Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/HeGLMR8aS9ls-aT99LNVkRPJGIk.roa
File: HeGLMR8aS9ls-aT99LNVkRPJGIk.roa (raw, json)
Hash identifier: HDXHZ2zRy1ITl2BRNS4QImY0s4RpycKfd1/9LOdf97w=
Subject key identifier: 1D:E1:8B:31:1F:1A:4B:D9:6C:F9:A4:FD:F4:B3:55:91:13:C9:18:89
Certificate issuer: /CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Certificate serial: 018FA27401AA6BA9C4AE6356F6BB1AAE6C57
Authority key identifier: BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/HeGLMR8aS9ls-aT99LNVkRPJGIk.roa
Signing time: Wed 22 May 2024 22:37:42 +0000
ROA not before: Wed 22 May 2024 22:37:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214840
IP address blocks: 2001:67c:2eb0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 19:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:a2:74:01:aa:6b:a9:c4:ae:63:56:f6:bb:1a:ae:6c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8dad2c4a0e117a6868c8d67be10308a64974ad
Validity
Not Before: May 22 22:37:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1de18b311f1a4bd96cf9a4fdf4b3559113c91889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:09:fd:ea:b2:49:8c:66:fa:c8:d9:58:1f:72:
37:ee:56:0c:ec:ae:d9:bd:e8:5f:e4:3a:c4:0d:e7:
d5:23:96:15:71:1d:16:a0:4d:08:62:e3:7f:e2:78:
68:17:99:33:e4:9d:fe:be:41:07:bc:b3:3e:71:c2:
6a:40:22:50:e2:17:07:db:7f:c0:be:df:81:cf:68:
0b:6e:b1:aa:2b:bf:b1:27:f3:c1:1b:07:dc:5e:d1:
45:bd:8c:08:a4:34:5c:8f:99:b2:20:8c:4d:96:0b:
a3:9a:a6:6c:aa:e3:89:25:e7:a8:6b:22:e9:fa:e4:
f8:0c:7b:2f:47:6a:28:ff:e6:41:f5:3e:41:bc:6b:
6b:c9:41:c0:72:54:f9:af:61:a9:cb:4d:9b:64:88:
16:cc:e0:4c:70:44:3e:20:de:75:f9:30:bc:48:49:
c1:cd:c4:7d:a0:20:11:94:8f:5b:9b:ff:6a:85:9f:
01:c2:39:07:3d:7d:2c:0c:9c:a0:36:a6:0d:73:b1:
75:7e:d0:15:95:26:91:43:bb:e4:1e:ee:79:9d:52:
63:d1:f1:aa:d2:8f:0f:5b:d0:a2:dc:eb:5a:fa:94:
ac:f4:5a:3a:75:ec:44:73:ec:d5:e7:43:01:36:0a:
02:31:df:b9:df:c4:3f:9c:5e:57:e5:86:6b:b0:57:
cb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E1:8B:31:1F:1A:4B:D9:6C:F9:A4:FD:F4:B3:55:91:13:C9:18:89
X509v3 Authority Key Identifier:
keyid:BA:8D:AD:2C:4A:0E:11:7A:68:68:C8:D6:7B:E1:03:08:A6:49:74:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uo2tLEoOEXpoaMjWe-EDCKZJdK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/HeGLMR8aS9ls-aT99LNVkRPJGIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f3c5d8-5ea5-482e-931f-29c023f94781/1/uo2tLEoOEXpoaMjWe-EDCKZJdK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2eb0::/48
Signature Algorithm: sha256WithRSAEncryption
16:5f:70:db:00:a4:f2:29:c9:b7:bc:0d:bd:b5:e7:a8:ed:15:
81:08:9f:43:dd:79:a1:4f:22:57:7e:d7:6a:af:f0:cc:f3:cb:
59:10:94:e5:67:91:a0:62:77:9f:29:98:6b:7a:07:7c:48:39:
a9:3c:7d:20:ea:ac:95:ff:a3:ee:f4:96:ef:d1:0a:80:5a:4d:
d0:d5:7d:08:74:f8:5f:b8:35:eb:43:d5:ff:ce:66:ab:85:7a:
fe:d1:3d:48:3d:90:34:47:f2:26:0c:c1:e8:d8:26:f3:6d:30:
77:bc:39:ca:74:02:ef:f6:d5:78:87:47:ce:3b:bf:52:fb:59:
0a:54:bb:3a:f1:8f:76:76:6d:d0:e0:8a:d8:1b:20:c5:a7:51:
4b:22:69:c9:ab:1b:f3:56:2f:10:34:5e:31:88:72:34:1d:76:
c5:f8:9d:4d:a7:13:a8:00:6b:d2:a8:28:5a:13:1a:97:a3:72:
ad:b0:40:78:62:0c:07:ac:03:5a:1f:c6:1a:b2:22:a3:f7:ce:
9d:f1:fd:99:12:36:32:6e:35:ac:1c:0d:a8:2e:82:56:03:74:
27:00:72:36:46:f8:c7:50:a2:b6:85:1b:47:59:7c:1b:fd:77:
15:20:3f:53:c5:b9:12:80:b8:c9:7f:f4:46:16:9c:1f:b8:58:
75:56:c3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:36:16 2024 by rpki-client on console-fra.rpki-client.org