Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Hpk97f0PJjVPLe2BoUnjl9stAhM.roa
File: Hpk97f0PJjVPLe2BoUnjl9stAhM.roa (raw, json)
Hash identifier: XKHHQ2pQX8XRqZOI7sVWAz52AZz/3OOq5R5Hv0JOa64=
Subject key identifier: 1E:99:3D:ED:FD:0F:26:35:4F:2D:ED:81:A1:49:E3:97:DB:2D:02:13
Certificate issuer: /CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Certificate serial: 018CC2DB19B971FE01B0147C7F7F26C5C349
Authority key identifier: 29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Hpk97f0PJjVPLe2BoUnjl9stAhM.roa
Signing time: Mon 01 Jan 2024 02:29:47 +0000
ROA not before: Mon 01 Jan 2024 02:29:47 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206754
IP address blocks: 2a04:5d00:80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Sep 2024 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:19:b9:71:fe:01:b0:14:7c:7f:7f:26:c5:c3:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=291f0b73e67d63c5a4c9046814166a9e21625f28
Validity
Not Before: Jan 1 02:29:47 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1e993dedfd0f26354f2ded81a149e397db2d0213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:41:27:02:aa:a4:04:7b:02:cd:f2:f4:f1:4d:
49:66:6b:7b:e2:cc:58:49:ec:f5:e4:ef:c9:da:82:
93:58:46:20:80:21:f1:7c:fe:79:05:b6:fb:75:4d:
c1:fb:92:78:ed:33:a5:12:6c:66:9a:de:c5:86:e2:
01:48:49:64:5a:ac:dd:f2:e2:22:7c:4d:e6:ba:61:
46:01:e8:72:a0:7c:3e:e4:b2:c7:b4:1a:0d:0f:a6:
64:97:21:be:09:39:c8:2a:1c:3e:e4:f2:5f:57:e4:
0a:f6:38:e7:57:ad:c2:2d:da:cc:e4:a1:fe:52:2a:
5c:ae:ae:2f:c7:c1:4b:d1:79:58:83:c1:9e:87:84:
97:44:49:64:ee:50:99:91:fb:73:67:78:a8:0d:68:
22:5e:25:24:40:09:5e:de:f3:4d:3e:01:88:a7:cf:
7b:93:4a:bc:be:71:4b:f6:5f:9d:cf:47:48:fa:82:
b9:1d:f8:8c:7c:1f:48:de:ab:1c:a5:d0:43:df:56:
cd:14:59:f7:f7:ef:48:3a:d0:57:1c:a9:71:91:fc:
e8:cb:9a:b6:41:79:f8:2d:5d:df:67:36:3f:22:d6:
2a:71:c6:e6:79:07:6f:e9:6f:c7:ce:2d:e4:c8:7d:
8e:6f:d1:1a:9a:a1:d0:4a:d4:78:b4:b4:f4:04:a5:
0f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:99:3D:ED:FD:0F:26:35:4F:2D:ED:81:A1:49:E3:97:DB:2D:02:13
X509v3 Authority Key Identifier:
keyid:29:1F:0B:73:E6:7D:63:C5:A4:C9:04:68:14:16:6A:9E:21:62:5F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/Hpk97f0PJjVPLe2BoUnjl9stAhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/48d609-088d-41e4-bec4-38ee8fd64e7d/1/KR8Lc-Z9Y8WkyQRoFBZqniFiXyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5d00:80::/48
Signature Algorithm: sha256WithRSAEncryption
55:4d:15:06:ca:83:34:5d:86:dc:2d:73:ed:ac:4a:17:4d:8a:
de:5e:fb:ef:7d:03:91:ba:33:b2:ea:9e:79:66:29:90:6c:58:
54:40:06:3d:ed:4c:b5:79:43:4a:0e:50:a0:99:ba:b1:51:06:
81:1a:57:90:42:ca:28:b7:64:0c:51:02:2b:26:4e:fd:04:56:
89:5d:6a:b7:7d:14:e8:21:a1:61:02:6b:b0:04:c8:4a:0d:55:
f2:70:4d:3f:e7:63:72:1c:6a:6f:1e:59:15:ca:db:d0:61:62:
f9:b6:24:bf:9b:6b:69:9a:c4:5f:de:c0:ff:5c:05:fa:a1:4a:
de:6f:3e:99:a7:80:8d:5a:fe:d8:cc:5d:11:63:49:c3:cc:aa:
9c:97:03:13:d9:bb:00:3e:8f:d8:e2:9b:66:dc:a2:f3:72:80:
7d:ef:fb:b5:91:ca:a6:09:f2:06:a7:1c:24:31:2a:d0:4e:f5:
e7:b9:33:ed:23:28:96:ca:59:81:72:84:d0:a7:11:72:25:eb:
89:5c:ca:c4:fa:0d:8c:cb:f3:6e:2c:04:7a:8a:50:ac:ff:0c:
f5:31:ff:78:8e:38:59:2e:5e:c5:05:b6:89:66:60:d0:2f:98:
5c:c3:6c:c3:88:bd:13:72:b4:2c:eb:4c:98:6f:bd:be:6d:94:
65:ec:1b:f5
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzC2xm5cf4BsBR8f38mxcNJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MWYwYjczZTY3ZDYzYzVhNGM5MDQ2ODE0MTY2YTllMjE2
MjVmMjgwHhcNMjQwMTAxMDIyOTQ3WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZTk5M2RlZGZkMGYyNjM1NGYyZGVkODFhMTQ5ZTM5N2RiMmQwMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkEnAqqkBHsCzfL08U1JZmt74sxY
Sez15O/J2oKTWEYggCHxfP55Bbb7dU3B+5J47TOlEmxmmt7FhuIBSElkWqzd8uIi
fE3mumFGAehyoHw+5LLHtBoND6ZklyG+CTnIKhw+5PJfV+QK9jjnV63CLdrM5KH+
Uipcrq4vx8FL0XlYg8Geh4SXRElk7lCZkftzZ3ioDWgiXiUkQAle3vNNPgGIp897
k0q8vnFL9l+dz0dI+oK5HfiMfB9I3qscpdBD31bNFFn39+9IOtBXHKlxkfzoy5q2
QXn4LV3fZzY/ItYqccbmeQdv6W/Hzi3kyH2Ob9EamqHQStR4tLT0BKUPQwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFB6ZPe39DyY1Ty3tgaFJ45fbLQITMB8GA1UdIwQY
MBaAFCkfC3PmfWPFpMkEaBQWap4hYl8oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQt
MzhlZThmZDY0ZTdkLzEvSHBrOTdmMFBKalZQTGUyQm9VbmpsOXN0QWhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS80OGQ2MDktMDg4ZC00MWU0LWJlYzQtMzhlZThmZDY0ZTdk
LzEvS1I4TGMtWjlZOFdreVFSb0ZCWnFuaUZpWHlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgRdAACA
MA0GCSqGSIb3DQEBCwUAA4IBAQBVTRUGyoM0XYbcLXPtrEoXTYreXvvvfQORujOy
6p55ZimQbFhUQAY97Uy1eUNKDlCgmbqxUQaBGleQQsoot2QMUQIrJk79BFaJXWq3
fRToIaFhAmuwBMhKDVXycE0/52NyHGpvHlkVytvQYWL5tiS/m2tpmsRf3sD/XAX6
oUrebz6Zp4CNWv7YzF0RY0nDzKqclwMT2bsAPo/Y4ptm3KLzcoB97/u1kcqmCfIG
pxwkMSrQTvXnuTPtIyiWylmBcoTQpxFyJeuJXMrE+g2My/NuLAR6ilCs/wz1Mf94
jjhZLl7FBbaJZmDQL5hcw2zDiL0TcrQs60yYb72+bZRl7Bv1
-----END CERTIFICATE-----
Generated at Fri Sep 20 19:20:56 2024 by rpki-client on console-fra.rpki-client.org