Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/dqzOalsEBUP9L95cIE0KpFAUhe0.roa
File: dqzOalsEBUP9L95cIE0KpFAUhe0.roa (raw, json)
Hash identifier: XCnLcVV/Ej3LmwzTm5yYo/uTZs2k6kRjt2QskidrXso=
Subject key identifier: 76:AC:CE:6A:5B:04:05:43:FD:2F:DE:5C:20:4D:0A:A4:50:14:85:ED
Certificate issuer: /CN=1b098412c984b89be38011a72a3c471975fc47a2
Certificate serial: 0191EF9953C3C4D6E1289D5131A0D3F94575
Authority key identifier: 1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/dqzOalsEBUP9L95cIE0KpFAUhe0.roa
Signing time: Sat 14 Sep 2024 08:14:48 +0000
ROA not before: Sat 14 Sep 2024 08:14:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214216
IP address blocks: 2a13:8340::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Sep 2024 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:ef:99:53:c3:c4:d6:e1:28:9d:51:31:a0:d3:f9:45:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b098412c984b89be38011a72a3c471975fc47a2
Validity
Not Before: Sep 14 08:14:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76acce6a5b040543fd2fde5c204d0aa4501485ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:63:49:68:73:6c:50:65:65:6a:61:63:d2:15:
bf:ef:fb:be:c9:75:bc:ad:fd:0c:7e:95:0e:82:f3:
08:2e:2d:62:71:9a:77:f9:ad:5f:4e:f6:6a:14:c4:
52:85:e7:7f:70:42:b6:62:2f:ee:a7:35:dd:55:4b:
a9:e2:e5:04:3d:e6:85:04:a2:01:d6:41:ae:03:c7:
58:9e:10:84:9a:c6:cb:eb:57:70:46:28:04:3f:b0:
09:bb:55:2c:1f:36:a6:b3:3b:34:8e:14:eb:98:51:
4e:63:a8:ad:84:fa:44:44:6c:79:7c:cd:89:38:b1:
a8:db:c9:31:98:a8:7a:74:fc:82:92:b3:19:21:42:
be:c7:f6:b7:01:72:73:87:cc:b1:52:b2:0d:ef:81:
84:9a:6f:3a:11:f5:7d:9e:95:1d:eb:ce:d6:07:59:
9d:54:91:13:8e:60:de:47:a6:6c:83:13:90:3c:35:
82:5e:87:c5:58:71:7d:a2:1b:28:db:73:40:22:74:
d6:65:0b:28:3b:d4:7c:9c:37:58:76:93:41:39:b8:
44:2f:3c:21:4c:3a:7e:de:f2:fd:25:ec:30:b8:d2:
27:35:4b:01:c3:5f:0b:8a:f3:a2:69:ec:b1:eb:5a:
53:c9:5c:83:5d:92:bd:71:1a:fe:7b:f5:c7:14:ed:
c3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AC:CE:6A:5B:04:05:43:FD:2F:DE:5C:20:4D:0A:A4:50:14:85:ED
X509v3 Authority Key Identifier:
keyid:1B:09:84:12:C9:84:B8:9B:E3:80:11:A7:2A:3C:47:19:75:FC:47:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwmEEsmEuJvjgBGnKjxHGXX8R6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/dqzOalsEBUP9L95cIE0KpFAUhe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/15e905-fa4f-4d83-bff6-70d13306cd1c/1/GwmEEsmEuJvjgBGnKjxHGXX8R6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:8340::/29
Signature Algorithm: sha256WithRSAEncryption
78:9d:a4:68:ba:16:8f:74:93:9a:8e:1d:e7:db:25:df:52:04:
ac:ae:5f:79:2c:87:5c:89:25:bc:34:fd:c8:83:30:db:8e:25:
90:80:49:06:b0:47:af:0d:10:ff:94:5c:cb:55:a8:d7:7e:b7:
75:d2:26:32:09:d0:07:a5:0e:bb:be:8d:85:5f:6f:78:0a:94:
cb:4c:ef:be:38:7f:40:ba:88:ce:9d:3d:5a:7f:18:e9:df:f4:
36:dd:68:e0:30:34:12:29:7d:18:63:f5:a2:30:68:90:57:d0:
3a:6d:05:d1:c0:6f:1e:bc:cd:a6:09:5c:16:af:0d:ca:db:13:
5f:fa:15:8a:b4:ab:92:19:49:a7:7a:b1:06:45:23:54:04:b7:
6a:87:d8:43:1c:3e:57:72:27:6b:51:a0:db:4c:ef:6a:8b:48:
03:90:5b:92:88:86:93:63:51:ec:51:73:5b:ab:bf:4a:83:12:
19:29:d4:69:97:05:25:1b:ac:68:99:ba:5f:fc:13:65:4b:44:
fe:cd:23:9d:48:0c:bc:b5:d6:67:17:5f:a8:c4:47:ca:ae:f0:
ca:11:cc:10:26:ce:b7:0b:58:71:47:0f:77:17:f8:6d:26:7d:
ae:61:ee:69:c7:b2:bc:01:c6:73:10:55:1d:a4:22:f4:74:58:
f7:73:3b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 28 08:47:09 2024 by rpki-client on console-ams.rpki-client.org