Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/HENDVzHWete4UTkP5d-58umtIZY.roa
File: HENDVzHWete4UTkP5d-58umtIZY.roa (raw, json)
Hash identifier: +owUQRC5cWM+lueLCqhgH9a/ttCIgCDV2ShJCMRZuII=
Subject key identifier: 1C:43:43:57:31:D6:7A:D7:B8:51:39:0F:E5:DF:B9:F2:E9:AD:21:96
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 01932683C4341737F05311E4DEDEF95B88B3
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/HENDVzHWete4UTkP5d-58umtIZY.roa
Signing time: Wed 13 Nov 2024 17:13:09 +0000
ROA not before: Wed 13 Nov 2024 17:13:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42375
IP address blocks: 2a06:7840::/29 maxlen: 29
2a0b:2a80::/29 maxlen: 29
2a0d:4440::/29 maxlen: 29
2a0f:f02::/32 maxlen: 32
2a0f:f03::/32 maxlen: 32
2a0f:f04::/30 maxlen: 30
2a0f:59c0::/29 maxlen: 29
2a0f:a380::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:26:83:c4:34:17:37:f0:53:11:e4:de:de:f9:5b:88:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Nov 13 17:13:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c43435731d67ad7b851390fe5dfb9f2e9ad2196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:1a:a3:1b:aa:b1:b1:11:35:5e:4b:46:6b:
4c:1c:b8:02:c5:60:66:f5:6c:1b:41:b6:03:15:ac:
fe:08:8e:6d:27:d5:d9:3a:c1:51:0f:5b:a5:47:cb:
0c:bb:7c:d9:50:69:5f:79:05:ac:58:1a:f1:91:e5:
bf:25:87:89:f4:ba:b0:5d:a9:1b:a5:4b:46:3e:40:
0f:78:97:3b:b1:30:0f:24:cd:48:7f:5b:ff:00:0d:
93:8b:55:b5:b5:99:f9:ae:51:a7:72:6e:31:f1:29:
91:71:26:2a:1e:66:f2:de:67:bd:92:05:e8:67:6f:
33:29:9b:27:03:ba:32:f8:7a:ca:c2:d9:3f:a8:79:
29:7b:1f:02:86:4f:48:5f:fb:f7:49:c5:58:cc:d5:
31:da:06:0d:76:e2:c1:06:f2:95:f5:23:ac:a0:a8:
ec:f0:22:b3:0d:8c:8e:01:9e:8a:61:77:b7:8e:89:
a3:57:ff:eb:33:ae:c7:1a:d6:f5:c2:19:a3:6f:3d:
57:2e:76:3b:2c:b3:c0:30:d4:4b:a7:52:45:13:98:
a0:0a:5a:a6:a0:59:67:5a:33:3f:63:46:18:be:6b:
ad:39:c2:48:6d:fc:cf:17:95:7b:37:08:74:3b:47:
c3:84:f8:1e:eb:05:8b:3c:ca:cf:5a:6a:97:c5:de:
9d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:43:43:57:31:D6:7A:D7:B8:51:39:0F:E5:DF:B9:F2:E9:AD:21:96
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/HENDVzHWete4UTkP5d-58umtIZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:7840::/29
2a0b:2a80::/29
2a0d:4440::/29
2a0f:f02::-2a0f:f07:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:59c0::/29
2a0f:a380::/29
Signature Algorithm: sha256WithRSAEncryption
6d:5b:1c:01:c0:ee:99:7e:b0:d3:ae:96:59:f1:61:eb:84:63:
b9:ae:58:01:d7:ee:94:2f:a9:21:b3:ba:1a:d4:53:a4:cb:f5:
97:57:df:84:17:89:33:e7:4b:04:12:4c:9c:07:27:85:36:f1:
30:a2:46:72:cb:8b:b2:e1:e8:63:25:d9:b3:84:fb:78:24:d5:
c9:d4:c4:ce:1f:34:94:79:c0:6c:a8:2b:15:11:97:6a:4e:4b:
01:19:ee:6c:08:cc:ef:c4:cb:e5:38:2b:72:d2:b8:50:b2:d3:
be:3d:34:28:65:1d:98:9f:aa:14:1a:8f:5d:ea:b7:b6:d5:92:
f2:86:7e:1c:05:58:42:b5:03:66:8f:f4:60:35:ea:50:5c:ac:
8b:ec:9f:5f:8d:8a:05:3f:46:f7:4b:fd:4f:52:0f:fa:f4:03:
66:01:a3:91:f5:dc:e2:7d:8f:36:ff:f5:4b:8f:ad:21:25:9d:
8c:f7:bb:f3:a8:65:d3:22:ec:36:ad:69:65:f2:5e:5e:43:aa:
a5:80:47:88:c7:ce:19:f6:c4:24:a3:5b:4e:52:06:f9:de:cb:
5e:f2:19:9f:cf:a6:5a:22:f5:bc:38:e0:e0:3a:8b:fe:4a:d8:
90:29:35:1b:2d:e4:c4:37:45:47:cb:a0:62:f7:96:ee:ce:64:
01:45:2f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:45:45 2024 by rpki-client on console-ams.rpki-client.org