Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/hRIm-B1b9CmgZxKcmsBtbenPhc0.roa
File: hRIm-B1b9CmgZxKcmsBtbenPhc0.roa (raw, json)
Hash identifier: gvLlhMndSaxjGOCWZW4gWMTDRvGQAwBYLcQnKkIY+zM=
Subject key identifier: 85:12:26:F8:1D:5B:F4:29:A0:67:12:9C:9A:C0:6D:6D:E9:CF:85:CD
Certificate issuer: /CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Certificate serial: 018CC64B646EF408421413FA61C2AB631C8B
Authority key identifier: 37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/hRIm-B1b9CmgZxKcmsBtbenPhc0.roa
Signing time: Mon 01 Jan 2024 18:31:18 +0000
ROA not before: Mon 01 Jan 2024 18:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 137490
IP address blocks: 2a0e:46c4:110::/48 maxlen: 48
2a0e:46c4:200::/48 maxlen: 48
2a0e:46c4:101::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 08:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:64:6e:f4:08:42:14:13:fa:61:c2:ab:63:1c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=370e5450d1486780aba54f045ec4802f19f0b4f7
Validity
Not Before: Jan 1 18:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=851226f81d5bf429a067129c9ac06d6de9cf85cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0c:a5:6b:b6:f0:a9:9e:8b:d7:96:3d:64:05:
3d:b1:bc:c4:67:ac:c2:fc:ce:fc:4c:c6:79:cb:ea:
ba:30:fe:6e:93:96:fe:b6:e8:97:e4:bc:92:43:bb:
f6:af:f9:2b:33:15:a5:2a:0b:9b:b0:68:21:4a:da:
37:49:fb:60:7b:e2:88:96:54:2a:cd:0b:9d:d8:aa:
b5:e9:cc:67:1d:39:92:8e:80:d1:ee:af:86:ce:33:
fe:36:c5:d6:cb:88:66:a9:26:20:20:46:3a:1e:a7:
4f:bf:83:93:3d:c6:03:d5:c6:40:55:a6:b7:00:42:
b6:72:72:0a:81:53:1b:62:f8:75:e8:b5:e1:2b:c9:
45:97:f5:d1:a1:78:2e:33:22:a7:41:f2:09:7f:c9:
77:7c:b4:18:00:0e:b5:11:10:f0:a8:d9:f8:a7:a5:
bc:16:f6:eb:2b:33:27:f2:db:02:01:69:c3:2f:31:
36:15:12:2c:63:ea:9c:cc:d0:98:28:e0:5d:e5:e7:
36:c5:cc:41:c3:d8:9d:4c:6e:a8:bf:25:89:2c:53:
4f:da:b0:cc:b9:c9:4d:1b:8a:0a:79:13:5f:84:60:
63:61:44:93:a0:6a:39:f2:40:41:9e:5b:e5:b0:9d:
45:98:5e:df:5e:1f:73:1f:8b:e1:a7:c6:74:bf:3a:
2a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:12:26:F8:1D:5B:F4:29:A0:67:12:9C:9A:C0:6D:6D:E9:CF:85:CD
X509v3 Authority Key Identifier:
keyid:37:0E:54:50:D1:48:67:80:AB:A5:4F:04:5E:C4:80:2F:19:F0:B4:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/hRIm-B1b9CmgZxKcmsBtbenPhc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/f0f70c-06e7-41ac-a2b8-858dce57fcdb/1/Nw5UUNFIZ4CrpU8EXsSALxnwtPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:46c4:101::/48
2a0e:46c4:110::/48
2a0e:46c4:200::/48
Signature Algorithm: sha256WithRSAEncryption
08:9f:25:e2:1e:a7:26:ee:3f:a9:21:ab:30:b9:84:af:b9:49:
c3:31:85:71:7a:a6:21:b8:37:60:9c:c5:80:85:b9:5f:8e:f2:
0d:b2:7b:6e:04:b9:bc:8c:28:9b:98:37:ad:e0:e0:5b:07:6a:
f2:a6:2e:d0:d6:83:c2:ca:da:ac:1a:e6:7d:86:e2:80:16:c6:
ec:35:9f:e6:85:64:e0:20:8a:c2:25:f9:c4:6f:3b:56:f6:13:
83:bd:8d:3e:54:04:5e:75:17:1f:18:bf:a5:bc:d5:b1:61:8b:
1b:45:a0:af:14:f2:0a:5d:47:b7:3b:b8:4f:20:94:09:f9:8c:
97:3f:14:da:b1:b4:51:df:b0:ca:86:1d:90:1e:88:fc:61:13:
dd:0b:96:5c:fc:90:88:26:07:75:32:7c:cf:08:87:b5:8c:da:
03:35:77:df:1d:e6:a6:98:13:1e:d1:c9:84:82:4c:97:85:63:
59:30:e1:24:22:6c:fb:93:5b:c1:db:88:48:d6:8a:4f:6c:2c:
3b:9b:9c:9a:af:70:03:b6:c8:c2:ea:e2:fa:b4:b9:8f:79:d8:
3f:93:0b:60:69:e5:c9:44:8c:f0:46:c2:cb:af:ed:f2:af:18:
f1:33:40:38:11:fb:02:76:b6:31:ce:07:ca:c3:bd:a6:65:94:
e8:4b:fc:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:08:57 2024 by rpki-client on console-fra.rpki-client.org