Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/hn-WS8GzZFEWOzrk2k3Z4k12jy0.roa
File: hn-WS8GzZFEWOzrk2k3Z4k12jy0.roa (raw, json)
Hash identifier: Z8c5kgLYS8tuj5CvaK/uzdqS023YofYgVXLeXG7Ve4M=
Subject key identifier: 86:7F:96:4B:C1:B3:64:51:16:3B:3A:E4:DA:4D:D9:E2:4D:76:8F:2D
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 0192B0A32E36D8B37E2F73E11C78EB7A39C0
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/hn-WS8GzZFEWOzrk2k3Z4k12jy0.roa
Signing time: Mon 21 Oct 2024 19:52:17 +0000
ROA not before: Mon 21 Oct 2024 19:52:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7018
IP address blocks: 2a11:fc00::/29 maxlen: 29
2a11:fc00::/32 maxlen: 32
2a11:fc01::/32 maxlen: 32
2a11:fc02::/32 maxlen: 32
2a11:fc03::/32 maxlen: 32
2a11:fc04::/32 maxlen: 32
2a11:fc05::/32 maxlen: 32
2a11:fc06::/32 maxlen: 32
2a11:fc07::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:b0:a3:2e:36:d8:b3:7e:2f:73:e1:1c:78:eb:7a:39:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Oct 21 19:52:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=867f964bc1b36451163b3ae4da4dd9e24d768f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:19:e6:13:db:cb:16:73:0e:52:70:8b:34:c8:
89:c3:8f:64:d8:34:26:e3:e9:f2:85:83:cd:da:19:
93:12:30:76:f6:2b:57:1e:4e:b8:4f:e7:93:3f:7e:
c1:75:2a:2e:02:d7:dd:ea:fa:47:fb:e8:4f:2d:eb:
aa:8a:15:ec:25:61:ca:7e:7d:73:40:49:44:90:98:
6e:2d:41:dd:e4:9e:72:86:c9:5c:04:bb:f7:cc:81:
b3:cc:e0:63:86:65:40:cf:18:b2:c5:af:d6:87:aa:
9b:66:8e:3f:22:1e:1f:0c:d1:49:a4:9d:46:cb:43:
c0:43:37:b3:e4:e0:51:e9:62:20:46:f7:3d:a2:01:
c8:b5:70:da:ee:d1:d3:7d:7b:2b:95:2d:f7:f5:dc:
7b:4d:7a:96:0f:f7:6b:c3:0d:19:5a:91:9b:11:df:
ac:14:55:68:e9:19:ba:e6:e6:7c:57:bc:6a:19:e9:
54:6a:b1:6c:fd:c3:e1:51:93:0f:4d:01:8f:53:73:
ac:79:ae:49:bc:13:06:46:a6:7a:96:96:90:d0:2c:
28:80:51:04:25:f7:fd:c5:d4:9d:98:d4:c2:b2:c9:
f0:45:d6:a2:a9:32:e8:78:8a:f5:2d:8a:d5:ad:0f:
3d:a5:6f:88:15:58:02:70:76:cf:0a:39:36:13:44:
c1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7F:96:4B:C1:B3:64:51:16:3B:3A:E4:DA:4D:D9:E2:4D:76:8F:2D
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/hn-WS8GzZFEWOzrk2k3Z4k12jy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
35:f2:4f:62:ae:44:c0:46:d8:c4:7d:9b:ac:12:64:1b:aa:77:
67:98:59:cd:ed:4b:f7:e5:1f:2c:4c:09:5f:ce:90:be:cf:0c:
3e:b1:68:87:6e:12:ce:16:73:08:c6:53:82:d6:7d:bb:fa:42:
69:73:3c:22:22:a7:c1:46:04:ab:5f:10:e1:70:a8:45:a0:59:
13:80:f0:70:ff:53:09:0c:95:27:7f:5d:35:c7:12:2a:38:de:
e1:13:56:d0:74:d7:da:90:2c:15:0e:0b:e5:10:dd:8e:14:ac:
52:8c:96:37:f0:20:25:b7:55:50:ae:3b:dd:63:bd:6b:66:e3:
8c:4e:07:e7:33:15:2a:29:52:4e:67:9a:74:72:02:bb:85:54:
01:26:43:df:5b:13:98:1c:53:48:f6:9a:1c:cf:b2:eb:57:47:
a7:2f:1a:ec:11:35:2e:20:ab:f4:e0:50:97:a6:d4:94:d6:92:
8e:c4:d5:9c:41:d6:67:c4:4e:1d:47:08:fb:4f:98:c9:a1:a7:
b0:56:e1:1a:e6:bc:b7:82:bc:7a:d2:51:79:b0:ea:85:c5:4f:
15:fd:b3:6d:ec:52:e5:13:b3:fb:b4:ab:96:36:ba:43:5e:e3:
af:74:fc:56:55:42:14:e5:82:96:5e:2b:e3:37:b5:51:69:e4:
10:0e:d6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:48:39 2024 by rpki-client on console-fra.rpki-client.org