Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/q4M1lMWbpkBW1MGVLIL6mPYQnhs.roa
File: q4M1lMWbpkBW1MGVLIL6mPYQnhs.roa (raw, json)
Hash identifier: AdrwdwfKcjyrVLRJ4lbWfZNN73Xx+YBqbGcZvOrtFow=
Subject key identifier: AB:83:35:94:C5:9B:A6:40:56:D4:C1:95:2C:82:FA:98:F6:10:9E:1B
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018F9587A022257A6D5CF12AA68A2D37800B
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/q4M1lMWbpkBW1MGVLIL6mPYQnhs.roa
Signing time: Mon 20 May 2024 10:24:04 +0000
ROA not before: Mon 20 May 2024 10:24:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216132
IP address blocks: 2a0a:280:3700::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:95:87:a0:22:25:7a:6d:5c:f1:2a:a6:8a:2d:37:80:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: May 20 10:24:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ab833594c59ba64056d4c1952c82fa98f6109e1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b3:3c:a9:05:9a:e3:fa:36:a1:6d:37:df:47:
ac:ec:6a:23:ff:cd:43:e0:aa:d5:ee:22:90:5b:58:
60:e7:38:ed:5b:d0:89:56:e1:da:34:55:f4:6a:18:
d9:ef:e7:e4:d0:b9:b9:a4:df:92:41:7c:aa:22:95:
d1:52:ca:d0:47:80:61:39:33:b2:07:62:cc:f7:32:
eb:68:da:9d:29:e8:74:1d:a3:e6:0a:29:38:96:56:
92:80:59:94:29:a4:4d:38:9f:23:e2:99:2e:9b:1a:
ef:96:03:07:f6:6e:3f:92:0c:70:29:9a:0b:ad:ac:
f0:6d:93:7d:af:8b:86:4b:30:19:9b:6d:10:1e:dd:
0d:1c:e9:34:98:fc:d7:13:68:bf:16:95:95:f8:76:
30:ba:6f:05:af:a8:f6:d3:3c:fb:21:a5:4f:90:73:
7a:49:2f:8c:8a:c2:7d:99:a3:1b:f6:a8:99:7d:74:
5c:76:a3:59:d5:2f:b4:2b:0d:2d:32:85:73:f2:8d:
10:f7:23:47:46:dc:7f:86:32:d9:b7:5f:7b:ab:73:
51:38:21:04:9f:12:63:99:f6:e2:4b:7d:f9:79:c0:
b8:e5:35:99:67:4d:e6:32:06:00:6d:a0:30:49:a8:
45:ce:14:77:74:ea:96:bd:6b:21:4f:32:5f:c8:d9:
07:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:83:35:94:C5:9B:A6:40:56:D4:C1:95:2C:82:FA:98:F6:10:9E:1B
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/q4M1lMWbpkBW1MGVLIL6mPYQnhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:3700::/40
Signature Algorithm: sha256WithRSAEncryption
75:45:ca:6c:7b:e2:b5:b5:6e:ae:0d:f0:ec:2e:18:16:18:2e:
b8:8d:b4:fd:ce:7d:be:ab:b7:a7:a4:b6:82:58:5b:7b:d0:fb:
36:f8:91:78:5e:ad:12:3c:e2:49:15:a5:d0:6e:8b:cd:72:1f:
fb:93:69:53:24:39:c9:1b:a4:75:a1:6d:1c:ff:3f:4f:dc:5f:
38:42:6c:e4:02:92:e4:97:b4:7a:34:63:da:bb:f7:91:28:4d:
3e:14:16:9d:98:46:03:46:e1:4d:94:14:93:a9:ac:70:07:80:
0f:48:a7:5c:0f:69:69:4f:6b:62:62:5c:a7:ea:f1:14:bf:9a:
44:aa:48:d5:bc:9f:fa:ce:d5:ab:34:72:e2:14:8e:8c:6a:16:
9e:ff:b6:e4:2a:3e:72:e6:ad:9e:bb:4f:6b:eb:b3:07:7f:20:
66:7a:0a:5c:6e:7a:29:00:40:8d:17:f7:e4:e3:35:91:b6:58:
fd:fe:94:fa:23:fb:02:48:bc:e6:bf:68:83:cc:7e:2f:db:eb:
a9:4b:61:4c:23:44:92:94:c7:64:1a:a5:18:1e:7f:50:34:ad:
86:38:50:47:55:cf:d6:85:d4:12:31:0f:b7:2c:9e:86:05:c7:
ba:f6:7e:43:c9:1d:5d:b8:c9:77:ee:1e:9c:c6:51:6d:d4:b4:
e6:61:e2:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:28:44 2024 by rpki-client on console-ams.rpki-client.org