Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/HI5qFjzHd2ghVjbbxi3bMM2qCK0.roa
File: HI5qFjzHd2ghVjbbxi3bMM2qCK0.roa (raw, json)
Hash identifier: tcN6b/DPk7cj8l49UZdszp56flKH3TUQD8di4przihE=
Subject key identifier: 1C:8E:6A:16:3C:C7:77:68:21:56:36:DB:C6:2D:DB:30:CD:AA:08:AD
Certificate issuer: /CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Certificate serial: 018CC86F58A406DA8C3EC7EB7694518E9B40
Authority key identifier: 3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/HI5qFjzHd2ghVjbbxi3bMM2qCK0.roa
Signing time: Tue 02 Jan 2024 04:29:49 +0000
ROA not before: Tue 02 Jan 2024 04:29:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 2a07:db86::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:58:a4:06:da:8c:3e:c7:eb:76:94:51:8e:9b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e28d6f13e359dd0bb4534a24655974c57d2b0fe
Validity
Not Before: Jan 2 04:29:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c8e6a163cc77768215636dbc62ddb30cdaa08ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:81:63:f2:17:cb:6b:11:61:da:83:0e:06:0a:
e2:45:38:55:5b:0e:cb:2a:01:ef:3e:74:97:dd:bb:
9c:1c:9a:ae:4a:88:a9:43:87:87:49:a5:47:79:10:
4c:30:f6:1b:fa:41:04:3c:8a:a9:1a:78:e7:c4:c8:
1e:5e:2f:b9:2a:63:b4:09:a1:dc:38:19:17:ef:6f:
85:af:87:a7:47:85:f9:83:0e:78:5b:fd:c7:18:5e:
07:a5:8c:64:f4:90:1f:1c:6a:44:fe:0d:06:04:d4:
e0:0d:70:2f:87:24:7e:13:45:f6:16:8b:32:58:2c:
4b:f2:be:27:14:15:84:5a:aa:2e:fb:47:0c:c7:d2:
eb:b8:71:91:70:3a:ef:f3:ab:ec:94:f2:59:e3:08:
6b:c7:49:9a:e6:eb:50:0f:01:ba:e6:b4:28:60:10:
fd:70:29:2e:fe:fb:cd:99:62:48:4c:17:29:36:45:
42:d7:b3:8e:d8:a6:3e:b0:48:49:55:c8:4a:1a:13:
41:ac:02:3f:fd:46:f5:d5:aa:e2:b9:00:44:78:cf:
d9:28:f6:b0:66:cd:c8:8d:37:45:67:ca:eb:23:ff:
9f:80:87:3a:16:21:86:83:68:65:1f:de:3e:c9:a7:
0c:88:d5:82:63:02:06:9c:3b:56:09:1b:5b:b5:f3:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:8E:6A:16:3C:C7:77:68:21:56:36:DB:C6:2D:DB:30:CD:AA:08:AD
X509v3 Authority Key Identifier:
keyid:3E:28:D6:F1:3E:35:9D:D0:BB:45:34:A2:46:55:97:4C:57:D2:B0:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PijW8T41ndC7RTSiRlWXTFfSsP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/HI5qFjzHd2ghVjbbxi3bMM2qCK0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/645038-255b-44df-ae8a-5488169119e8/1/PijW8T41ndC7RTSiRlWXTFfSsP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:db86::/32
Signature Algorithm: sha256WithRSAEncryption
45:bc:6c:4e:dd:f7:3b:27:da:d7:d3:d9:c4:ed:99:0c:98:74:
68:04:06:8a:f7:ec:5d:bd:f8:ed:ec:2a:95:d0:e9:54:24:05:
0b:8a:60:ff:c8:df:c3:ec:55:9e:36:89:10:03:cc:4f:f7:cf:
0a:1f:12:29:99:9e:66:ab:50:3c:95:3c:40:0f:d7:37:66:26:
13:68:a6:87:b0:bb:5f:4e:0a:45:85:1f:9e:19:6d:ed:5a:69:
e1:14:ff:70:18:cc:0f:0f:e1:2b:1d:fe:c6:7e:ec:55:21:56:
9b:d1:fa:80:65:34:b9:cc:89:51:3b:b8:be:fc:e8:97:29:02:
52:5b:b2:19:17:5c:74:8a:3f:f7:8d:ab:cb:a7:50:bd:cb:d3:
53:63:67:7d:f0:43:d3:c8:60:6f:38:4b:ef:15:a6:63:de:6b:
d4:78:07:3e:71:5e:b0:e1:96:8a:c9:74:b7:b4:2e:2f:80:dc:
d3:b4:2a:fb:4f:6e:f9:e3:0d:ca:88:ab:97:b1:c7:76:db:d4:
d0:c9:89:61:1b:d5:f0:b7:28:ee:da:86:0f:26:db:f5:23:93:
71:dd:d8:5f:ac:9d:0b:89:1e:1a:e1:6b:27:a2:30:e5:c2:46:
98:96:b0:fd:2e:4b:cc:e5:aa:a8:5d:e4:5d:ff:53:de:f7:8d:
d5:55:9a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 9 08:04:43 2024 by rpki-client on console-fra.rpki-client.org