Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HQNvtoRO25_X3WWfDtb6nbaWVjM.roa
File: HQNvtoRO25_X3WWfDtb6nbaWVjM.roa (raw, json)
Hash identifier: 2OZyphXCNGaWUateqHfEEHIfZFf0H8Sx/sojgrdj9t8=
Subject key identifier: 1D:03:6F:B6:84:4E:DB:9F:D7:DD:65:9F:0E:D6:FA:9D:B6:96:56:33
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018E3EA9E66B8347F2926FF8EC9ABF96409D
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HQNvtoRO25_X3WWfDtb6nbaWVjM.roa
Signing time: Thu 14 Mar 2024 20:31:45 +0000
ROA not before: Thu 14 Mar 2024 20:31:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211688
IP address blocks: 2a0e:97c0:240::/44 maxlen: 48
2a0e:97c1:110::/44 maxlen: 48
2a10:ccc0:120::/44 maxlen: 48
2a10:ccc0:130::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:3e:a9:e6:6b:83:47:f2:92:6f:f8:ec:9a:bf:96:40:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Mar 14 20:31:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d036fb6844edb9fd7dd659f0ed6fa9db6965633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:24:53:0e:fd:7e:86:e7:5b:10:a0:eb:64:a2:
fa:c7:30:3a:db:3e:2e:13:9a:54:d2:cd:5b:8f:0c:
e8:49:55:59:bf:37:22:6f:12:4c:fb:42:2f:2c:9b:
10:3a:3c:3a:87:17:94:67:7d:eb:d7:cc:9a:f9:5a:
03:52:45:91:37:96:14:c6:5a:3d:5e:8d:71:d0:de:
4f:d5:49:50:51:c9:88:e7:8b:9e:48:68:c5:fb:69:
b5:5e:2a:d9:82:f3:be:6d:38:17:cc:81:19:ab:97:
7a:e6:2a:66:31:0f:d4:fc:bd:04:2e:cb:d7:c8:23:
4d:81:13:f6:31:46:c9:d7:c3:a8:f5:da:4e:e9:ca:
65:d3:77:e9:25:08:21:01:03:a5:81:dc:8a:aa:c1:
4d:fe:c3:48:28:55:98:98:3f:ce:cd:a5:15:2e:68:
d1:43:30:04:de:db:e8:99:ca:18:af:43:f8:c6:79:
4d:07:64:d4:f0:e6:83:c3:f4:c4:fc:40:dd:2a:0c:
59:fc:23:84:96:b4:87:b9:9e:fd:17:f1:ad:4e:2e:
b9:50:74:cf:c3:c2:ca:0d:7a:29:23:c5:c7:24:6d:
4c:e3:0e:97:7b:9b:01:91:45:6c:62:43:fd:20:ff:
07:be:f8:85:a8:c7:2c:55:b8:d9:23:0e:8b:a6:e2:
b9:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:03:6F:B6:84:4E:DB:9F:D7:DD:65:9F:0E:D6:FA:9D:B6:96:56:33
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HQNvtoRO25_X3WWfDtb6nbaWVjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c0:240::/44
2a0e:97c1:110::/44
2a10:ccc0:120::/43
Signature Algorithm: sha256WithRSAEncryption
10:2a:3a:81:97:23:43:e4:3d:16:1d:6b:31:4e:cb:fc:5f:0f:
26:85:d6:e1:22:37:78:26:fb:84:06:cf:07:6f:d9:c0:e1:94:
03:20:60:08:94:41:17:a6:2c:1a:e8:01:19:ab:cf:2e:f4:06:
06:06:0e:98:b0:4c:fb:2a:93:d4:d9:c0:93:3c:22:72:d4:36:
7f:ef:98:b3:1b:0a:e8:01:61:b1:60:69:1d:fb:e8:28:bf:e8:
2b:05:2e:51:75:d5:ce:8d:4b:76:a1:05:63:e9:d0:e3:95:e3:
e4:ae:f3:f7:14:39:a1:c1:af:0f:39:83:44:c7:43:ea:ba:85:
1e:4f:39:ee:82:17:13:03:03:f9:79:73:72:27:91:0c:c8:89:
9c:fe:d6:3b:a5:a3:82:41:8e:95:fa:6f:ad:4f:01:07:21:e9:
7f:be:0e:d1:5b:d7:58:57:4e:58:6a:36:46:18:bf:ed:91:ad:
56:1d:32:8f:7c:a4:00:55:82:0a:d0:f7:e0:8a:7b:fe:9b:d4:
4e:5b:54:01:34:3a:7c:cd:31:fa:e5:dd:2c:12:49:ac:ac:9e:
c3:a8:11:ef:b0:ce:11:b0:fa:d2:d6:82:30:4d:9a:d4:cf:36:
79:92:c9:2b:1d:5d:26:4a:1b:4e:78:c4:06:39:ca:51:c7:bc:
14:74:42:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:34:59 2024 by rpki-client on console-ams.rpki-client.org