Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/h-ipp-59hlxPy_xf45JF57BdCz0.roa
File: h-ipp-59hlxPy_xf45JF57BdCz0.roa (raw, json)
Hash identifier: AHgQGE/nRSAD7KYULZr12fVtFioKrapqHTijhuMNAU4=
Subject key identifier: 87:E8:A9:A7:EE:7D:86:5C:4F:CB:FC:5F:E3:92:45:E7:B0:5D:0B:3D
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018CC64A11BB2A69606471E1261183603036
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/h-ipp-59hlxPy_xf45JF57BdCz0.roa
Signing time: Mon 01 Jan 2024 18:29:52 +0000
ROA not before: Mon 01 Jan 2024 18:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216255
IP address blocks: 2a12:bec0:470::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:11:bb:2a:69:60:64:71:e1:26:11:83:60:30:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jan 1 18:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87e8a9a7ee7d865c4fcbfc5fe39245e7b05d0b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b7:b9:d0:70:32:17:4b:25:8e:a0:90:40:cf:
47:8b:e4:1d:1e:7e:04:d5:0d:28:1b:c3:0f:0d:8d:
4e:30:5e:7f:ad:21:08:55:d5:92:e6:e9:ca:83:65:
65:a3:7a:1d:ad:eb:ea:07:86:d8:a2:77:16:c9:93:
be:de:c3:5b:63:1d:c5:7d:3c:c9:76:54:8e:4f:47:
58:6d:b4:ab:db:a1:ba:e5:3e:dc:ea:93:b1:16:01:
91:d3:c8:2f:39:9a:ae:0e:91:b5:06:b3:76:2f:13:
b0:9a:17:34:79:74:42:63:e5:f3:01:06:0f:aa:20:
0b:2d:33:de:ab:91:2d:60:22:4f:50:00:96:ab:40:
bd:89:d1:9a:d4:30:87:95:0f:cf:50:c8:da:e7:98:
6a:62:49:6b:70:19:cd:0a:5a:d6:33:39:1a:8d:ed:
a1:95:75:c9:92:22:1a:20:0b:f0:c8:a1:78:cf:08:
69:25:1b:7e:97:4f:38:2d:18:a6:e6:df:6d:6d:61:
fc:b9:ba:96:ef:e8:09:fe:35:23:27:74:af:42:5b:
01:6c:a0:20:d3:e4:de:b0:69:c4:7b:6f:1d:f6:38:
21:35:b4:ec:81:9c:fa:43:90:73:85:db:9a:ea:e7:
6b:b0:01:e3:4e:12:46:8e:66:b1:0e:65:af:54:be:
cc:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E8:A9:A7:EE:7D:86:5C:4F:CB:FC:5F:E3:92:45:E7:B0:5D:0B:3D
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/h-ipp-59hlxPy_xf45JF57BdCz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:470::/44
Signature Algorithm: sha256WithRSAEncryption
ad:9b:02:c5:44:02:b4:03:33:8e:c9:7b:7e:8b:14:90:5a:19:
1d:b7:02:81:7a:9a:6f:c3:ad:fc:9c:19:ad:f3:89:0b:7b:f2:
2f:87:c4:2b:91:fb:6a:dd:4d:88:b9:a9:14:a9:38:69:38:ef:
27:24:6f:dc:3f:2c:a3:aa:2e:4f:c4:97:e0:2e:5b:a5:34:c9:
f9:31:28:a3:1b:16:ac:b5:07:09:d3:0e:7b:67:7f:a9:10:21:
5f:d2:a7:18:49:b6:b2:d3:de:56:ad:9a:52:70:df:9a:bd:33:
49:8b:ff:42:7a:0d:a7:48:4e:7b:6d:6e:ac:9c:6c:a0:98:4e:
e5:4d:af:9a:e7:29:5d:ec:43:17:48:d6:e1:1e:84:4d:b7:de:
9c:49:b1:3b:b7:82:e1:61:e2:ab:b1:15:73:03:9c:9b:2d:2f:
52:2e:e1:53:90:3b:84:36:b8:e7:51:77:ca:f6:3e:35:42:b8:
00:a1:9d:32:12:3e:de:92:19:9e:94:e4:96:79:3b:41:b0:cc:
fd:13:f3:20:a9:5c:fd:bc:7e:0b:db:c6:09:e4:8d:d4:3a:d3:
77:49:2a:db:a6:17:6d:c3:3e:ec:86:3a:cd:2e:b6:f3:33:72:
aa:ff:06:90:da:1c:ec:e8:9f:4c:1b:cb:fd:1d:3e:ba:8a:97:
97:89:76:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:04:22 2024 by rpki-client on console-fra.rpki-client.org