Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/HPIV3v-L66aSCl1b2y35zgA_xfY.roa
File: HPIV3v-L66aSCl1b2y35zgA_xfY.roa (raw, json)
Hash identifier: 2Ve+4QD5nqoeq9h5UuRDbGHip92uMPdBn7c/ri/20j8=
Subject key identifier: 1C:F2:15:DE:FF:8B:EB:A6:92:0A:5D:5B:DB:2D:F9:CE:00:3F:C5:F6
Certificate issuer: /CN=0f025fa357c20abbf118426234658e62d7dc7076
Certificate serial: 0192BCBC67E1E85580539E31BCF8E8A9674F
Authority key identifier: 0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/HPIV3v-L66aSCl1b2y35zgA_xfY.roa
Signing time: Thu 24 Oct 2024 04:15:16 +0000
ROA not before: Thu 24 Oct 2024 04:15:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214009
IP address blocks: 2a01:ee80:dead::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:bc:bc:67:e1:e8:55:80:53:9e:31:bc:f8:e8:a9:67:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f025fa357c20abbf118426234658e62d7dc7076
Validity
Not Before: Oct 24 04:15:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1cf215deff8beba6920a5d5bdb2df9ce003fc5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8a:39:41:77:3d:56:dc:99:b0:b5:e7:9c:f2:
1b:38:f6:2d:5d:61:89:0d:a6:f1:e6:15:3e:1c:ba:
aa:1d:f3:ee:ea:91:a4:44:9c:c2:40:77:75:a9:bf:
e3:07:49:f7:64:fb:19:bd:12:5e:5b:5d:0f:1e:82:
69:ff:7c:67:2c:63:77:b9:8e:74:a8:c0:73:26:5e:
56:da:42:e3:60:c0:3b:9e:90:5e:80:f8:eb:a7:6f:
f6:15:3a:c2:85:c8:b8:61:9a:73:08:4e:2e:c1:35:
78:13:4a:28:f9:e6:9e:5b:ef:86:5f:ef:af:4d:d9:
c1:35:18:77:a3:7a:33:a2:9d:26:b0:7c:42:a9:ba:
73:5f:e0:53:97:4c:fb:f8:c6:69:79:e5:f9:86:c7:
3c:53:81:fc:46:56:df:b8:5d:00:97:2b:1f:5e:b0:
f1:c1:c6:32:f9:a9:60:20:c9:4f:6a:61:16:56:11:
2b:e2:79:f2:e3:57:d0:12:19:6c:8a:de:e1:8d:04:
49:f0:ff:84:3a:a5:e8:61:8c:d3:8a:0f:ff:35:85:
fa:64:c2:74:29:a9:7b:d2:29:11:d8:a2:ef:b8:8e:
2a:31:26:50:2f:b9:36:c3:80:3f:ad:47:0e:f6:27:
0e:a3:e2:b2:3a:63:27:5e:25:87:d0:71:1d:85:2d:
a7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:F2:15:DE:FF:8B:EB:A6:92:0A:5D:5B:DB:2D:F9:CE:00:3F:C5:F6
X509v3 Authority Key Identifier:
keyid:0F:02:5F:A3:57:C2:0A:BB:F1:18:42:62:34:65:8E:62:D7:DC:70:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwJfo1fCCrvxGEJiNGWOYtfccHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/HPIV3v-L66aSCl1b2y35zgA_xfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/114a10-8ef7-4903-963e-d4d59a095c7f/1/DwJfo1fCCrvxGEJiNGWOYtfccHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ee80:dead::/48
Signature Algorithm: sha256WithRSAEncryption
cc:86:89:97:f7:ec:61:c3:ef:b0:30:06:bc:46:47:3e:91:8f:
fc:ed:be:1a:f5:1e:f0:b7:2c:7e:67:49:e8:5e:3b:06:03:91:
e7:ad:83:e8:2b:2c:80:ee:0f:bf:92:8e:f8:46:f5:de:d3:51:
cb:aa:21:cf:78:53:8d:ca:16:68:1e:c8:2e:9e:73:6a:6f:92:
2e:dd:f8:b8:ff:a6:1c:a0:6e:30:85:97:21:35:01:ff:53:02:
73:e5:16:d4:be:7b:0f:40:ba:d0:58:69:fd:63:0c:f5:8e:83:
61:0d:2f:ca:87:05:71:3b:eb:31:df:ed:b6:6e:b2:32:5a:da:
dc:b3:ea:43:17:e7:d6:ac:c7:6f:76:09:a5:7f:cc:7d:78:45:
b6:18:14:3d:96:1f:9f:6a:d2:76:ba:37:27:d1:b5:95:2f:df:
8c:26:3a:88:fd:48:ee:a1:d7:ac:56:d2:62:e4:9a:e9:34:4e:
79:4b:ea:45:6b:84:3e:da:e0:70:4f:7e:66:5c:76:6e:1a:93:
d6:97:ea:c5:e0:50:4e:5c:65:7a:91:a7:ee:4f:80:a3:fa:b5:
89:5d:46:11:0f:0c:69:5c:9c:39:c9:52:d0:47:36:b4:97:ec:
09:58:28:66:b1:49:e9:e9:48:53:c3:b4:21:a2:6c:fa:86:36:
e6:78:4f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 15:53:06 2024 by rpki-client on console-fra.rpki-client.org