Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HtVzCFxHEyI4EKeIIbvIVHFzIws.roa
File: HtVzCFxHEyI4EKeIIbvIVHFzIws.roa (raw, json)
Hash identifier: Nc4i7xEm3/i+m9M1B5qyMvxeDHLM9NhTmv71tDd5Qbg=
Subject key identifier: 1E:D5:73:08:5C:47:13:22:38:10:A7:88:21:BB:C8:54:71:73:23:0B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0191B53E46BA2A14FE3AB2BE50B625C22C7A
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HtVzCFxHEyI4EKeIIbvIVHFzIws.roa
Signing time: Tue 03 Sep 2024 00:17:22 +0000
ROA not before: Tue 03 Sep 2024 00:17:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214299
IP address blocks: 2a0e:97c2::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Sep 2024 15:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b5:3e:46:ba:2a:14:fe:3a:b2:be:50:b6:25:c2:2c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 3 00:17:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1ed573085c4713223810a78821bbc8547173230b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:96:f8:3a:9e:26:3f:ab:7f:2f:01:2c:37:
31:64:41:f8:66:6b:85:6e:69:0d:06:17:31:34:70:
9f:e3:f8:93:6d:2d:4b:42:9d:6e:e9:6f:35:5f:f7:
71:32:ab:89:bd:9e:cf:9c:1e:07:a8:8b:c2:a6:a2:
05:a8:1e:0b:31:31:2d:a6:f3:f9:79:e3:ef:f2:4c:
98:61:50:30:33:fa:f6:d7:fb:67:0e:78:ad:d7:e9:
05:f9:75:b5:e0:76:66:b9:63:3e:a5:f5:66:93:9c:
05:c2:79:4f:4f:d7:a8:2f:67:6a:e2:e7:aa:29:d6:
81:da:3b:db:84:01:46:57:7f:31:15:f7:4b:4b:b3:
f9:51:fb:06:53:06:fe:e4:52:fd:7b:72:cf:28:a0:
c2:4d:15:64:be:b7:b2:50:ef:68:d2:14:b0:86:a2:
dc:e9:fd:33:b9:50:e4:d4:4a:ae:48:c9:10:c8:33:
25:ea:55:2a:66:bd:68:4c:87:f3:c3:47:ca:05:a5:
f5:f4:87:f8:22:64:b1:f4:a7:7f:0a:f8:47:03:5f:
15:a6:5d:11:4b:b1:57:9c:71:37:cf:e3:27:ed:65:
eb:ae:fe:95:de:47:73:15:8f:fc:12:66:60:6f:e4:
7f:6b:d6:69:14:83:5c:96:05:80:b1:08:81:20:b6:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:D5:73:08:5C:47:13:22:38:10:A7:88:21:BB:C8:54:71:73:23:0B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/HtVzCFxHEyI4EKeIIbvIVHFzIws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:97c2::/40
Signature Algorithm: sha256WithRSAEncryption
21:34:a0:67:ad:2e:80:9f:c6:b5:dd:f0:fd:21:25:89:ac:4c:
7c:e3:59:61:74:e9:82:33:c3:54:d7:82:88:02:ad:36:07:d7:
3a:b2:1c:93:9f:95:42:3d:a7:20:99:f5:5f:26:ee:af:e4:79:
82:a2:c1:10:23:bb:5f:75:54:0f:38:ce:e7:34:5c:9b:0d:2d:
7b:12:e5:b6:05:15:69:26:56:b1:a9:5c:00:e4:51:4a:82:2a:
65:0b:2e:d3:df:54:b8:40:af:c6:86:8f:fa:6a:6d:90:df:2d:
dc:e5:24:ee:3d:ac:84:e0:cd:dd:a6:43:a7:a3:fe:73:00:7a:
95:8f:b1:8c:95:01:29:27:73:32:67:b4:e4:ca:86:6b:7e:f2:
78:3a:8a:b3:51:ff:62:7c:48:ff:c7:5e:4f:86:49:41:7d:88:
4b:b9:5a:bc:5a:b0:d4:82:26:a5:97:76:1c:22:9e:73:43:dd:
6f:23:36:a8:da:2c:41:66:c3:68:f4:9e:75:ae:9e:3f:4d:b7:
52:d2:e3:c7:99:c9:46:b6:94:5d:97:07:4e:4f:ca:be:39:17:
a4:64:07:26:0e:df:ba:39:62:c7:44:92:e2:1d:8a:28:75:83:
d9:3c:06:eb:c2:55:05:71:46:f7:f6:64:cc:c1:92:6f:3f:2f:
ef:6b:4c:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 22:52:29 2024 by rpki-client on console-fra.rpki-client.org