Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HSCzJlli54Q3oWerCDapHNYogD0.roa
File: HSCzJlli54Q3oWerCDapHNYogD0.roa (raw, json)
Hash identifier: d0uZ5e/O1hQgZVfx8WHQ/ohJpL9zk8Gnv8ew5OijHEg=
Subject key identifier: 1D:20:B3:26:59:62:E7:84:37:A1:67:AB:08:36:A9:1C:D6:28:80:3D
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD059AA3A4B8B0BD270D31B38EDB6C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HSCzJlli54Q3oWerCDapHNYogD0.roa
Signing time: Tue 02 Jan 2024 10:34:17 +0000
ROA not before: Tue 02 Jan 2024 10:34:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203691
IP address blocks: 2a0e:b107:1c0::/48 maxlen: 48
2a0e:b107:1c1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:05:9a:a3:a4:b8:b0:bd:27:0d:31:b3:8e:db:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d20b3265962e78437a167ab0836a91cd628803d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:09:cd:fc:0f:28:85:3a:35:dc:5d:2c:c8:7c:
a4:91:ee:00:2c:a7:05:db:7a:0c:85:ad:57:8a:a1:
06:f8:3b:72:a4:98:a6:10:6f:eb:84:68:86:6a:80:
dc:12:14:d4:71:34:0d:a3:76:80:67:85:f5:a0:5c:
a9:82:6f:4a:a7:a7:ce:40:fa:5e:3a:8e:8b:16:e9:
b5:da:c8:04:e6:b2:03:f1:0a:ff:a7:b6:a9:8e:9d:
c6:9d:22:07:39:63:42:a2:32:9a:a5:60:57:08:1f:
4c:29:08:19:bb:66:5e:85:2b:20:65:99:40:6d:4d:
dd:7a:95:f8:9d:67:df:6b:9a:31:d4:52:76:f6:bf:
4a:65:65:1a:a2:c9:6e:e5:c2:a9:fb:c4:7d:7f:ca:
db:ce:db:e3:c1:ad:7e:c3:2b:ed:c0:2c:d5:d3:6e:
22:71:c7:2a:55:af:d9:91:8f:28:25:75:c8:dd:8d:
9e:a9:4c:dd:68:be:2c:d6:0f:08:99:2f:f9:83:a8:
88:e0:65:20:2f:15:61:53:43:74:f5:18:e5:f2:82:
5e:04:10:d3:a8:5d:49:64:7a:c7:0c:80:30:8e:0d:
bf:79:2e:af:32:d9:ae:46:f8:c7:34:77:8d:06:73:
bf:b9:2d:9d:69:c4:ed:b0:ab:f5:97:85:62:60:af:
51:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:20:B3:26:59:62:E7:84:37:A1:67:AB:08:36:A9:1C:D6:28:80:3D
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HSCzJlli54Q3oWerCDapHNYogD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1c0::/47
Signature Algorithm: sha256WithRSAEncryption
c7:66:de:4c:f7:9a:a9:a7:0b:63:4a:8e:57:a9:62:06:9d:4d:
70:82:f2:a0:2b:cb:c0:97:95:06:10:04:0c:7a:7a:c5:bf:c3:
49:7b:bf:65:46:47:9e:f0:af:70:3b:00:c8:bf:2e:f6:2f:2f:
0e:0a:3c:e9:85:89:ef:8c:2e:fa:45:6d:e2:45:37:e9:1d:88:
54:12:c8:bd:b6:47:01:57:a6:19:a4:7d:dd:02:39:05:eb:eb:
f2:77:65:71:3e:63:d1:25:c3:9f:34:10:14:61:78:a0:37:10:
87:31:6e:c6:04:5c:77:52:2f:92:13:8b:b3:8e:20:9e:dc:33:
d2:a5:ce:70:0d:04:ce:7d:31:fa:f3:9b:b5:bf:b8:3d:74:48:
32:89:81:fe:fe:bd:c0:4a:d9:33:8c:37:9e:d1:17:7f:79:7b:
58:b1:f0:ea:07:68:1b:72:37:dd:3e:25:de:75:84:a0:06:9a:
da:76:ba:75:4a:a2:f3:3c:0c:36:fb:7f:75:62:de:42:5f:a3:
dd:60:da:ed:d4:11:9f:f9:ef:70:f8:bd:06:07:ea:40:db:ce:
73:af:72:fe:f4:f3:10:1e:aa:92:cd:d3:4f:22:69:2b:94:72:
a0:f8:10:f4:3f:71:f2:07:50:6f:bc:93:65:8f:5c:d3:a2:eb:
4d:10:0c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:24:30 2024 by rpki-client on console-fra.rpki-client.org