Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/HhY7R6K-eunIUlKHop0FCR3cSYI.roa
File: HhY7R6K-eunIUlKHop0FCR3cSYI.roa (raw, json)
Hash identifier: PTUrmCnuvJUyL83quBGYIQBiuMY/Ty5GOmKhiZlvy/M=
Subject key identifier: 1E:16:3B:47:A2:BE:7A:E9:C8:52:52:87:A2:9D:05:09:1D:DC:49:82
Certificate issuer: /CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Certificate serial: 018CC6B9313F8852EB86E3C041E424742DED
Authority key identifier: 9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/HhY7R6K-eunIUlKHop0FCR3cSYI.roa
Signing time: Mon 01 Jan 2024 20:31:14 +0000
ROA not before: Mon 01 Jan 2024 20:31:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44514
IP address blocks: 46.228.224.0/20 maxlen: 20
217.170.160.0/20 maxlen: 20
212.67.128.0/19 maxlen: 19
91.192.250.0/23 maxlen: 23
2a02:78::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:31:3f:88:52:eb:86:e3:c0:41:e4:24:74:2d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b6b7b3ea60efb4a579a4f5e237ea7a88d3bc078
Validity
Not Before: Jan 1 20:31:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e163b47a2be7ae9c8525287a29d05091ddc4982
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:cc:1d:e7:45:69:df:e6:21:ce:6e:36:65:54:
1b:74:aa:11:09:12:5d:80:4d:23:17:67:b4:0f:d5:
9b:40:7e:b4:65:1f:96:14:3f:87:54:40:40:eb:02:
1b:58:75:6e:3c:01:1f:c6:1b:ef:2a:ec:e0:08:8f:
43:63:ab:3d:e2:fe:5a:19:8e:92:2c:02:bd:2a:03:
43:06:ad:5c:3d:61:3b:28:de:1a:af:91:70:68:c6:
14:d7:bc:f3:56:6f:80:c1:e6:4e:01:7b:69:3a:48:
b4:ef:69:93:b0:79:11:4f:72:c4:4b:29:b5:f8:e9:
23:d9:23:95:3e:cd:cd:d8:2e:01:53:87:5e:86:cb:
a2:4f:05:a2:3a:ba:34:13:90:b9:b4:72:7c:65:29:
4b:02:40:01:fd:d8:30:3e:8f:63:0c:c5:6a:bc:25:
57:2c:d7:f1:e0:85:cd:41:5b:08:f9:71:77:ac:a9:
0b:1a:c4:3d:62:c2:1c:d3:7e:9f:7e:aa:fc:29:20:
80:3f:2d:4e:ae:7c:05:58:a0:28:ca:f4:21:ba:27:
a9:8f:a3:c7:4e:11:46:5a:b7:8e:57:1b:0c:9d:83:
4c:fb:6f:3f:55:73:f9:ec:41:4d:bc:d0:fc:ff:65:
fa:9b:17:77:c1:6b:67:ea:66:a2:35:5e:da:ad:90:
5f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:16:3B:47:A2:BE:7A:E9:C8:52:52:87:A2:9D:05:09:1D:DC:49:82
X509v3 Authority Key Identifier:
keyid:9B:6B:7B:3E:A6:0E:FB:4A:57:9A:4F:5E:23:7E:A7:A8:8D:3B:C0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2t7PqYO-0pXmk9eI36nqI07wHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/HhY7R6K-eunIUlKHop0FCR3cSYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/e27d71-efbc-47ef-9840-e74d8d1d4e02/1/m2t7PqYO-0pXmk9eI36nqI07wHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.224.0/20
91.192.250.0/23
212.67.128.0/19
217.170.160.0/20
IPv6:
2a02:78::/32
Signature Algorithm: sha256WithRSAEncryption
6e:f2:f6:9d:19:e6:ea:a5:dc:1e:1d:a5:ba:5e:65:20:aa:da:
82:a9:85:33:a0:8a:c4:f5:35:2b:61:4a:a1:e4:47:eb:bb:35:
9e:10:3e:b5:09:58:07:6e:1a:c6:62:2d:8a:1d:a9:5b:98:38:
ce:18:b2:9f:60:d3:fe:95:43:13:23:1a:c2:33:b2:89:f1:fd:
a2:b4:67:6b:c2:d3:c8:0d:49:4b:37:9e:f5:60:e5:e9:32:dd:
40:0b:15:7e:04:67:03:d3:81:15:ff:24:99:a7:ee:16:8e:3e:
b1:a8:28:81:f8:ed:a8:82:1b:2c:ef:cd:80:42:48:54:e2:da:
99:d9:8b:24:de:ba:2b:4b:0c:55:dc:fe:6f:5d:f9:5a:c1:2c:
81:47:04:4f:fd:5c:26:4f:16:1d:96:90:a7:e2:71:17:6a:3a:
08:89:9d:b4:12:3c:3e:3a:62:35:70:c5:01:6b:48:9e:5d:98:
ad:5d:f3:80:b0:a1:b6:96:85:44:82:92:60:b8:ae:5a:9a:95:
24:94:38:bb:e2:01:b2:79:2f:b0:55:20:36:80:04:67:4a:9f:
f0:6b:9f:33:b0:5b:26:71:4a:b1:17:bb:00:a7:98:14:38:ad:
2d:76:74:27:3e:7c:8e:dc:f4:25:00:0c:69:7a:2a:e9:3b:ab:
67:0c:c7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:58:39 2024 by rpki-client on console-fra.rpki-client.org