Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/H7GYWmW13EbBIUuSxCNToHedUX8.roa
File: H7GYWmW13EbBIUuSxCNToHedUX8.roa (raw, json)
Hash identifier: Ask4B72t9CuxOH4AIJuRLiRpycuVRooD2wWHfyK03v4=
Subject key identifier: 1F:B1:98:5A:65:B5:DC:46:C1:21:4B:92:C4:23:53:A0:77:9D:51:7F
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 018CC50037E6B2BDF1DF1435EBEE4CBAE476
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/H7GYWmW13EbBIUuSxCNToHedUX8.roa
Signing time: Mon 01 Jan 2024 12:29:34 +0000
ROA not before: Mon 01 Jan 2024 12:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215871
IP address blocks: 2a14:1f80::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 10:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:37:e6:b2:bd:f1:df:14:35:eb:ee:4c:ba:e4:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jan 1 12:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1fb1985a65b5dc46c1214b92c42353a0779d517f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4f:d0:b6:60:ea:5d:c0:d2:07:fd:c3:c5:a7:
86:56:98:52:48:ab:72:3a:b0:6f:db:f4:00:34:b4:
4c:8e:bd:02:ce:09:0b:da:5a:b7:90:01:ac:4f:68:
0d:5d:3b:68:bb:f0:a0:ac:a4:99:76:4c:81:8a:a4:
00:68:da:85:76:96:67:26:df:6b:3d:a2:14:6b:d3:
6f:cc:80:11:57:9a:d0:77:2e:2d:b2:ff:0c:7d:e6:
85:2b:18:d1:2e:29:23:13:15:13:76:e2:c9:7a:2e:
ac:2d:7b:8c:e2:0c:92:5b:7a:37:73:96:ac:6c:cf:
69:94:d1:31:a2:56:30:49:98:ea:a6:92:4d:4a:97:
53:de:ca:0a:c4:02:ce:bf:7b:57:e2:fc:e3:db:bb:
f0:50:fd:72:07:89:61:c6:d0:1a:70:98:84:50:c1:
a2:0f:b1:39:9d:04:12:4e:99:f6:d8:18:04:12:37:
d6:33:2f:78:a7:57:f4:42:a0:7c:1c:07:7e:9b:17:
01:84:6d:d9:77:bd:b2:11:e0:d8:c5:75:b6:d0:e9:
32:51:2c:86:04:d0:fd:fc:53:f6:bc:cc:53:af:25:
1d:e5:ad:f8:6b:af:5d:47:41:cf:4b:a1:0a:73:0d:
0e:a1:eb:bc:02:31:bd:9b:74:8d:97:8b:5e:08:07:
cc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B1:98:5A:65:B5:DC:46:C1:21:4B:92:C4:23:53:A0:77:9D:51:7F
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/H7GYWmW13EbBIUuSxCNToHedUX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1f80::/29
Signature Algorithm: sha256WithRSAEncryption
43:d3:a5:84:d6:a2:53:27:37:6e:5f:0c:12:f0:89:c6:b7:ae:
8d:30:90:70:61:53:7f:f5:db:4f:32:24:ea:fb:98:01:67:0c:
75:95:45:48:12:6c:41:2b:16:b7:72:c9:df:08:07:18:78:b1:
56:8e:85:13:db:ea:ce:ab:72:d7:f0:40:36:4d:6a:ea:55:39:
65:ad:63:ba:4b:89:74:59:31:c0:a9:d1:30:35:ba:54:16:68:
7a:82:41:b4:bc:ef:f5:ff:f4:d5:27:e2:8e:e6:ee:9f:9f:18:
02:81:45:52:2a:8c:93:0b:7e:09:cb:ee:04:41:60:0a:3e:b6:
a9:96:d9:57:67:7c:9d:55:71:7b:6e:90:0d:b7:e7:a9:4b:71:
4e:89:14:fd:1c:a3:cd:36:79:72:c6:2b:4a:29:e4:8d:77:05:
63:a9:78:98:65:eb:07:06:28:91:10:9c:f5:4b:f4:94:5c:a8:
41:2b:bb:b7:9c:34:03:21:46:3c:61:0c:c5:fe:2e:7d:82:f5:
7d:32:88:43:fc:6c:a7:3c:c2:14:77:d9:13:f1:d5:99:f2:14:
25:8b:d7:36:b6:2c:4f:e5:af:a3:44:58:fa:9d:54:fa:09:cd:
f9:67:cb:aa:2d:d0:16:81:ef:f3:8b:ef:1c:30:ce:72:6e:06:
7a:b4:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 20:01:03 2024 by rpki-client on console-ams.rpki-client.org