Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HfGZWgQYLbnmHZAhLYDw3NPc0Z8.roa
File: HfGZWgQYLbnmHZAhLYDw3NPc0Z8.roa (raw, json)
Hash identifier: 82YnQzqSlvTyM3+glh7U36yexQ9eIfAkqYLFh+bX5WY=
Subject key identifier: 1D:F1:99:5A:04:18:2D:B9:E6:1D:90:21:2D:80:F0:DC:D3:DC:D1:9F
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018D1E0AAB7BC19D835B5B5BF809E4B5382F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HfGZWgQYLbnmHZAhLYDw3NPc0Z8.roa
Signing time: Thu 18 Jan 2024 19:27:12 +0000
ROA not before: Thu 18 Jan 2024 19:27:12 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215849
IP address blocks: 2a0e:b107:27f0::/46 maxlen: 48
2a0e:b107:2830::/46 maxlen: 48
2a0e:b107:2834::/46 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:1e:0a:ab:7b:c1:9d:83:5b:5b:5b:f8:09:e4:b5:38:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 18 19:27:12 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1df1995a04182db9e61d90212d80f0dcd3dcd19f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:55:70:af:8e:80:78:ff:a5:5b:28:74:b9:01:
6e:c0:a5:cf:04:d5:97:54:54:4c:e0:58:c1:c1:8c:
49:08:8a:c8:f1:02:a2:50:cf:e7:3a:01:ad:ad:9b:
80:08:d3:bf:ea:a2:a3:e2:79:2b:87:3b:f8:c7:45:
ae:6f:d9:04:58:0c:f5:1d:17:31:4c:44:82:c1:4b:
fe:b4:1c:ca:78:ec:a8:c0:43:e9:58:aa:07:59:4a:
c0:21:76:70:05:82:37:e0:10:c1:b1:3b:26:67:fb:
02:28:7a:88:b7:f6:c3:30:fb:20:95:61:5a:1a:50:
da:1d:9e:b6:55:8a:92:fa:c2:11:3f:7e:ae:43:ed:
60:81:c3:d6:53:9c:1c:fa:be:29:d7:16:fd:5b:9f:
0e:5e:64:d2:56:35:83:45:72:de:49:37:9d:4c:ab:
7e:0a:69:d1:b7:37:43:44:fb:b0:78:5d:e6:e9:2e:
0c:3f:15:d0:cb:07:89:5f:4e:49:cc:b8:2e:19:a0:
0e:14:2c:96:1d:a3:3c:83:b9:a8:71:2c:54:7d:d2:
79:bc:2c:fe:4f:bd:e1:b4:83:8a:a7:c8:25:a3:d5:
4e:41:34:79:2d:b1:c3:68:12:fc:90:e6:81:18:f2:
7c:87:3b:c6:5a:8a:47:1e:11:2a:60:5f:27:bf:50:
14:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:F1:99:5A:04:18:2D:B9:E6:1D:90:21:2D:80:F0:DC:D3:DC:D1:9F
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HfGZWgQYLbnmHZAhLYDw3NPc0Z8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:27f0::/46
2a0e:b107:2830::/45
Signature Algorithm: sha256WithRSAEncryption
87:25:42:fe:65:9c:5c:a0:ad:03:b3:15:5b:98:4f:7d:ca:5e:
ff:43:30:2b:ff:a2:fa:4f:9c:ab:e2:e9:3d:83:1d:34:bf:81:
0a:cd:5d:39:07:06:fe:ad:35:3b:a3:6b:37:d4:cc:2d:61:a5:
4c:ba:e1:4f:80:d6:40:ee:bb:5a:1e:dd:7f:9b:ed:ab:a5:11:
b7:f4:91:e8:81:6a:bb:5d:32:68:34:4a:9f:0a:ad:a1:5d:13:
eb:5f:17:55:93:29:5b:ea:6e:63:16:a4:3d:59:98:fe:20:a1:
4f:75:35:a4:6a:c4:ac:22:1c:f1:cd:53:70:54:93:d4:2e:1e:
29:f7:be:ab:bd:8a:fd:75:78:de:e7:e4:3d:1c:b5:a5:2a:03:
ae:76:19:5f:32:58:0b:08:8a:00:e4:40:f2:c5:83:db:aa:ce:
a5:99:ab:94:31:aa:24:54:73:1c:0b:b1:be:a7:0f:9c:86:56:
cf:9b:ac:ad:1b:84:da:05:e5:d0:30:74:6f:16:1d:18:e2:ea:
7e:6e:bd:09:d3:ee:13:b1:f8:ec:fa:ba:7e:3f:f7:eb:bd:ec:
46:cc:82:d4:27:50:54:2a:07:1a:58:fb:8d:57:d0:46:e7:b9:
39:1c:3e:32:38:32:d7:07:36:cc:4d:54:38:a5:5a:03:19:6f:
69:e9:b7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:37:04 2024 by rpki-client on console-fra.rpki-client.org