Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/hnvpUHX0WPufsHJX4IVh7FOCWaI.roa
File: hnvpUHX0WPufsHJX4IVh7FOCWaI.roa (raw, json)
Hash identifier: QdlBY0zLv5+Q1rrZVDEqQo8xNagHRpl1vDKuGGJEIcI=
Subject key identifier: 86:7B:E9:50:75:F4:58:FB:9F:B0:72:57:E0:85:61:EC:53:82:59:A2
Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Certificate serial: 018CC6B9347165E4E29C0BBAA2DFE3720B9C
Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/hnvpUHX0WPufsHJX4IVh7FOCWaI.roa
Signing time: Mon 01 Jan 2024 20:31:15 +0000
ROA not before: Mon 01 Jan 2024 20:31:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213169
IP address blocks: 2a0e:da40:3000::/36 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:34:71:65:e4:e2:9c:0b:ba:a2:df:e3:72:0b:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0
Validity
Not Before: Jan 1 20:31:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=867be95075f458fb9fb07257e08561ec538259a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c7:e8:13:4b:68:c1:82:52:f3:17:16:57:e7:
89:4c:4e:1b:b6:0f:5a:56:c9:e0:9f:db:9f:4c:d6:
73:f3:7f:64:6b:cf:d7:2e:4b:92:3f:bc:6b:99:de:
68:5f:e5:e3:13:24:b4:14:01:e8:91:07:88:6a:ae:
5f:3d:6c:d8:20:4b:7a:26:5f:0c:f6:b8:58:c3:c3:
3a:e0:78:9e:74:e8:fa:b4:3f:33:68:0b:ba:57:48:
a6:3f:5f:31:45:3b:cc:5b:f4:16:2f:24:a2:c0:fe:
6a:a1:92:f6:da:a7:4e:16:53:b7:ff:33:76:6a:f8:
c3:5d:27:0d:84:a9:f7:91:bf:9d:ba:a9:5f:bf:7a:
d4:f2:60:1a:96:01:21:54:de:d5:9d:8c:c7:16:fa:
5e:8f:29:ab:46:85:e9:52:31:db:34:00:cf:0d:0e:
8f:40:f4:db:ad:2d:d1:ca:39:73:9f:6d:43:51:9b:
c8:55:29:75:51:5e:6c:7e:91:35:61:22:58:93:64:
49:6a:56:01:b9:24:f8:1a:d2:59:ed:bb:9f:49:0e:
17:15:b5:1d:02:c4:25:b9:47:8e:69:a4:80:44:f4:
b2:39:6f:43:7b:73:52:94:25:f8:60:23:4f:18:1a:
4a:c3:4e:c3:b2:1c:2e:3d:77:50:d7:3d:6b:bb:6f:
23:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7B:E9:50:75:F4:58:FB:9F:B0:72:57:E0:85:61:EC:53:82:59:A2
X509v3 Authority Key Identifier:
keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/hnvpUHX0WPufsHJX4IVh7FOCWaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:da40:3000::/36
Signature Algorithm: sha256WithRSAEncryption
22:23:f6:6f:45:ef:32:84:dc:30:f1:2f:20:bb:7a:e2:af:61:
12:34:c4:1c:f1:e5:8c:96:cf:04:30:a9:0c:b0:0b:cb:e5:6e:
f7:03:e4:62:41:f1:91:66:9f:39:48:8a:8d:a9:96:4f:0e:a4:
bd:6d:ad:5b:9d:cc:8d:aa:9e:20:c6:a7:65:df:e1:b4:6d:c8:
0f:3e:7b:c8:b5:33:3c:a3:46:b5:a6:62:e7:8b:98:d3:92:80:
30:b4:28:16:ff:45:36:3a:7e:b0:98:56:23:24:c9:2d:30:6f:
e1:ef:d0:7b:a6:5e:84:4f:aa:0f:68:b3:43:8e:28:76:d7:ee:
2e:d6:47:65:fe:93:02:bb:84:f6:64:f5:8a:ba:36:33:4a:96:
a3:dd:17:bd:c0:8d:99:77:87:52:8c:0e:4d:e5:b7:b4:b8:7e:
f7:f1:ad:9b:26:b8:5f:b9:c0:87:14:24:77:52:f4:4c:e8:af:
64:aa:4d:e1:d3:fb:a1:9f:bb:7c:d4:80:e2:a3:94:20:ac:06:
21:e5:82:e2:eb:4c:30:6f:88:29:48:70:bf:e8:14:41:84:d7:
37:d8:15:50:ef:11:95:10:4b:59:77:34:de:3b:84:43:1b:d0:
8e:af:5c:81:3a:29:3a:0d:ee:9e:a3:83:30:56:bc:cf:58:92:
48:b8:bb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 06:37:33 2024 by rpki-client on console-fra.rpki-client.org