Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hvZMCm5ea6xviCVx9HsikRdAofE.roa
File: hvZMCm5ea6xviCVx9HsikRdAofE.roa (raw, json)
Hash identifier: ClQ4LCOSM0wZPwgtAQSGTvQeJnLts2psHb3f+xovmx0=
Subject key identifier: 86:F6:4C:0A:6E:5E:6B:AC:6F:88:25:71:F4:7B:22:91:17:40:A1:F1
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 018D275A63085F4A7D0AF7BF3D4055F0DC4E
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hvZMCm5ea6xviCVx9HsikRdAofE.roa
Signing time: Sat 20 Jan 2024 14:50:51 +0000
ROA not before: Sat 20 Jan 2024 14:50:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210971
IP address blocks: 2a0d:6f80:5129::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:27:5a:63:08:5f:4a:7d:0a:f7:bf:3d:40:55:f0:dc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 20 14:50:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86f64c0a6e5e6bac6f882571f47b22911740a1f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f7:a5:ef:4a:54:b0:7a:92:68:9a:61:03:89:
a7:e4:f7:c3:37:35:4b:2c:6d:39:ea:d1:df:da:b4:
ab:9e:ce:59:77:de:6d:db:de:40:24:e2:c9:59:8e:
75:61:42:e8:90:e0:88:35:e2:29:66:a5:cc:76:4e:
75:40:c0:ba:85:53:67:45:18:a6:58:61:bb:f5:51:
6f:4f:f8:ce:3a:2c:7f:32:46:86:52:16:6c:7d:c1:
bd:1e:88:57:02:3b:eb:c1:3f:84:86:7b:d0:23:13:
e6:be:32:f2:30:f1:27:3a:ed:49:18:a9:b9:a3:78:
f6:b8:23:a4:32:81:62:b3:ab:37:f9:02:e1:5c:1f:
ce:51:96:5e:d3:05:57:3d:1d:36:89:98:c4:af:b0:
7b:44:c5:9f:7e:3b:36:c9:21:6f:8e:2d:90:6b:4c:
3e:dd:a8:e8:85:57:99:0f:8e:15:62:72:7c:fb:e8:
75:81:cc:84:4d:85:7e:18:a2:dc:1e:09:32:c9:91:
17:7e:83:9e:8d:51:f1:90:70:cf:d2:58:10:33:00:
3f:5d:e5:bb:58:b4:54:3c:8c:20:b5:6b:51:8c:71:
7b:a0:a0:8e:c1:ae:73:d6:98:73:1f:f0:a1:eb:25:
af:2a:71:1c:d0:b8:1e:65:6f:b6:cd:c1:60:5b:76:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F6:4C:0A:6E:5E:6B:AC:6F:88:25:71:F4:7B:22:91:17:40:A1:F1
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/hvZMCm5ea6xviCVx9HsikRdAofE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:5129::/48
Signature Algorithm: sha256WithRSAEncryption
bd:c6:5e:03:11:13:67:cc:53:94:7e:81:69:14:6b:ba:40:95:
7f:27:7e:10:11:69:8d:78:bb:7e:10:27:35:38:56:36:ed:c0:
5a:e2:62:0e:49:06:d3:8a:3c:c0:8a:d1:b3:c6:80:0b:44:2d:
f0:0c:a5:c3:05:6b:ee:88:8a:1d:b1:34:d4:74:de:84:da:3f:
e5:c8:e4:b7:51:d0:07:e7:85:51:a8:b9:70:20:df:13:84:46:
05:3d:b2:6e:ad:ee:07:c2:fe:e2:51:f8:c2:f1:ee:f6:b2:0e:
a6:ed:3c:50:e0:ec:4e:6a:17:82:d0:00:b2:f1:12:89:7c:e1:
92:47:d4:97:c4:f0:4a:8f:c1:05:8e:98:6e:a4:bb:07:e4:4d:
d1:23:8e:e6:00:52:55:55:31:62:ce:c2:05:16:e4:cd:26:63:
60:33:e4:70:d7:46:8d:3f:61:ee:6b:28:52:40:c0:f2:10:df:
45:ff:7c:3f:bd:b2:2c:df:cf:d0:fe:ff:d0:41:2e:20:d9:5f:
2d:3b:84:38:0d:94:08:b9:cf:40:5f:33:97:f1:11:cb:20:55:
bd:9c:2a:a6:2b:3e:87:1c:0b:d3:37:f4:09:65:1f:09:28:10:
dc:b7:17:3c:51:b4:01:e1:45:28:50:e1:36:be:e2:a6:5f:20:
fc:7b:d6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:43:50 2024 by rpki-client on console-fra.rpki-client.org