Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/HDSPYQAsun6TXFlpwZ7Kak9QQCQ.roa
File: HDSPYQAsun6TXFlpwZ7Kak9QQCQ.roa (raw, json)
Hash identifier: xenlCneBBaJpvMR7nqwTV0Mq5zxXgB28VzjlKkHsKiQ=
Subject key identifier: 1C:34:8F:61:00:2C:BA:7E:93:5C:59:69:C1:9E:CA:6A:4F:50:40:24
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 01923B565E3A55DFEB518D7736F79A5D71E4
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/HDSPYQAsun6TXFlpwZ7Kak9QQCQ.roa
Signing time: Sun 29 Sep 2024 01:12:48 +0000
ROA not before: Sun 29 Sep 2024 01:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198057
IP address blocks: 2a01:e281:ab00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:3b:56:5e:3a:55:df:eb:51:8d:77:36:f7:9a:5d:71:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Sep 29 01:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c348f61002cba7e935c5969c19eca6a4f504024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3a:9f:a5:dd:ac:e8:11:82:c3:f2:90:4a:bb:
7d:a6:2f:82:5c:b6:2c:4a:b6:9a:ff:b6:ef:06:a0:
19:54:9c:9c:02:1b:8c:79:b5:ec:2e:6a:37:16:be:
a3:25:f8:ef:b9:d2:74:13:e4:96:70:38:18:00:e1:
59:70:34:a6:71:5b:9f:73:02:a3:33:27:b1:8a:97:
d6:89:da:85:dc:d2:4d:75:d5:e3:fe:d4:2e:24:43:
69:37:9d:da:9f:15:d4:b1:66:2d:ff:8f:12:17:6f:
ec:23:5a:6b:09:31:28:1b:d3:65:52:18:04:47:6f:
4d:0f:5f:01:bb:64:ee:2c:e4:08:c4:69:e4:55:99:
57:aa:d3:24:37:1c:43:10:04:97:e8:11:2f:27:2a:
da:11:a6:8b:45:2a:a2:de:55:01:85:55:bb:ee:73:
98:ae:fd:ac:8f:18:2d:6d:5c:13:e6:7f:32:5b:a8:
87:99:6a:86:58:2f:69:fb:e2:e3:23:ed:bc:9f:57:
2a:2b:ac:0f:22:c1:f5:35:7b:bd:5e:2b:0d:e0:18:
31:51:65:7c:f9:d2:35:5f:91:cc:37:f7:4f:27:39:
a6:01:bf:6c:72:c3:5d:d8:33:85:a0:a1:3d:3f:89:
6f:2e:f0:15:8b:2c:ea:60:4d:1a:19:b2:cd:50:c9:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:34:8F:61:00:2C:BA:7E:93:5C:59:69:C1:9E:CA:6A:4F:50:40:24
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/HDSPYQAsun6TXFlpwZ7Kak9QQCQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:ab00::/40
Signature Algorithm: sha256WithRSAEncryption
7a:ed:d8:80:14:cc:c6:41:37:ed:f8:10:bb:bf:55:07:ea:e8:
5d:f3:8a:80:dd:af:4f:b8:07:7c:63:6f:20:2d:f1:ab:cc:8d:
c0:a5:30:91:82:60:8d:18:a4:1b:cc:ef:4e:21:c9:5c:ca:53:
c1:d1:0b:40:22:7f:4f:23:6c:74:ed:12:8d:5e:94:c3:73:99:
90:bc:e0:be:f5:e6:2d:7a:1c:03:e8:d9:85:3d:05:d5:a5:bd:
61:5d:36:8b:a6:ca:18:25:96:0b:ab:7a:55:52:62:df:e5:73:
57:99:6d:10:35:0f:fe:53:77:ac:11:f2:9a:3a:a6:ec:1b:52:
83:e7:be:28:b9:36:78:c9:e7:80:32:0b:dc:b8:e0:2c:8c:22:
55:80:0d:06:fe:15:ca:2f:50:7c:65:f6:09:86:cc:a1:7b:1e:
ec:78:06:9d:d0:6f:eb:0e:85:76:68:90:4c:eb:6a:07:71:fa:
f3:88:1d:69:91:d5:27:4f:44:ee:07:20:2c:a6:e7:04:9d:91:
78:54:7b:72:c6:b2:0a:53:74:2c:81:17:25:dd:4c:e5:6f:a2:
aa:f8:1e:3a:ed:6b:87:2e:fd:e6:2e:39:73:f2:d3:17:3d:d4:
b1:ba:c4:61:db:ed:3f:ea:7a:f6:bc:73:d1:7c:8c:44:b6:1b:
34:66:a6:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:44:45 2024 by rpki-client on console-fra.rpki-client.org