Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hpo0L11O810ywNFLIWY-HWqVrYE.roa
File: hpo0L11O810ywNFLIWY-HWqVrYE.roa (raw, json)
Hash identifier: 3E0DWCdoQpQCvcGP2eRVa5iJo9vuGClRkKZM+e4ncYQ=
Subject key identifier: 86:9A:34:2F:5D:4E:F3:5D:32:C0:D1:4B:21:66:3E:1D:6A:95:AD:81
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018EBD47F395DF8557466D5468E3DCAE6BAD
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hpo0L11O810ywNFLIWY-HWqVrYE.roa
Signing time: Mon 08 Apr 2024 10:36:32 +0000
ROA not before: Mon 08 Apr 2024 10:36:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203345
IP address blocks: 2a0e:b107:1a10::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 00:09:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:bd:47:f3:95:df:85:57:46:6d:54:68:e3:dc:ae:6b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Apr 8 10:36:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=869a342f5d4ef35d32c0d14b21663e1d6a95ad81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9f:69:b0:f3:fe:e5:8c:b0:5f:34:68:a6:ac:
91:53:df:5a:61:41:b3:d6:46:90:7e:e4:b6:46:8b:
14:71:a6:6a:85:d1:98:91:3c:97:17:12:24:42:03:
27:09:e8:5a:8d:58:a4:77:13:cb:02:12:54:11:98:
7b:fd:3d:4a:ce:ca:6d:7e:16:c1:18:7d:fc:e4:74:
4c:20:0f:b5:e1:3b:a9:95:ae:02:d9:4c:fb:aa:8c:
81:aa:cc:e7:da:08:ab:56:50:a8:98:21:37:45:f5:
d4:9b:55:8d:1a:33:68:bb:3a:3c:7d:c8:ae:b0:94:
ea:0d:f6:da:ef:1d:a7:c8:17:f4:d8:56:86:91:44:
39:4f:d9:93:2a:2b:29:d8:df:e0:d9:68:2c:e6:4a:
fb:06:55:ed:0b:b8:a9:79:98:c6:dd:52:52:8e:18:
2b:3d:ca:70:fe:7f:cd:48:ef:d1:12:f0:68:4c:b4:
4c:04:ad:4b:5b:69:a8:a2:93:2f:b8:72:55:d5:a9:
49:9a:2e:32:20:d9:83:a0:fd:ae:a7:d5:12:fa:e9:
33:3c:ce:2b:de:93:23:e6:5c:a8:40:9f:dc:fa:4d:
46:46:e5:77:e3:c7:58:6f:25:09:1e:8c:b1:db:6f:
26:db:23:1a:f7:d5:f1:0a:7a:4e:4a:0d:20:9a:66:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:9A:34:2F:5D:4E:F3:5D:32:C0:D1:4B:21:66:3E:1D:6A:95:AD:81
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/hpo0L11O810ywNFLIWY-HWqVrYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1a10::/44
Signature Algorithm: sha256WithRSAEncryption
06:0b:c3:e1:73:da:e1:7e:95:b0:64:74:fd:18:e4:0d:c2:df:
1f:48:01:b0:d4:45:e8:ff:41:17:ce:0a:e5:79:a1:43:b5:ec:
9f:97:fa:81:7b:52:09:aa:38:45:25:bc:4d:3c:ab:da:61:31:
78:68:dd:85:4e:03:ce:d8:c9:e9:04:25:67:94:f2:d9:45:c9:
5a:bd:f8:97:90:b8:6b:a8:48:c8:d9:d4:22:4b:2f:91:9b:be:
ab:93:7a:64:6e:58:bc:d1:28:8f:04:cf:b0:9f:72:a5:17:e5:
9c:1b:a6:5e:82:dc:90:e4:6c:d7:f1:6c:eb:5d:8b:9b:a6:ad:
35:85:b3:e5:7c:aa:8f:2c:8d:56:1a:0d:ed:c2:01:97:14:42:
1f:c2:d2:36:bb:79:2b:9e:19:fe:5b:d0:9f:c3:4a:e5:1c:c5:
04:e1:fa:a1:54:30:46:8a:45:39:7a:a6:02:94:59:4f:54:2c:
47:09:67:24:8a:51:49:04:f7:b2:7a:a7:4a:3b:b6:4c:db:48:
31:24:14:49:9a:95:b6:2b:51:98:3c:d3:1c:40:cf:63:fb:1c:
5d:83:b6:bf:f0:37:6c:89:9c:11:03:9f:d8:fa:12:18:39:17:
c1:a8:b8:0a:16:66:6e:a6:be:c6:30:b1:06:77:da:8a:08:6a:
4a:f1:30:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 03:33:17 2024 by rpki-client on console-ams.rpki-client.org