Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HMRUatFvnRnYJH4IO2gE2r_02EU.roa
File: HMRUatFvnRnYJH4IO2gE2r_02EU.roa (raw, json)
Hash identifier: nmDUF1AkyDhouA5OUUwtrXClZHylTWXMVu+7ih6zjCI=
Subject key identifier: 1C:C4:54:6A:D1:6F:9D:19:D8:24:7E:08:3B:68:04:DA:BF:F4:D8:45
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BCEC1CEFC4D8C47E577CAA836E9AE0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HMRUatFvnRnYJH4IO2gE2r_02EU.roa
Signing time: Tue 02 Jan 2024 10:34:10 +0000
ROA not before: Tue 02 Jan 2024 10:34:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199079
IP address blocks: 2a0e:b107:b18::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:ec:1c:ef:c4:d8:c4:7e:57:7c:aa:83:6e:9a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cc4546ad16f9d19d8247e083b6804dabff4d845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:95:bf:5f:61:77:e3:1f:06:70:27:11:c5:50:
ee:01:04:2c:96:f5:57:ae:e1:48:af:3f:c7:47:67:
ef:04:b3:83:f0:c1:92:60:40:47:ef:fb:f7:a6:58:
d3:e6:b3:f9:2c:bf:07:d7:a0:b4:7a:15:2d:71:e7:
7e:72:8a:96:81:2e:d0:2c:06:4a:23:c8:69:eb:d5:
85:d0:d2:ae:3f:00:e9:d1:99:35:b7:d4:c1:f7:2b:
73:33:78:71:60:cd:14:ee:bd:a2:d8:02:a4:8d:5a:
5e:99:f5:20:d8:37:96:e6:63:e9:24:eb:e7:ea:95:
52:df:de:75:87:5b:bc:f5:4e:81:dd:70:7f:4b:09:
91:f7:f6:03:2b:93:ba:86:ed:70:5a:e8:a6:7a:8a:
fb:9a:1b:e4:c6:58:b0:62:0b:fd:ea:c0:58:28:23:
b1:22:7a:2b:37:59:af:bc:31:ba:07:db:47:76:b0:
72:fa:c3:23:00:dc:ef:c5:a7:ab:b6:97:ee:26:bf:
72:4f:86:a8:01:60:ca:9e:47:31:42:5e:95:b1:10:
31:42:2e:ec:9c:01:2f:74:4a:5b:eb:18:a6:16:ff:
57:55:aa:de:03:30:9a:e5:90:3c:61:64:b7:1d:4b:
61:33:90:a0:dc:df:0b:75:80:90:45:be:41:b4:d2:
d9:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:C4:54:6A:D1:6F:9D:19:D8:24:7E:08:3B:68:04:DA:BF:F4:D8:45
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HMRUatFvnRnYJH4IO2gE2r_02EU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:b18::/45
Signature Algorithm: sha256WithRSAEncryption
6e:2a:34:59:46:9d:6f:eb:23:87:3d:17:6e:b3:ce:76:19:ff:
b8:59:76:f7:b9:3e:bb:d8:ce:be:7b:92:cc:c3:a9:0b:14:33:
25:7b:2a:e0:cf:95:2b:40:1a:1f:3c:d1:17:3d:cf:12:8f:ab:
f3:e6:ca:12:be:bc:60:52:a9:25:f7:b0:66:4f:cb:6c:63:45:
f7:45:78:69:48:a9:f5:fb:23:67:3e:2b:b5:fe:e4:d6:45:92:
dc:e1:e0:41:a7:bb:5a:2d:ed:ac:36:6e:49:62:db:b3:7a:62:
df:2d:d6:30:53:ec:de:f3:49:e4:15:83:3c:43:74:b8:9a:79:
28:c9:20:b3:32:c2:dd:24:33:7b:91:c2:42:59:95:8a:d3:ce:
c3:9a:c4:56:7c:2d:19:72:97:c8:24:51:55:f7:fc:d8:25:1b:
4f:b7:1d:ec:30:e7:3b:9d:16:f7:4d:6a:80:9f:f1:c9:53:6a:
fc:db:f7:4f:0a:b7:15:e0:ef:01:25:94:c2:ac:3f:0a:bf:a5:
30:77:90:9d:3a:42:99:93:33:5e:23:d3:db:2e:e1:77:27:9b:
52:a2:85:6a:fd:8e:01:1d:95:5b:7a:f4:38:43:d4:9c:03:41:
38:31:1b:c5:c9:ef:16:a7:9f:fe:fe:44:27:0b:75:08:df:db:
6d:84:3e:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:34:59 2024 by rpki-client on console-ams.rpki-client.org