Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/QmnPRpoC8bXnrHikkSgomeDWUqg.roa
File: QmnPRpoC8bXnrHikkSgomeDWUqg.roa (raw, json)
Hash identifier: SBgiGpyvCtBKQE8L5prGZaNFElxB2tEymz+4JxKxE/E=
Subject key identifier: 42:69:CF:46:9A:02:F1:B5:E7:AC:78:A4:91:28:28:99:E0:D6:52:A8
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 018CC64B3CAD572FADE20288A2BF88FB39D1
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/QmnPRpoC8bXnrHikkSgomeDWUqg.roa
Signing time: Mon 01 Jan 2024 18:31:08 +0000
ROA not before: Mon 01 Jan 2024 18:31:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203631
IP address blocks: 2a12:3fc2:aa70::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:3c:ad:57:2f:ad:e2:02:88:a2:bf:88:fb:39:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 18:31:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4269cf469a02f1b5e7ac78a491282899e0d652a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d9:a6:b0:6a:32:01:4d:20:b6:bf:51:d0:20:
8b:23:15:f6:c3:f3:76:b2:dd:62:3f:93:b5:84:42:
c7:25:72:ed:5b:c1:83:6d:54:6f:1e:33:20:e9:bd:
f9:1a:3c:09:29:02:0f:34:81:eb:62:9b:e4:8a:8e:
e4:50:39:66:15:7e:09:67:b0:96:ed:a3:c1:ba:e1:
69:ec:25:d5:59:65:29:38:04:2c:4d:0f:79:a2:d6:
ad:76:3a:d4:57:de:85:45:b5:0d:65:a6:fa:cc:1c:
91:cf:b2:27:78:d4:e3:77:9d:18:bc:61:e0:23:5a:
8e:1a:0e:16:73:cb:c9:e8:99:18:80:db:a9:8c:6f:
a6:6f:df:a5:c6:06:13:26:da:1e:81:a3:68:54:a5:
c8:7c:14:15:24:50:65:f8:71:21:d7:db:63:78:1a:
0e:21:3f:62:25:97:ec:29:a9:91:cb:7a:11:fd:b6:
62:38:1f:89:b3:da:31:90:c6:74:d1:02:46:5c:e9:
fe:5c:82:73:83:39:63:88:9f:e8:04:de:00:30:0e:
c1:be:e6:b3:c4:d9:5a:b0:4d:02:05:5c:82:d5:75:
d4:34:14:09:33:94:ee:9f:5f:d9:f3:15:5a:f7:2c:
85:82:de:5d:5a:59:93:61:5f:b6:06:cf:57:5f:92:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:CF:46:9A:02:F1:B5:E7:AC:78:A4:91:28:28:99:E0:D6:52:A8
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/QmnPRpoC8bXnrHikkSgomeDWUqg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc2:aa70::/44
Signature Algorithm: sha256WithRSAEncryption
b1:f4:0b:fd:32:6f:fe:d9:23:16:d0:2f:58:2b:ee:e6:40:e4:
c3:18:36:34:7e:ff:7e:c8:c3:f4:7b:9c:8b:09:2a:7a:88:f9:
b3:c5:2a:00:71:f0:d4:dc:0f:ab:44:be:e3:fa:24:39:ad:9b:
08:cd:44:e7:67:63:e4:c6:3d:31:c3:0e:02:3d:47:3b:50:e2:
01:7e:ee:ed:a4:6d:a3:24:6a:7c:ab:55:8a:cb:bb:3d:1e:71:
9d:97:ec:6b:06:b4:20:d5:0a:53:8e:0d:5f:35:37:79:9b:73:
a7:41:4f:ac:54:c1:eb:df:a2:ed:7e:02:a5:5a:52:70:94:3f:
77:a7:42:e2:fc:0a:96:ac:91:81:eb:87:1e:96:39:50:4e:83:
db:40:94:7e:79:d2:b9:8a:1d:dd:88:e2:12:95:b8:ab:82:41:
75:4e:d9:b4:8c:fe:88:ee:99:cb:83:e3:86:cb:06:e4:c4:6d:
9a:a5:6c:e4:94:71:5b:62:23:cd:7e:7e:73:b4:c1:6e:c9:bc:
57:2c:29:33:c8:b9:33:ae:1f:23:ed:52:04:22:88:9e:0a:19:
23:c2:74:b2:65:23:ff:29:9a:2e:33:d5:03:e4:15:e9:0b:0b:
98:76:44:5c:87:bf:88:7e:f0:30:d1:85:42:35:65:a4:a5:ff:
de:b9:91:66
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGSzytVy+t4gKIor+I+znRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5OGY3YjFmZDgwMmIzZGM2YWJkN2E1Y2RhNzg2YTYzMTFl
MWQ2M2QwHhcNMjQwMTAxMTgzMTA4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjY5Y2Y0NjlhMDJmMWI1ZTdhYzc4YTQ5MTI4Mjg5OWUwZDY1MmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNmmsGoyAU0gtr9R0CCLIxX2w/N2
st1iP5O1hELHJXLtW8GDbVRvHjMg6b35GjwJKQIPNIHrYpvkio7kUDlmFX4JZ7CW
7aPBuuFp7CXVWWUpOAQsTQ95otatdjrUV96FRbUNZab6zByRz7IneNTjd50YvGHg
I1qOGg4Wc8vJ6JkYgNupjG+mb9+lxgYTJtoegaNoVKXIfBQVJFBl+HEh19tjeBoO
IT9iJZfsKamRy3oR/bZiOB+Js9oxkMZ00QJGXOn+XIJzgzljiJ/oBN4AMA7Bvuaz
xNlasE0CBVyC1XXUNBQJM5Tun1/Z8xVa9yyFgt5dWlmTYV+2Bs9XX5Kk3wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEJpz0aaAvG156x4pJEoKJng1lKoMB8GA1UdIwQY
MBaAFHmPex/YArPcar16XNp4amMR4dY9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTkt
MDlkMGFhMjhlNTUxLzEvUW1uUFJwb0M4Ylhuckhpa2tTZ29tZURXVXFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My8zMDg4M2EtMTZkNy00MjEyLTkxOTktMDlkMGFhMjhlNTUx
LzEvZVk5N0g5Z0NzOXhxdlhwYzJuaHFZeEhoMWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhI/wqpw
MA0GCSqGSIb3DQEBCwUAA4IBAQCx9Av9Mm/+2SMW0C9YK+7mQOTDGDY0fv9+yMP0
e5yLCSp6iPmzxSoAcfDU3A+rRL7j+iQ5rZsIzUTnZ2Pkxj0xww4CPUc7UOIBfu7t
pG2jJGp8q1WKy7s9HnGdl+xrBrQg1QpTjg1fNTd5m3OnQU+sVMHr36LtfgKlWlJw
lD93p0Li/AqWrJGB64celjlQToPbQJR+edK5ih3diOISlbirgkF1Ttm0jP6I7pnL
g+OGywbkxG2apWzklHFbYiPNfn5ztMFuybxXLCkzyLkzrh8j7VIEIoieChkjwnSy
ZSP/KZouM9UD5BXpCwuYdkRch7+IfvAw0YVCNWWkpf/euZFm
-----END CERTIFICATE-----
Generated at Tue Jun 4 03:17:35 2024 by rpki-client on console-ams.rpki-client.org