Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s4_7-1SBJmjgCQEisC_Hun_bodA.roa
File: s4_7-1SBJmjgCQEisC_Hun_bodA.roa (raw, json)
Hash identifier: o/jQvwanb22It/aDxjLaSGUwByqpKimxJtKWC71tKeg=
Subject key identifier: B3:8F:FB:FB:54:81:26:68:E0:09:01:22:B0:2F:C7:BA:7F:DB:A1:D0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CC9BD2B87421956590032E49DD9A943DC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s4_7-1SBJmjgCQEisC_Hun_bodA.roa
Signing time: Tue 02 Jan 2024 10:34:27 +0000
ROA not before: Tue 02 Jan 2024 10:34:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210842
IP address blocks: 2a0e:b107:1600::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bd:2b:87:42:19:56:59:00:32:e4:9d:d9:a9:43:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 10:34:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b38ffbfb54812668e0090122b02fc7ba7fdba1d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6a:55:fc:9c:e9:92:06:68:ff:4b:f8:24:64:
c7:f2:d1:57:c8:0e:65:e1:52:48:31:25:2a:e6:a9:
fa:a9:b0:07:18:98:b6:bf:24:b1:2d:08:1b:40:fe:
1a:0f:da:dc:c0:07:4a:48:ee:e4:2d:3b:78:22:61:
dc:a6:57:44:b9:c3:bd:ea:6e:88:00:90:9a:7a:b5:
ca:2c:16:cb:12:fe:69:15:cc:e5:c3:b0:4f:00:2e:
a9:e4:67:9c:ee:df:59:ee:d9:20:07:bb:a7:1c:3c:
e7:c2:f3:8c:88:b7:f3:ca:05:42:48:88:f1:9f:8d:
ca:b2:24:20:c6:47:c3:a3:0b:9b:d0:f6:4f:33:85:
4c:37:4e:0c:2c:cd:89:a8:13:4d:d7:24:c5:0f:5e:
42:93:ff:d7:fb:c5:0b:8b:60:59:75:e6:9b:ad:73:
1a:6d:93:d3:48:81:0a:ad:a6:a8:a8:a4:bb:cf:7a:
85:b4:43:dc:ff:0f:46:0a:04:ea:39:45:ba:ab:b7:
3e:4b:e0:88:8a:ae:99:e4:e9:3c:a7:d3:4f:d4:96:
09:b3:e6:e5:88:73:af:1b:1b:44:fe:fc:54:3f:1c:
11:94:2e:7d:d8:d7:cb:18:a2:26:6f:b1:22:50:00:
94:6b:d1:64:34:f2:0e:15:58:b2:da:d2:ce:7c:1c:
8e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8F:FB:FB:54:81:26:68:E0:09:01:22:B0:2F:C7:BA:7F:DB:A1:D0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/s4_7-1SBJmjgCQEisC_Hun_bodA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:1600::/44
Signature Algorithm: sha256WithRSAEncryption
8a:d0:c8:8b:5d:24:31:5e:6e:e3:e8:95:20:d5:19:44:7e:80:
e6:a4:64:86:48:4e:1d:ea:7d:80:b9:2a:15:9e:15:61:43:4a:
68:24:6e:a4:ae:04:63:53:89:ff:b5:ee:30:07:e7:f6:10:c2:
f1:43:60:40:09:4a:ad:57:88:bb:7d:5d:97:a4:df:b7:ea:f3:
a5:af:ca:2c:98:a8:62:4a:25:d9:d9:ae:b9:1c:a7:2c:73:45:
9f:26:30:a5:97:2c:37:4a:47:73:b1:d3:2e:5f:6f:70:7a:23:
32:a4:43:37:ca:d1:d4:e4:a8:d8:ef:c7:ba:ea:8a:13:8f:32:
7d:4a:41:08:ec:5a:ec:46:98:07:ad:d1:c7:ac:b1:95:4c:76:
2a:4e:b0:4a:49:dd:ea:1a:4e:4c:94:d9:de:71:a3:90:ed:f2:
37:dd:42:5c:be:39:88:11:0a:47:6e:0f:96:dd:94:2b:fc:48:
66:85:6b:ab:f8:3c:f4:86:f5:96:60:ab:f4:16:97:a0:4d:ad:
8e:f4:70:7f:f0:6b:bd:ce:5e:87:18:c5:4f:f1:14:ad:4f:53:
a4:ca:1c:dd:01:6e:b9:e4:e7:7d:07:bb:7b:b8:05:44:1a:d4:
cd:65:db:bd:7f:d4:af:78:8d:ef:e3:92:7b:bb:2f:2e:f8:70:
3f:e3:02:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 02:20:42 2024 by rpki-client on console-fra.rpki-client.org