Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/HViatE0hypw_6ZOvQLxH0j3gJTs.roa
File: HViatE0hypw_6ZOvQLxH0j3gJTs.roa (raw, json)
Hash identifier: I53S5B7yU16PbCXT4/+6Z0r275ywPOiyfxN6DJwxC5A=
Subject key identifier: 1D:58:9A:B4:4D:21:CA:9C:3F:E9:93:AF:40:BC:47:D2:3D:E0:25:3B
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 018CC5DC206FB15889220D76AD2F402B29CE
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/HViatE0hypw_6ZOvQLxH0j3gJTs.roa
Signing time: Mon 01 Jan 2024 16:29:46 +0000
ROA not before: Mon 01 Jan 2024 16:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212577
IP address blocks: 2a10:fa81:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:20:6f:b1:58:89:22:0d:76:ad:2f:40:2b:29:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jan 1 16:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1d589ab44d21ca9c3fe993af40bc47d23de0253b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:24:67:54:61:4c:68:e0:a6:da:4c:4c:a0:2a:
59:df:9c:08:46:ac:b9:e9:06:58:eb:32:e3:17:c4:
e5:17:ae:cd:73:6a:4d:7c:9d:cc:0c:50:ee:5d:c0:
aa:40:39:d8:53:f2:6a:b7:36:8f:cd:bb:16:43:e4:
33:3a:ea:5f:e2:06:8a:a4:73:22:aa:0d:a8:a6:a9:
54:42:20:fa:24:9f:9b:8d:4b:d1:e9:14:35:a7:df:
c7:be:9e:a3:19:87:68:a9:cf:74:c2:72:59:ac:0d:
b8:33:81:38:9c:d2:30:9e:39:4d:4c:32:a3:4f:8b:
c9:a6:09:0e:d9:49:32:81:7a:a2:2e:ea:5a:fd:75:
b9:b5:7f:5c:0b:af:43:32:5c:24:d7:1f:04:a9:0a:
47:03:1c:14:56:f5:26:94:10:ce:c8:12:41:8c:ae:
b9:e3:7f:5f:60:b3:d8:4a:23:5a:3f:1d:be:58:82:
eb:6a:c8:03:ab:a6:38:2c:86:df:e2:bf:39:07:d7:
e0:e7:bb:aa:0c:24:98:ba:50:bb:04:d4:c7:83:a0:
a7:91:fe:06:bb:5f:1b:2b:a1:90:94:d5:46:84:a2:
e7:87:e4:30:0d:b1:04:61:00:ec:dd:73:08:fd:3d:
4d:84:d6:cf:7d:21:27:cc:bf:1c:42:f5:b9:56:95:
40:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:58:9A:B4:4D:21:CA:9C:3F:E9:93:AF:40:BC:47:D2:3D:E0:25:3B
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/HViatE0hypw_6ZOvQLxH0j3gJTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:fa81:3::/48
Signature Algorithm: sha256WithRSAEncryption
5d:6b:aa:de:18:1f:7c:e8:9d:e5:1c:61:57:19:28:e1:12:ae:
bb:f6:50:c9:7c:90:c2:a9:eb:00:13:20:ea:67:10:01:1c:18:
81:2a:ef:6a:59:f1:25:c6:ad:ee:41:5d:f3:0c:e7:68:83:5e:
ad:b3:5d:27:1d:c0:4e:05:a6:f9:fc:54:13:51:a3:f7:df:c1:
70:55:bd:6e:2c:b6:38:c1:16:c0:b2:43:f0:50:48:5f:e8:5a:
60:b3:e0:4e:61:6b:a4:c2:e5:20:5a:09:40:16:b5:76:d8:22:
8b:1c:a0:f8:14:65:8d:7d:40:10:af:0c:a9:ea:64:ca:de:b9:
45:71:06:61:0c:21:13:81:25:80:20:7f:01:04:08:e5:60:a8:
a1:59:6b:66:17:5b:8e:99:27:59:db:48:10:88:1c:07:f1:b9:
b1:dd:7e:3c:7e:27:e9:97:1c:86:a8:4c:ef:c3:e6:8d:e7:77:
8d:89:df:de:88:ca:af:82:b6:9f:11:eb:56:1a:89:58:d5:ef:
99:3b:1b:04:18:d6:de:69:35:78:e1:f1:34:a7:75:41:0b:dc:
10:33:6f:10:ac:6e:68:cf:4a:e2:a1:a2:56:16:67:50:27:6c:
11:68:60:2c:e6:19:28:a0:d5:ba:4c:fb:f3:7e:d5:60:71:69:
6d:9d:5d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 05:07:32 2024 by rpki-client on console-fra.rpki-client.org