Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/HDu2mJL-YDT9ZV0wkpQV2RfqZDg.roa
File: HDu2mJL-YDT9ZV0wkpQV2RfqZDg.roa (raw, json)
Hash identifier: HDQUzcdCYIColoBhhQkJn1+jbkiGsaZoNcXY6UT+GX4=
Subject key identifier: 1C:3B:B6:98:92:FE:60:34:FD:65:5D:30:92:94:15:D9:17:EA:64:38
Certificate issuer: /CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Certificate serial: 0190C55D74E40A6D593F46391193AAA54CAF
Authority key identifier: C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/HDu2mJL-YDT9ZV0wkpQV2RfqZDg.roa
Signing time: Thu 18 Jul 2024 10:22:34 +0000
ROA not before: Thu 18 Jul 2024 10:22:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198923
IP address blocks: 2a07:2486:ef0::/44 maxlen: 44
2a07:2486:ef2::/48 maxlen: 48
2a07:2486:ef3::/48 maxlen: 48
2a07:2486:ef4::/48 maxlen: 48
2a07:2486:fd0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:c5:5d:74:e4:0a:6d:59:3f:46:39:11:93:aa:a5:4c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c236e8c216f05a9d9e0327f1222bf12198aba5da
Validity
Not Before: Jul 18 10:22:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1c3bb69892fe6034fd655d30929415d917ea6438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6e:eb:81:42:a2:56:ad:17:64:3b:12:c7:c4:
a0:d5:3d:ad:2e:a0:01:1b:e0:c8:f3:26:04:f3:c0:
90:f6:4d:f6:fe:77:84:f5:b6:6a:1e:e9:91:c6:89:
18:2a:fd:74:23:a7:87:72:c1:12:23:f2:38:4d:3b:
3a:47:8f:c7:93:fa:5b:0d:87:d6:44:74:98:2e:36:
a7:b3:88:69:9c:d6:29:91:d0:d2:b2:2b:48:e6:93:
d8:d8:35:0f:c5:4b:00:f5:be:bf:da:bb:6e:0e:e8:
1e:0c:42:62:92:e3:e1:69:87:dc:aa:41:8d:bc:45:
aa:9a:38:b4:eb:55:4f:77:58:d8:8b:dd:8d:67:91:
6b:9f:ee:56:6f:aa:8f:9c:57:87:df:ca:bc:68:7f:
ec:9e:72:35:0b:a8:3c:56:06:8a:ec:af:a9:e4:fc:
cb:3b:fb:c6:be:8f:02:46:ca:ea:1b:ce:10:88:dd:
70:13:70:af:49:90:26:f4:86:f2:68:aa:38:87:d1:
82:f3:95:ba:f5:a1:db:bf:36:4d:ee:12:10:83:2a:
5a:8b:bf:e4:f5:49:8b:28:41:9e:85:44:c7:67:0b:
ff:c6:8b:98:ee:da:9d:b2:86:a5:ca:42:0f:e6:cc:
70:ed:d2:18:bf:98:d4:21:e2:ab:7d:5f:13:25:b2:
3a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3B:B6:98:92:FE:60:34:FD:65:5D:30:92:94:15:D9:17:EA:64:38
X509v3 Authority Key Identifier:
keyid:C2:36:E8:C2:16:F0:5A:9D:9E:03:27:F1:22:2B:F1:21:98:AB:A5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wjbowhbwWp2eAyfxIivxIZirpdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/HDu2mJL-YDT9ZV0wkpQV2RfqZDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/2a413e-8974-4dc7-9ce8-384ffce77f52/1/wjbowhbwWp2eAyfxIivxIZirpdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:2486:ef0::/44
2a07:2486:fd0::/44
Signature Algorithm: sha256WithRSAEncryption
bc:aa:24:7d:90:01:8f:bf:c0:0b:17:44:7a:47:ff:06:74:32:
97:1d:ef:3b:b0:88:a6:fc:19:1a:e0:8d:03:e6:46:de:7a:a7:
95:0c:aa:ac:ed:7d:d0:17:75:b8:07:79:62:a2:5e:35:66:26:
ae:50:49:04:83:f1:75:45:66:f7:56:29:ae:a4:b6:17:5e:3d:
36:e7:5a:49:56:1c:5c:e6:c1:48:9f:c0:a1:e7:76:90:6d:f3:
2f:a5:ae:58:8d:52:89:02:3c:80:35:e3:94:91:7b:2a:3f:a0:
43:69:02:22:00:69:83:c0:15:dc:85:4f:85:ae:df:cd:32:81:
36:77:08:91:01:80:44:17:ce:53:9e:05:14:80:8d:61:3f:21:
5b:8c:e3:a9:07:71:eb:9f:fd:4b:ba:65:8b:02:0d:b5:20:cd:
7c:7e:71:7e:b6:81:91:b4:e5:75:d2:ce:5f:94:e4:f3:94:26:
59:0a:78:68:dc:0d:2b:4c:5f:30:4a:68:d7:d2:2b:11:68:6a:
3d:e7:02:ba:5d:d8:8f:cf:7b:b5:f1:06:1c:d1:39:3d:9b:f6:
a5:5e:de:83:09:58:e2:3d:fc:98:4d:04:ed:ec:c2:5d:06:a3:
22:9b:34:aa:9c:11:6f:4f:91:2d:09:52:c3:4f:9a:7c:9a:e5:
4a:09:51:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:43:06 2024 by rpki-client on console-fra.rpki-client.org