Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/hmYRc9IJntuo5EXX6_yrNXutPKs.roa
File: hmYRc9IJntuo5EXX6_yrNXutPKs.roa (raw, json)
Hash identifier: iPDlS/aw44F68gkptucSJvLZFwJCfzodbG7OVSiSMzk=
Subject key identifier: 86:66:11:73:D2:09:9E:DB:A8:E4:45:D7:EB:FC:AB:35:7B:AD:3C:AB
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 018E887D1F19F7B95E1F5A5A5D406D37AE17
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/hmYRc9IJntuo5EXX6_yrNXutPKs.roa
Signing time: Fri 29 Mar 2024 04:34:45 +0000
ROA not before: Fri 29 Mar 2024 04:34:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50340
IP address blocks: 2a0e:b900::/29 maxlen: 29
2a10:4900::/29 maxlen: 29
2a10:4900::/32 maxlen: 32
2a10:4901::/32 maxlen: 32
2a10:4902::/32 maxlen: 32
2a10:4903::/32 maxlen: 32
2a10:4904::/32 maxlen: 32
2a10:4906::/32 maxlen: 32
2a10:4907::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:88:7d:1f:19:f7:b9:5e:1f:5a:5a:5d:40:6d:37:ae:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 29 04:34:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=86661173d2099edba8e445d7ebfcab357bad3cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f3:ae:8a:c9:01:6e:6e:ac:98:b7:93:2c:5a:
fb:11:71:a3:c4:04:af:d6:e5:a1:d4:93:9b:18:f9:
17:d1:b7:96:d9:b2:7b:35:47:6d:f6:28:93:60:77:
c3:a4:24:27:37:fa:b6:d8:14:e5:7f:75:cc:55:1b:
65:e8:c0:d9:52:c3:98:4f:03:99:6b:c3:69:34:7f:
bc:7d:12:13:67:ac:52:67:c2:6b:cc:4e:8a:23:fe:
f2:fa:bb:ad:a3:74:f3:a4:0b:b6:5d:be:cb:58:63:
5e:3c:14:fa:d4:d8:b6:27:51:b7:af:ef:21:88:f9:
ad:67:32:d9:9a:d7:f3:85:d0:77:e7:b5:78:2a:5c:
4c:f7:49:ce:ab:7e:2a:16:e7:cf:da:88:05:b1:ea:
4b:08:0c:e3:80:b3:1d:a1:73:69:a3:a5:17:87:ce:
b7:a4:5e:1b:12:8f:18:1c:92:39:80:6e:3e:3d:af:
24:e6:f5:ba:b7:e7:2f:c4:fe:a4:39:08:3c:da:bb:
b1:18:a5:05:63:af:6a:6e:e1:66:30:62:40:51:eb:
35:6c:3c:40:b3:4b:81:e9:94:e1:d4:04:66:1a:1a:
ce:86:3e:1f:ed:21:d0:de:cc:e5:56:82:77:00:6d:
8c:d7:00:85:b9:c6:3c:6b:c3:be:a2:da:ae:d9:6e:
16:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:66:11:73:D2:09:9E:DB:A8:E4:45:D7:EB:FC:AB:35:7B:AD:3C:AB
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/hmYRc9IJntuo5EXX6_yrNXutPKs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b900::/29
2a10:4900::/29
Signature Algorithm: sha256WithRSAEncryption
73:1e:a3:5e:c8:7f:c6:79:55:0c:66:f2:1c:e0:7a:d0:02:4e:
73:59:73:04:36:00:db:c6:ba:17:85:1f:95:19:e5:2b:40:e1:
ca:60:c6:9e:43:78:00:b3:b4:90:0c:26:6e:b9:bf:8d:76:39:
48:be:fe:91:de:f0:c6:f2:e6:9e:32:ee:93:f0:16:17:d9:59:
e8:b5:bd:40:2b:fe:11:8c:f6:60:bd:9e:cc:6c:bb:9c:56:87:
34:47:e6:3a:a5:51:95:42:7f:46:ff:18:b1:74:ff:ab:60:bd:
fd:0f:23:84:a9:8b:c0:6d:94:5c:c2:2e:16:cc:e8:75:78:73:
6e:11:12:cd:fe:95:fd:4f:81:49:c9:19:be:e5:5f:fa:47:69:
2e:36:06:29:89:e1:30:2b:35:14:32:4b:c9:b9:be:00:03:5b:
d9:75:50:ec:d2:a6:cb:4f:80:ca:65:f1:61:28:16:9a:a0:d1:
4c:3c:83:00:1f:9e:0e:50:aa:c6:2a:0e:98:4a:4b:17:34:0f:
ec:38:5c:43:af:5f:1c:83:ea:27:16:1d:53:0e:f0:a8:34:40:
e0:39:92:2f:8b:80:c4:68:f7:ca:2b:9e:61:2f:eb:f3:c1:45:
a2:60:19:51:a7:be:bd:cc:67:ee:56:6e:26:26:f2:96:6b:03:
6d:01:47:0e
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAY6IfR8Z97leH1paXUBtN64XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDg0NzVmZjBkOGVjOTYwMzM2MDE2ZTBlMDQyMjFhOThl
NWVjZjIwHhcNMjQwMzI5MDQzNDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4NjY2MTE3M2QyMDk5ZWRiYThlNDQ1ZDdlYmZjYWIzNTdiYWQzY2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/OuiskBbm6smLeTLFr7EXGjxASv
1uWh1JObGPkX0beW2bJ7NUdt9iiTYHfDpCQnN/q22BTlf3XMVRtl6MDZUsOYTwOZ
a8NpNH+8fRITZ6xSZ8JrzE6KI/7y+ruto3TzpAu2Xb7LWGNePBT61Ni2J1G3r+8h
iPmtZzLZmtfzhdB357V4KlxM90nOq34qFufP2ogFsepLCAzjgLMdoXNpo6UXh863
pF4bEo8YHJI5gG4+Pa8k5vW6t+cvxP6kOQg82ruxGKUFY69qbuFmMGJAUes1bDxA
s0uB6ZTh1ARmGhrOhj4f7SHQ3szlVoJ3AG2M1wCFucY8a8O+otqu2W4WjQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIZmEXPSCZ7bqORF1+v8qzV7rTyrMB8GA1UdIwQY
MBaAFHUIR1/w2OyWAzYBbg4EIhqY5ezyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWIt
MTcxYzM2N2JlNzgyLzEvaG1ZUmM5SUpudHVvNUVYWDZfeXJOWHV0UEtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xZmE2YTMtOGRjNS00YzM1LWE0OWItMTcxYzM2N2JlNzgy
LzEvZFFoSFhfRFk3SllETmdGdURnUWlHcGpsN1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUDKg65AAMF
AyoQSQAwDQYJKoZIhvcNAQELBQADggEBAHMeo17If8Z5VQxm8hzgetACTnNZcwQ2
ANvGuheFH5UZ5StA4cpgxp5DeACztJAMJm65v412OUi+/pHe8Mby5p4y7pPwFhfZ
Wei1vUAr/hGM9mC9nsxsu5xWhzRH5jqlUZVCf0b/GLF0/6tgvf0PI4Spi8BtlFzC
LhbM6HV4c24REs3+lf1PgUnJGb7lX/pHaS42BimJ4TArNRQyS8m5vgADW9l1UOzS
pstPgMpl8WEoFpqg0Uw8gwAfng5QqsYqDphKSxc0D+w4XEOvXxyD6icWHVMO8Kg0
QOA5ki+LgMRo98ornmEv6/PBRaJgGVGnvr3MZ+5WbiYm8pZrA20BRw4=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:55:48 2024 by rpki-client on console-fra.rpki-client.org