Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/hV04wT07zkA5APfugBkbGH-6Ppk.roa
File: hV04wT07zkA5APfugBkbGH-6Ppk.roa (raw, json)
Hash identifier: Ol8eJS42q9ziZMKKGl//v7ORNgQ1B4KXZQ9loTHFbjs=
Subject key identifier: 85:5D:38:C1:3D:3B:CE:40:39:00:F7:EE:80:19:1B:18:7F:BA:3E:99
Certificate issuer: /CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Certificate serial: 018CC86F310EB764F4A7308F1F5E51BC17E9
Authority key identifier: 6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/hV04wT07zkA5APfugBkbGH-6Ppk.roa
Signing time: Tue 02 Jan 2024 04:29:39 +0000
ROA not before: Tue 02 Jan 2024 04:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 134521
IP address blocks: 2a05:e580:fc00::/40 maxlen: 40
2a05:e580:fb00::/40 maxlen: 40
2a05:e580:fd00::/40 maxlen: 40
2a05:e580:fe00::/40 maxlen: 40
2a05:e580:ff00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6f:31:0e:b7:64:f4:a7:30:8f:1f:5e:51:bc:17:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6efa8c0fe62ec54accbde35c60bd8ad4b9014ff7
Validity
Not Before: Jan 2 04:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=855d38c13d3bce403900f7ee80191b187fba3e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d4:e1:fb:ac:91:f8:25:71:29:e2:d2:e7:e5:
2f:2f:a9:81:a1:57:58:72:f0:95:cc:3e:d6:fe:9c:
c7:3a:79:77:7d:f3:2b:0e:7c:2f:22:17:bf:54:d2:
2c:a1:9d:2f:8e:f2:c0:da:d9:87:f0:7a:d7:aa:61:
f7:dd:32:c5:1d:8a:11:91:7c:f7:55:d0:69:80:86:
33:39:85:61:a7:51:37:ef:2c:5f:d5:4f:4e:2b:a7:
96:9d:e7:b0:0a:7b:ce:ea:be:bd:9e:80:a1:a2:d9:
3e:5a:22:db:af:a5:bf:c9:88:00:b8:f0:9f:ff:1d:
87:8f:9c:f8:1a:c4:0d:30:74:ac:fc:ce:cf:83:e4:
12:47:3d:67:df:39:3b:da:df:e0:2e:28:fa:f0:73:
f7:8e:3f:ac:a2:8e:12:d5:48:99:52:c5:1c:50:5f:
9d:53:18:3f:48:ea:c8:10:4b:f9:e0:f0:68:3e:32:
21:c2:87:d0:11:8c:99:72:96:2b:13:4e:99:b8:d8:
af:ee:ec:13:9c:e3:a2:b2:72:4d:01:03:30:38:48:
d5:34:a7:8f:df:85:91:c7:e7:17:64:d1:46:9e:7e:
93:a0:a6:0a:f1:3c:be:b4:8a:f5:56:55:39:90:a2:
0d:e4:2e:5e:95:f3:08:28:2f:3c:87:7c:a6:fa:24:
5f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:5D:38:C1:3D:3B:CE:40:39:00:F7:EE:80:19:1B:18:7F:BA:3E:99
X509v3 Authority Key Identifier:
keyid:6E:FA:8C:0F:E6:2E:C5:4A:CC:BD:E3:5C:60:BD:8A:D4:B9:01:4F:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvqMD-YuxUrMveNcYL2K1LkBT_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/hV04wT07zkA5APfugBkbGH-6Ppk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/6c7b22-b65f-4f37-a40e-a9917cc15e0a/1/bvqMD-YuxUrMveNcYL2K1LkBT_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:e580:fb00::-2a05:e580:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
12:2e:2e:1b:86:b9:e0:a2:99:8f:9b:d7:41:ea:80:65:da:8c:
d8:0f:e1:ae:79:f8:d6:6e:7f:08:b8:7a:58:5c:61:08:75:77:
c7:b6:e2:2c:e3:32:26:64:ac:95:d5:2b:c3:3f:85:93:cb:0c:
5c:5b:e0:ea:65:55:b8:92:1c:74:0a:15:08:d4:d2:76:00:a8:
72:ae:95:99:e8:ff:44:dc:28:0e:e0:04:20:e5:ed:ed:1b:5d:
27:65:f8:db:f8:ad:57:6e:22:c6:70:2e:1a:14:04:9d:32:42:
65:98:1a:70:7e:2f:6a:4f:a4:16:9d:fd:9e:44:4b:07:76:e2:
9a:46:ad:e1:b8:a1:a1:ff:7b:36:c9:f2:9d:ac:2d:47:65:92:
f7:79:d3:4a:7a:f6:d1:f3:bd:bd:ca:b9:88:9a:0e:b6:d7:f7:
4b:b8:76:5f:ae:7c:69:cd:f1:e7:c2:f5:22:ba:16:e6:95:63:
d0:92:c8:3a:f6:9c:b5:35:e1:74:ce:d7:d8:42:eb:0a:d3:7c:
d8:71:d8:33:f7:c3:a1:9a:f7:04:a4:a0:2e:2b:db:b6:02:76:
c4:40:07:7a:f5:40:f3:93:16:77:9e:01:ca:0c:af:a8:7d:e5:
50:34:20:36:1d:a3:d4:b2:4e:a6:21:f5:4e:67:6b:96:3d:f3:
df:16:98:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:24:31 2024 by rpki-client on console-ams.rpki-client.org