Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HMw4FRUmavaHsD74Y4wcljXhF1I.roa
File: HMw4FRUmavaHsD74Y4wcljXhF1I.roa (raw, json)
Hash identifier: qpOKfamP7nGSu21hpMFkqiBM6qR4vrmttH2crhB0298=
Subject key identifier: 1C:CC:38:15:15:26:6A:F6:87:B0:3E:F8:63:8C:1C:96:35:E1:17:52
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD5714D2EF4E4D9CB69727F5DDB4A9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HMw4FRUmavaHsD74Y4wcljXhF1I.roa
Signing time: Tue 02 Jan 2024 10:34:38 +0000
ROA not before: Tue 02 Jan 2024 10:34:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216353
IP address blocks: 2a0e:97c0:d90::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 09:38:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:57:14:d2:ef:4e:4d:9c:b6:97:27:f5:dd:b4:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ccc381515266af687b03ef8638c1c9635e11752
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:46:96:66:92:a1:b9:6a:28:1b:d2:7c:b9:ed:
ac:87:af:1f:7a:f5:2c:f7:d6:b2:90:cb:9f:3b:62:
1d:ed:94:e5:26:8d:91:83:c6:86:d9:33:67:a5:12:
ab:e4:b8:75:39:67:8a:6c:ea:5e:45:d8:d9:63:da:
87:89:09:44:ec:b8:3d:a6:87:81:13:ad:7c:84:ad:
53:75:39:8f:cf:92:33:0e:4a:4c:0f:68:1c:6b:d1:
6c:a6:48:89:40:1e:d7:33:d2:74:aa:5f:73:5e:d4:
26:e2:a3:8f:ed:19:3d:0f:1f:01:c5:ca:83:b4:25:
0a:6d:cb:c2:83:08:c2:b1:85:91:e8:91:a8:8f:c5:
3b:94:0c:d2:ab:04:8a:b4:cb:da:4c:d4:6a:da:b2:
b4:e3:99:c0:59:fe:65:47:a6:92:1e:db:aa:31:d8:
e7:e0:96:f9:f0:da:bc:a9:7c:c4:67:a4:97:08:51:
b7:36:16:3e:2b:2a:e8:d6:63:57:51:4c:4b:d7:73:
f7:56:18:1e:2b:75:01:51:68:9c:58:76:22:12:fe:
d6:95:c9:01:44:15:c4:a6:7d:09:56:eb:ff:1f:03:
97:92:c1:51:a8:2f:16:26:75:c1:87:77:51:9d:26:
8a:c0:c2:d5:46:5f:ee:ed:50:a0:20:aa:4c:16:cc:
ab:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:CC:38:15:15:26:6A:F6:87:B0:3E:F8:63:8C:1C:96:35:E1:17:52
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HMw4FRUmavaHsD74Y4wcljXhF1I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:d90::/44
Signature Algorithm: sha256WithRSAEncryption
00:e1:f9:53:45:80:5e:82:df:f4:11:bf:0a:12:99:44:e1:0f:
d4:cd:a9:a0:f6:ac:5e:20:68:43:be:1d:5f:a5:1e:3c:34:30:
d9:af:42:64:97:c0:1b:32:c6:df:9e:cf:f2:8c:9e:64:0b:cf:
b8:fb:14:a7:48:e7:21:82:8b:36:3b:5a:c7:9f:69:e2:32:40:
f3:71:8f:ab:53:31:dc:20:92:29:28:8f:6e:7d:c4:f7:9a:bf:
fb:3a:8a:9d:62:7b:3e:a0:9e:49:dc:8b:43:3c:32:0e:aa:96:
b5:72:a2:bc:6d:7a:79:02:05:e2:9a:d0:79:8e:b4:58:54:c6:
c5:2c:0e:0d:56:a4:6b:0c:ee:d1:4d:cb:36:20:a1:f5:22:d8:
b9:cc:71:4a:d6:2f:68:bf:95:4b:66:ac:2a:05:4a:65:fd:14:
d9:25:3a:ba:1b:0c:c0:6e:80:0c:18:7b:b8:2a:78:40:47:9d:
5c:10:65:31:25:49:b3:2f:07:ef:4b:e8:8b:a8:60:0b:c8:bf:
e0:4c:91:09:27:f0:8a:84:b3:c5:77:90:93:e0:17:e2:71:92:
9a:3a:e2:0e:9e:3e:2f:89:78:4e:53:0f:8f:fa:9a:2a:bb:e4:
fb:a5:36:d1:df:bd:ec:ba:03:6d:93:77:41:db:1a:75:f1:7c:
4f:65:1a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:39:03 2024 by rpki-client on console-fra.rpki-client.org