Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/c-QM_zmXNlOh3pbpb27Q7-EGACQ.roa
File: c-QM_zmXNlOh3pbpb27Q7-EGACQ.roa (raw, json)
Hash identifier: HMXne9H6PTeybpi3SKf/Brk7LvuFcUO2ZKV5+ADNKY0=
Subject key identifier: 73:E4:0C:FF:39:97:36:53:A1:DE:96:E9:6F:6E:D0:EF:E1:06:00:24
Certificate issuer: /CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Certificate serial: 018CC64B372EAECA83258E8C45AE423469A6
Authority key identifier: 79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/c-QM_zmXNlOh3pbpb27Q7-EGACQ.roa
Signing time: Mon 01 Jan 2024 18:31:07 +0000
ROA not before: Mon 01 Jan 2024 18:31:07 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 139317
IP address blocks: 2a12:3fc6::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.mft
rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 14:36:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:37:2e:ae:ca:83:25:8e:8c:45:ae:42:34:69:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=798f7b1fd802b3dc6abd7a5cda786a6311e1d63d
Validity
Not Before: Jan 1 18:31:07 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73e40cff39973653a1de96e96f6ed0efe1060024
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8b:a2:c2:47:43:26:c7:b5:9e:75:b1:1b:b2:
1c:2b:a4:c1:13:7f:1f:11:8b:a9:69:cb:53:1c:fb:
c9:35:55:bb:1e:ba:33:f2:cc:59:c7:3a:54:53:c8:
06:53:c9:0f:da:39:22:ad:56:13:01:9f:f0:62:b2:
bf:5f:7b:a9:4c:ce:61:d5:81:dc:a0:9a:43:b3:82:
90:fc:80:ec:51:dc:10:38:fc:a6:d7:68:d8:ed:ae:
98:0e:89:5e:32:c7:34:16:93:23:c7:4b:be:3a:3b:
67:96:d5:ae:68:09:14:d9:bf:a8:0b:f5:0e:83:ff:
bd:84:68:4b:30:08:12:fa:db:1d:cc:bf:c9:8b:92:
28:ed:a5:6f:a3:0b:72:eb:70:84:5f:52:82:b2:b6:
28:63:37:53:92:3f:5e:38:bf:70:c6:92:66:7d:2e:
54:62:9a:49:ca:20:4a:9f:96:cf:a2:88:1e:24:84:
93:3c:36:bd:46:5c:b6:95:5b:41:6f:2b:d1:69:e5:
e9:78:a4:21:48:4f:63:86:a5:7f:7b:48:1a:04:7f:
a9:e5:b2:c5:72:f8:a2:50:19:97:63:bf:d9:20:23:
63:29:5d:f1:00:99:a8:0f:38:6b:6f:f6:cf:c1:59:
2a:ff:65:6a:1b:a9:f1:80:f0:8f:19:5c:ff:8b:f8:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E4:0C:FF:39:97:36:53:A1:DE:96:E9:6F:6E:D0:EF:E1:06:00:24
X509v3 Authority Key Identifier:
keyid:79:8F:7B:1F:D8:02:B3:DC:6A:BD:7A:5C:DA:78:6A:63:11:E1:D6:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eY97H9gCs9xqvXpc2nhqYxHh1j0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/c-QM_zmXNlOh3pbpb27Q7-EGACQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/30883a-16d7-4212-9199-09d0aa28e551/1/eY97H9gCs9xqvXpc2nhqYxHh1j0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:3fc6::/44
Signature Algorithm: sha256WithRSAEncryption
5e:6d:24:81:b8:4a:3e:86:5a:d1:30:f4:8b:3b:c4:77:54:f8:
1e:7e:c1:70:25:a5:1d:dd:87:b6:5b:27:1a:e9:2a:bf:4b:44:
98:9b:28:f9:a6:ec:75:e1:81:e9:0f:7e:aa:74:bc:90:7a:15:
ec:84:77:26:59:68:93:24:e5:af:62:84:ef:4d:84:57:2b:ff:
63:65:4a:f7:ec:c4:5a:a7:0c:ee:f8:bd:7d:2e:82:34:35:85:
4f:6d:d3:8a:08:f1:d8:43:1c:04:7e:10:e4:d2:82:53:4f:83:
80:62:17:a4:88:88:b1:4c:a5:59:06:e1:99:e9:ea:ad:12:ab:
d2:30:e3:be:6d:1a:29:1f:de:ec:9a:b0:5a:c5:7b:b7:60:12:
79:53:71:45:7e:85:74:f7:e4:d3:25:69:f4:af:73:52:29:07:
f4:eb:91:ed:74:72:51:e5:3d:2a:2e:10:74:88:4d:99:ca:17:
9f:8d:25:6c:8f:e5:4d:ae:7c:bc:2c:55:4f:fe:37:9e:eb:5b:
b7:23:69:e0:76:c7:85:7c:fb:ae:6b:7e:fe:18:63:f7:96:d6:
ed:15:82:9a:db:55:fe:86:95:7f:b7:3b:7d:33:02:b6:1e:7a:
6a:ec:02:c8:62:3c:7d:2e:62:5e:1e:66:09:51:f6:c7:81:ff:
fa:ec:1f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 22:49:31 2024 by rpki-client on console-fra.rpki-client.org