Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/hrub2CApgTyHnOieKR3grkVVubo.roa
File: hrub2CApgTyHnOieKR3grkVVubo.roa (raw, json)
Hash identifier: vm1EpaxtFNs4Pq/YdWpcwGFydNWjBBNg/0MJkQP92UM=
Subject key identifier: 86:BB:9B:D8:20:29:81:3C:87:9C:E8:9E:29:1D:E0:AE:45:55:B9:BA
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018CC2DB0C2E99AA97CCBDEC3940B23CC4FD
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/hrub2CApgTyHnOieKR3grkVVubo.roa
Signing time: Mon 01 Jan 2024 02:29:44 +0000
ROA not before: Mon 01 Jan 2024 02:29:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212591
IP address blocks: 2a0f:5707:aad1::/48 maxlen: 48
2a0f:5707:aad0::/46 maxlen: 46
2a0f:5707:aad0::/44 maxlen: 48
2a0f:5707:aad0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:0c:2e:99:aa:97:cc:bd:ec:39:40:b2:3c:c4:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 02:29:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86bb9bd82029813c879ce89e291de0ae4555b9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:ba:b8:26:be:60:38:6c:48:af:c7:7a:03:
60:96:ae:5d:09:9e:c1:95:98:73:cd:39:40:d0:7a:
e5:7a:0d:ba:66:a7:57:cf:b3:e7:80:8f:fe:9d:23:
a6:e9:a3:62:c9:7f:f2:e9:39:cf:0c:4f:20:9f:6d:
32:77:b4:ba:45:b2:a8:31:91:15:3f:7f:c6:48:57:
e7:5e:57:62:d4:45:6b:c9:56:42:7c:6f:33:bf:41:
71:ac:dd:0a:bd:22:01:76:5e:4b:1f:15:21:fc:0f:
f7:e6:e8:8b:f6:f6:62:a3:b3:ae:e2:e3:ba:43:20:
87:07:78:b9:60:7a:44:98:d6:70:e5:6f:a5:bd:77:
cc:1a:99:05:bf:d9:b5:0e:6b:ff:47:7b:28:e2:1f:
22:c9:a7:69:cf:30:91:ce:bd:fc:04:63:d1:52:3b:
c0:14:ac:ca:43:69:e6:39:26:7a:23:91:bf:59:19:
e7:1b:f6:1c:c1:23:79:43:aa:83:9d:f9:51:36:8a:
72:3d:24:84:f9:e2:38:8b:fc:a6:4f:3a:7d:2e:a3:
55:ae:d9:04:ca:15:9e:68:2e:7f:62:26:67:fb:48:
e8:29:d5:77:4a:95:24:f8:0d:00:c3:e3:2c:bf:d1:
eb:42:68:db:30:a7:90:2b:0f:7e:d6:7f:32:8f:db:
d4:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BB:9B:D8:20:29:81:3C:87:9C:E8:9E:29:1D:E0:AE:45:55:B9:BA
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/hrub2CApgTyHnOieKR3grkVVubo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:aad0::/44
Signature Algorithm: sha256WithRSAEncryption
2d:e5:39:13:59:b0:65:44:8b:2e:b7:45:25:f6:74:5e:76:3e:
4f:8e:5c:9a:7d:f2:e9:91:79:56:c2:44:20:d4:1d:fd:93:07:
c1:28:44:fc:eb:b0:de:a0:b8:09:1e:d1:f9:12:2c:34:ca:70:
da:eb:1d:73:d8:ca:69:7b:84:e8:a7:79:be:ee:ed:78:2f:14:
96:5a:b4:59:ac:21:b3:9e:e4:bf:93:4b:fa:55:62:3a:ac:c5:
7b:fc:7c:9a:af:52:86:61:40:4c:19:63:45:9a:a3:1c:06:ed:
0b:21:8d:85:ad:61:e7:ea:93:90:82:e3:51:04:ef:e5:aa:b4:
dc:fb:31:fa:07:60:e1:37:4b:c0:8d:57:6c:d9:b6:5e:6c:fd:
ab:e8:eb:87:ed:3a:f7:6c:56:d2:e6:73:89:89:c9:d9:c1:d9:
2e:90:3a:6e:24:2a:87:b9:0d:51:df:03:21:33:ee:4a:20:38:
b7:46:cd:ee:b6:e9:df:8f:d9:07:3c:a2:6c:6b:cd:c5:52:10:
bc:f3:7a:ba:06:42:82:ba:0f:5e:0f:e6:e8:a9:9a:e7:de:ea:
4e:91:c9:45:62:1a:b9:f6:00:47:a3:c4:ad:59:95:53:6f:7e:
34:ed:7c:2a:51:a1:08:c2:ba:77:8b:cb:48:f6:e6:e6:c8:02:
46:b1:49:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:36:28 2024 by rpki-client on console-fra.rpki-client.org