Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/QIrGHOfZ_JI56-_dKM1hpQ_mI4Y.roa
File: QIrGHOfZ_JI56-_dKM1hpQ_mI4Y.roa (raw, json)
Hash identifier: bWjqV698nhcNBAp02zS2YI203Ho57rs7hgQY+B6x/VM=
Subject key identifier: 40:8A:C6:1C:E7:D9:FC:92:39:EB:EF:DD:28:CD:61:A5:0F:E6:23:86
Certificate issuer: /CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Certificate serial: 018F80C9E37DD69C298F42BF67D9865C0387
Authority key identifier: CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/QIrGHOfZ_JI56-_dKM1hpQ_mI4Y.roa
Signing time: Thu 16 May 2024 09:44:25 +0000
ROA not before: Thu 16 May 2024 09:44:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12586
IP address blocks: 2a14:4040::/32 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.mft
rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 30 Jun 2024 20:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:80:c9:e3:7d:d6:9c:29:8f:42:bf:67:d9:86:5c:03:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd9173bc828ab71da2ebcafa7f898ec6aa1eea76
Validity
Not Before: May 16 09:44:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=408ac61ce7d9fc9239ebefdd28cd61a50fe62386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b6:1a:66:fd:38:69:b4:83:53:d8:c6:2d:c7:
c3:3c:3c:00:63:f9:42:fa:af:14:da:53:96:ff:3f:
5a:64:d7:7b:fb:c6:ea:25:bc:40:62:c3:58:f6:e1:
55:ef:c6:31:b0:21:28:2b:22:2c:db:cc:93:1b:17:
2e:8c:5b:d6:9e:a3:ed:38:db:a4:d9:8f:a5:ae:9f:
1e:12:e1:42:31:02:18:13:87:9d:fb:1b:d2:d4:0e:
2a:8e:65:fa:58:cc:56:e9:91:e6:b0:7f:0e:2a:c0:
dc:8f:ec:1f:c5:61:02:07:92:5a:80:95:ce:76:06:
9d:58:ca:2e:72:dd:16:f0:1b:0f:88:66:ba:5b:40:
5a:4d:81:91:93:3f:dd:0f:8a:8d:d0:7a:67:e4:91:
b1:d7:8c:b4:04:3a:21:6b:c0:23:a0:a7:c0:cd:9d:
7f:38:f3:ce:62:f3:05:44:b6:63:ac:f2:ff:78:56:
cc:2b:9a:80:90:5c:05:e3:42:53:bf:f2:d2:37:f5:
82:29:34:9a:1b:50:9a:9d:c9:d1:79:c2:cb:f4:ac:
a6:52:e7:f3:38:ec:f0:5e:cc:ae:78:ab:6d:f9:89:
71:2d:27:ac:6f:2d:49:b5:8f:16:8a:e1:ca:bc:fc:
c2:d8:e3:39:2d:e3:42:29:3b:aa:72:ae:b2:ed:9d:
0a:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8A:C6:1C:E7:D9:FC:92:39:EB:EF:DD:28:CD:61:A5:0F:E6:23:86
X509v3 Authority Key Identifier:
keyid:CD:91:73:BC:82:8A:B7:1D:A2:EB:CA:FA:7F:89:8E:C6:AA:1E:EA:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zZFzvIKKtx2i68r6f4mOxqoe6nY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/QIrGHOfZ_JI56-_dKM1hpQ_mI4Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/5b8b9c-8f19-4c6b-afd7-c694260017b0/1/zZFzvIKKtx2i68r6f4mOxqoe6nY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4040::/32
Signature Algorithm: sha256WithRSAEncryption
42:85:30:c4:f1:8e:f6:ca:74:c3:a1:dc:66:ef:47:48:6d:51:
79:57:4b:f3:81:97:65:94:9c:27:ad:41:1d:8a:9b:90:97:16:
08:ff:6c:13:c7:55:1c:a8:31:25:6d:57:45:82:7b:8c:53:e6:
2b:82:8e:4a:80:5f:e0:a5:fb:23:53:aa:ed:49:7f:bc:1e:78:
0c:74:ff:52:12:7a:4f:ec:91:99:e0:fa:ad:1b:78:be:bb:00:
95:62:ed:43:95:40:d6:c0:5b:02:6e:0c:fb:4b:7d:e1:f7:40:
8f:2d:2b:4d:d4:5c:e4:ed:fe:b8:7c:43:92:d0:1d:35:2b:a4:
fd:de:12:dc:ad:7a:44:0e:4e:e9:b7:32:8c:af:22:f0:a6:c0:
b7:3a:7e:91:8a:42:c4:60:ea:b0:a1:e4:3e:2b:31:0e:0a:a2:
88:19:75:18:aa:86:a1:73:5e:b7:41:9e:b2:8a:1c:9b:be:ce:
27:e7:05:cc:3b:5d:13:52:7e:96:f8:05:a2:22:10:52:df:7d:
66:81:28:08:68:96:48:cd:bc:b8:7c:6a:c0:0a:65:08:a6:29:
15:dc:5e:b7:92:65:54:9c:f1:b8:35:36:21:66:86:ce:8d:f5:
f5:37:cb:ea:c7:70:e1:77:d0:09:a7:bd:64:52:b1:35:ce:8a:
9e:d7:17:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 02:49:41 2024 by rpki-client on console-ams.rpki-client.org