Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Hj_yr2P8JiRHYu1JpHpAPus7y54.roa
File: Hj_yr2P8JiRHYu1JpHpAPus7y54.roa (raw, json)
Hash identifier: oJX+Ptz7CkwpgSmlmxP8ZokD4ctpS81y8opXtpS48us=
Subject key identifier: 1E:3F:F2:AF:63:FC:26:24:47:62:ED:49:A4:7A:40:3E:EB:3B:CB:9E
Certificate issuer: /CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Certificate serial: 0191B2A8592425E77AD07289F3961CA21852
Authority key identifier: B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Hj_yr2P8JiRHYu1JpHpAPus7y54.roa
Signing time: Mon 02 Sep 2024 12:14:22 +0000
ROA not before: Mon 02 Sep 2024 12:14:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47447
IP address blocks: 2a0b:3c40:22::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.mft
rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:a8:59:24:25:e7:7a:d0:72:89:f3:96:1c:a2:18:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b557ccd43afe816e4953228bf14a75dc29014b8d
Validity
Not Before: Sep 2 12:14:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e3ff2af63fc26244762ed49a47a403eeb3bcb9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ad:dd:b6:15:10:54:ca:81:13:89:38:d0:a5:
fd:7f:ad:c1:a2:22:12:09:3f:ca:c9:b7:ff:d9:12:
42:4a:1e:09:ed:42:93:34:d2:8e:a7:1e:56:17:4c:
ae:ab:5d:04:a0:d9:8b:d9:ac:ab:4c:df:62:69:1e:
c1:a8:2d:68:97:3b:5b:99:6f:f6:e9:0c:bd:42:5a:
4c:d6:c0:cb:85:04:1b:a2:da:4b:83:ca:4d:cf:25:
c3:20:42:d8:a0:52:50:74:b7:c4:27:bf:95:da:91:
69:69:a1:f4:03:46:ee:1c:35:f1:45:3b:a1:73:b3:
d1:0d:a6:24:56:6f:2d:ef:f3:d0:f2:01:0d:c8:4e:
e7:72:ed:84:a6:85:5f:3f:88:18:5e:84:6e:e4:2c:
08:f4:f1:0f:44:66:bc:e1:18:40:67:b9:ff:01:ea:
a5:1c:c9:5f:16:f5:eb:e3:e7:b1:b5:38:8c:b5:82:
0a:94:8a:95:bd:6e:cb:0b:ed:61:0a:6d:5a:71:d6:
d2:46:f6:80:4b:44:57:d8:c4:5c:8e:ae:58:22:8d:
dd:78:d1:f0:60:62:e0:10:1e:b9:2b:73:b1:08:0b:
a1:0c:5e:6d:b4:62:03:44:c8:73:23:86:36:24:68:
8c:7b:68:23:a5:c2:e2:f4:9d:8d:aa:fb:22:2b:25:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:3F:F2:AF:63:FC:26:24:47:62:ED:49:A4:7A:40:3E:EB:3B:CB:9E
X509v3 Authority Key Identifier:
keyid:B5:57:CC:D4:3A:FE:81:6E:49:53:22:8B:F1:4A:75:DC:29:01:4B:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVfM1Dr-gW5JUyKL8Up13CkBS40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/Hj_yr2P8JiRHYu1JpHpAPus7y54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/190843-1803-4462-a795-6bc75578b4c3/1/tVfM1Dr-gW5JUyKL8Up13CkBS40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:3c40:22::/48
Signature Algorithm: sha256WithRSAEncryption
b8:6f:f6:60:10:2e:27:e6:65:07:5e:e5:39:93:02:87:bf:a7:
d2:bd:dc:a7:71:b7:1b:8a:54:c0:87:e4:92:41:6b:25:61:d5:
4a:0d:fa:b6:12:31:3a:6b:cf:26:f8:d9:28:5f:f6:2e:ca:ba:
36:17:d7:c6:52:6d:1a:70:1d:e3:12:8f:78:34:25:e7:9a:32:
43:68:71:f9:0a:05:c2:12:df:a3:dc:f4:c5:b9:b5:a4:82:0a:
d7:6f:c6:6e:0e:11:27:19:25:de:95:4f:d9:40:9f:86:65:1b:
f8:03:da:d5:6a:12:11:a8:c0:73:f5:33:96:dd:76:1d:52:45:
01:a6:94:d3:7c:dd:4e:08:0b:c3:a5:c8:77:1b:73:39:58:4c:
7d:40:a7:8f:f6:f6:16:c3:a1:33:d0:21:08:49:ff:e9:ac:ee:
d8:9b:bc:df:7a:ba:2b:f8:fb:e1:86:ed:7f:2a:b3:04:86:19:
5f:eb:36:f7:55:08:64:53:80:a0:22:19:f0:fe:75:f3:ff:58:
14:80:1c:80:dd:53:e7:65:8d:cc:0e:d3:b2:03:66:ac:51:78:
0b:a9:9d:47:f0:ef:0f:55:ae:6b:56:0a:da:aa:58:63:df:35:
60:74:ed:3c:6b:a6:06:80:9a:32:e8:b5:37:3d:ce:10:a8:ab:
b5:9c:93:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:23 2024 by rpki-client on console-ams.rpki-client.org