Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/HgaGHfo0YnP0WW5ZHRN0mb9AFdA.roa
File: HgaGHfo0YnP0WW5ZHRN0mb9AFdA.roa (raw, json)
Hash identifier: E0/ntGAZIW1vx6NM43GlgZakUwk13kau5y4eSuSnCls=
Subject key identifier: 1E:06:86:1D:FA:34:62:73:F4:59:6E:59:1D:13:74:99:BF:40:15:D0
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 018CC349492BD8B6CF61F20C6E905FC7E4B1
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/HgaGHfo0YnP0WW5ZHRN0mb9AFdA.roa
Signing time: Mon 01 Jan 2024 04:30:08 +0000
ROA not before: Mon 01 Jan 2024 04:30:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52209
IP address blocks: 2a13:9a00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:49:2b:d8:b6:cf:61:f2:0c:6e:90:5f:c7:e4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Jan 1 04:30:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e06861dfa346273f4596e591d137499bf4015d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:7d:47:8e:d9:c3:82:85:da:dc:be:8a:81:
90:af:20:31:73:74:e0:15:47:44:7e:aa:ee:b2:2d:
a0:30:d0:24:59:e0:5c:4a:ac:32:77:e9:ed:85:eb:
fc:10:5b:2f:4c:82:9d:85:d5:8d:f8:a2:d6:da:dc:
d1:cd:c5:bb:31:ae:87:30:51:cd:f5:23:43:16:e1:
88:fc:9a:64:33:b2:9c:cf:49:cc:4f:0f:5b:87:6e:
13:3a:4c:d0:1e:8d:79:5f:ed:ba:ce:d4:85:14:b5:
fa:84:e8:33:50:6c:cc:15:d3:68:61:94:39:93:06:
36:91:45:b1:f5:65:50:03:eb:71:5b:9e:70:ee:0a:
49:a1:51:b2:f4:cb:cf:fa:6c:90:2e:ac:14:27:10:
b7:ee:5d:f5:75:63:cf:d6:5d:b9:31:c7:fd:44:a1:
c6:5b:e2:65:73:6b:19:00:56:eb:b7:02:27:96:68:
1e:bb:08:fa:64:a0:7d:b1:39:57:69:9a:b4:e2:8f:
21:06:e4:0d:84:02:80:2f:28:68:03:5b:e0:85:d7:
9e:68:22:fd:72:c9:43:ea:b1:9d:4d:09:83:53:f7:
97:ed:d7:21:cc:2a:6d:15:5a:42:19:c1:78:d3:32:
15:a9:f6:27:7c:1d:eb:d4:9a:96:c3:ef:1a:d9:c3:
4e:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:06:86:1D:FA:34:62:73:F4:59:6E:59:1D:13:74:99:BF:40:15:D0
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/HgaGHfo0YnP0WW5ZHRN0mb9AFdA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:9a00::/29
Signature Algorithm: sha256WithRSAEncryption
1d:27:a7:20:6b:71:eb:b5:cb:ad:be:b0:35:64:28:97:2c:97:
c9:65:10:cd:73:84:45:88:13:6e:6d:b8:a6:16:d5:56:96:4a:
32:f0:60:d5:c4:fe:62:37:c6:bd:9d:b3:5d:9c:8b:9c:2c:a0:
8c:30:da:6d:de:0f:1c:23:40:66:b3:06:3b:20:0b:5e:ae:8b:
c2:c4:3c:07:4a:67:2d:d3:2a:b7:bc:49:6f:b0:03:b6:12:86:
ea:1a:7b:7a:36:51:95:2f:3d:f6:ba:49:7f:6d:e9:d7:05:b2:
f8:0d:3d:fb:9f:4a:b8:0c:a0:e9:8a:ae:5e:a8:e0:48:3f:1f:
61:98:76:9e:39:6a:dc:28:77:65:a8:86:a0:69:1e:4e:07:6f:
69:b3:6e:c4:73:cb:ac:11:bb:3b:3f:5a:90:c4:5a:a7:47:aa:
c0:38:2c:7b:95:06:57:b3:19:04:fe:b1:9a:d8:f8:e7:37:92:
18:dc:01:fe:24:44:4d:5d:9c:5d:36:0e:05:3f:23:65:ca:af:
f8:38:97:91:68:f4:e4:09:fd:f9:12:54:16:c1:b8:52:21:ab:
10:73:6c:17:64:a5:0f:c7:65:b1:23:3f:ef:19:8f:a3:ff:e7:
ae:5a:60:3f:c9:f3:5a:46:2b:18:4e:65:29:6b:9c:89:89:a6:
21:3f:43:20
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAYzDSUkr2LbPYfIMbpBfx+SxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZTc3M2RiZmI3NTk1N2YwY2M1Yzg2M2ZjY2U3NmNhNThh
MzkzMDgwHhcNMjQwMTAxMDQzMDA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTA2ODYxZGZhMzQ2MjczZjQ1OTZlNTkxZDEzNzQ5OWJmNDAxNWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphF9R47Zw4KF2ty+ioGQryAxc3Tg
FUdEfqrusi2gMNAkWeBcSqwyd+nthev8EFsvTIKdhdWN+KLW2tzRzcW7Ma6HMFHN
9SNDFuGI/JpkM7Kcz0nMTw9bh24TOkzQHo15X+26ztSFFLX6hOgzUGzMFdNoYZQ5
kwY2kUWx9WVQA+txW55w7gpJoVGy9MvP+myQLqwUJxC37l31dWPP1l25Mcf9RKHG
W+Jlc2sZAFbrtwInlmgeuwj6ZKB9sTlXaZq04o8hBuQNhAKALyhoA1vghdeeaCL9
cslD6rGdTQmDU/eX7dchzCptFVpCGcF40zIVqfYnfB3r1JqWw+8a2cNO2QIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFB4Ghh36NGJz9FluWR0TdJm/QBXQMB8GA1UdIwQY
MBaAFGDnc9v7dZV/DMXIY/zOdspYo5MIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9kejJfdDFsWDhNeGNoal9NNTJ5bGlqa3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9jOTlkNmYtODJlZS00NzY4LTgwNWIt
NDc2ZDdlNjJjZWY2LzEvSGdhR0hmbzBZblAwV1c1WkhSTjBtYjlBRmRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9jOTlkNmYtODJlZS00NzY4LTgwNWItNDc2ZDdlNjJjZWY2
LzEvWU9kejJfdDFsWDhNeGNoal9NNTJ5bGlqa3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhOaADAN
BgkqhkiG9w0BAQsFAAOCAQEAHSenIGtx67XLrb6wNWQolyyXyWUQzXOERYgTbm24
phbVVpZKMvBg1cT+YjfGvZ2zXZyLnCygjDDabd4PHCNAZrMGOyALXq6LwsQ8B0pn
LdMqt7xJb7ADthKG6hp7ejZRlS899rpJf23p1wWy+A09+59KuAyg6YquXqjgSD8f
YZh2njlq3Ch3ZaiGoGkeTgdvabNuxHPLrBG7Oz9akMRap0eqwDgse5UGV7MZBP6x
mtj45zeSGNwB/iRETV2cXTYOBT8jZcqv+DiXkWj05An9+RJUFsG4UiGrEHNsF2Sl
D8dlsSM/7xmPo//nrlpgP8nzWkYrGE5lKWuciYmmIT9DIA==
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:11:58 2024 by rpki-client on console-ams.rpki-client.org