Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/xHHvkKE-zp50EAgcu8KqgYORezQ.roa
File: xHHvkKE-zp50EAgcu8KqgYORezQ.roa (raw, json)
Hash identifier: HsZjPTwYboLt6qxIkDu+KNHfa36ZE0OUtQ6qkh8oQAo=
Subject key identifier: C4:71:EF:90:A1:3E:CE:9E:74:10:08:1C:BB:C2:AA:81:83:91:7B:34
Certificate issuer: /CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Certificate serial: 0190BB1DB54BE80415F7944F9309019FE405
Authority key identifier: B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/xHHvkKE-zp50EAgcu8KqgYORezQ.roa
Signing time: Tue 16 Jul 2024 10:36:44 +0000
ROA not before: Tue 16 Jul 2024 10:36:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 2a14:1cc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:1d:b5:4b:e8:04:15:f7:94:4f:93:09:01:9f:e4:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31c4ce663e1ec245e747cd846f1a69ddb834b3b
Validity
Not Before: Jul 16 10:36:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c471ef90a13ece9e7410081cbbc2aa8183917b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:d6:d4:41:5e:5b:af:7f:34:c6:0f:7a:9f:80:
a3:aa:f9:7c:1b:4f:3f:45:71:89:20:34:d5:df:1b:
0e:99:09:9a:10:5a:02:8a:f1:8c:8f:8b:b0:28:65:
75:cd:90:f0:f6:52:f2:c4:96:3f:17:2c:94:46:f0:
15:27:f3:82:48:bd:c4:ac:2f:cb:1c:b3:8d:85:a9:
28:fd:52:c4:49:55:ec:06:7d:05:40:d4:31:dc:9e:
e3:8a:0a:f7:6a:d5:b5:60:0a:88:88:55:91:ed:27:
f2:b6:e0:20:ae:f9:98:9b:0d:82:ed:fe:00:4f:81:
6e:43:92:08:9d:f0:b4:79:ba:f9:94:79:ee:50:18:
a1:2a:49:5e:5e:57:4e:25:ee:0a:92:71:d5:cc:fe:
fc:16:c9:32:d4:61:82:0b:e1:73:c8:12:f9:42:34:
39:c9:7e:54:cd:17:29:e9:48:23:a3:f9:5e:01:32:
9b:86:13:05:01:b9:6c:e5:24:eb:e3:73:64:4f:71:
50:ae:5e:a6:76:15:03:e0:c0:e9:c2:ce:d4:ee:b9:
03:f6:28:d2:29:62:bd:21:b7:da:ec:ca:a7:9a:83:
b7:8f:fe:67:65:40:e4:c4:b8:81:80:47:e9:fc:e1:
07:c5:47:48:f7:93:21:c4:cb:ed:2f:be:09:50:bf:
89:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:71:EF:90:A1:3E:CE:9E:74:10:08:1C:BB:C2:AA:81:83:91:7B:34
X509v3 Authority Key Identifier:
keyid:B3:1C:4C:E6:63:E1:EC:24:5E:74:7C:D8:46:F1:A6:9D:DB:83:4B:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxxM5mPh7CRedHzYRvGmnduDSzs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/xHHvkKE-zp50EAgcu8KqgYORezQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/84d476-3233-4131-8ffc-465adc2959f2/1/sxxM5mPh7CRedHzYRvGmnduDSzs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1cc0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:23:a1:bc:94:21:43:3c:be:62:9e:76:a3:d0:08:bc:a1:c6:
84:6f:c4:75:d8:85:3d:be:bc:fc:8e:f5:0c:11:3f:bf:c5:c1:
6c:e1:87:4b:c9:70:27:e3:74:d1:42:7c:3b:7d:a9:2d:6c:21:
fc:ac:e6:35:07:e9:23:48:70:6c:16:3c:28:06:8c:a2:1b:50:
ce:a8:e3:27:11:a7:60:53:fd:31:d1:3f:6d:9c:31:2e:80:83:
35:87:fa:56:73:32:20:38:6b:84:75:29:12:04:ed:24:0d:aa:
cb:de:14:29:0f:91:a6:68:ed:44:eb:c5:17:a2:97:a6:19:28:
1c:5a:be:58:f5:b3:db:b4:4c:43:25:3c:b1:9a:bf:fe:c3:22:
2b:64:30:82:f5:ca:e3:1e:f6:d7:df:1e:18:80:ac:8d:a5:9d:
17:d1:7c:e6:81:70:62:29:5a:c6:17:29:7f:30:55:ae:66:fb:
bb:34:79:12:bb:76:46:43:4f:e1:5f:ec:ce:c7:cb:d6:af:1a:
c7:62:b8:f8:a4:94:e1:f1:ad:51:be:65:fb:59:22:cd:a0:81:
42:42:fa:e6:c3:6b:06:3d:49:cc:8b:2a:d0:c8:b5:1c:0e:cd:
8f:46:75:ff:2c:2a:64:b8:0a:c7:50:b5:04:12:90:66:25:56:
4c:e4:86:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:44:33 2024 by rpki-client on console-fra.rpki-client.org