:18:c8:bf:c9:7d:4b:
67:0a:17:76:f7:13:fc:b3:1b:66:05:60:1e:05:36:8e:e7:f1:
1d:4f:16:70:79:c3:3b:f7:49:90:c2:ef:11:3f:1c:df:35:93:
f0:d6:26:50:b2:26:5e:09:13:0b:8c:1d:c5:1a:9a:b9:d2:f1:
22:14:62:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:59:21 2024 by rpki-client on console-ams.rpki-client.org