Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/XQOjAQpyqyb6puk1dS3QCgIuHvA.roa
File: XQOjAQpyqyb6puk1dS3QCgIuHvA.roa (raw, json)
Hash identifier: qcxPXUXCqSKwrWFDgbdAXxRmTz7IWfeyy1JGuY5RB1I=
Subject key identifier: 5D:03:A3:01:0A:72:AB:26:FA:A6:E9:35:75:2D:D0:0A:02:2E:1E:F0
Certificate issuer: /CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Certificate serial: 018CC6B7B114C5CF2150B1A5FF7E907DD0B0
Authority key identifier: 38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/XQOjAQpyqyb6puk1dS3QCgIuHvA.roa
Signing time: Mon 01 Jan 2024 20:29:36 +0000
ROA not before: Mon 01 Jan 2024 20:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211454
IP address blocks: 2a0a:d6c0:eff4::/48 maxlen: 48
2a0a:d6c0:2157::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jul 2024 05:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:b1:14:c5:cf:21:50:b1:a5:ff:7e:90:7d:d0:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=387d6df7eb7542e0333aeedd14adff8f51f8cbd8
Validity
Not Before: Jan 1 20:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5d03a3010a72ab26faa6e935752dd00a022e1ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:be:63:4f:22:a7:22:db:ec:d1:f9:e3:12:47:
2b:70:11:f8:50:d6:53:4a:a2:c1:02:81:bb:3d:51:
e3:c7:91:eb:bf:7d:d1:70:ee:7b:b5:7b:05:3d:15:
6d:5d:e5:e9:44:a2:db:bf:e1:db:ec:9d:0d:6b:be:
d8:95:0e:96:f4:45:59:16:3c:ad:f1:3c:dc:40:40:
25:c3:31:74:dd:b4:56:80:f8:68:3c:8e:68:aa:3f:
b2:53:74:7f:e5:b9:16:10:f5:22:df:a4:c7:67:9f:
09:ef:59:d1:9c:b5:e0:30:13:bc:8c:6d:d5:77:e9:
8c:84:45:e5:b7:c5:bb:f3:69:5a:2f:9d:66:3d:76:
6d:2a:64:6d:85:a1:95:92:3b:c2:7d:e9:ac:e6:75:
89:8d:d8:33:12:20:c6:37:03:c0:38:cd:32:f8:bc:
db:9e:a8:eb:da:59:6d:02:70:d5:b4:60:3e:e5:67:
2e:29:57:58:e6:cc:6f:ef:50:71:86:38:bc:ea:f6:
9a:32:73:0e:be:2b:fe:6d:e4:cc:e3:6e:05:ca:79:
5f:db:0f:1f:15:e5:09:71:c5:d5:22:50:a8:87:80:
2a:17:d7:08:ce:26:20:1f:aa:05:a5:5a:62:dd:31:
b9:0d:5c:e8:ab:36:1a:f1:98:5c:4d:8f:de:5c:11:
54:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:03:A3:01:0A:72:AB:26:FA:A6:E9:35:75:2D:D0:0A:02:2E:1E:F0
X509v3 Authority Key Identifier:
keyid:38:7D:6D:F7:EB:75:42:E0:33:3A:EE:DD:14:AD:FF:8F:51:F8:CB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OH1t9-t1QuAzOu7dFK3_j1H4y9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/XQOjAQpyqyb6puk1dS3QCgIuHvA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/d4a89c-54b2-445b-bb7c-609a48b2b14d/1/OH1t9-t1QuAzOu7dFK3_j1H4y9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:d6c0:2157::/48
2a0a:d6c0:eff4::/48
Signature Algorithm: sha256WithRSAEncryption
b4:cb:0a:7c:39:42:f3:5f:f9:b5:99:6b:59:52:eb:9c:5a:d3:
08:bd:49:80:b3:c4:09:2d:1d:02:cd:03:87:83:ec:88:1b:58:
a0:12:d3:8b:04:e7:90:8c:f9:7f:46:45:ca:49:b6:9e:3c:6c:
12:86:79:12:01:23:7d:cb:c7:75:8c:35:2f:61:24:eb:8f:7c:
bd:1b:ea:35:20:8c:e1:33:38:4e:a6:7a:8a:44:ae:d3:3c:75:
83:2a:95:f9:83:eb:3d:52:e5:68:94:52:52:fc:b9:63:ed:09:
5a:c2:7c:b5:a7:e9:b9:42:54:6f:cf:f0:b1:66:4f:a2:45:57:
a5:c1:58:20:bd:d0:7b:2b:97:10:d1:5d:d5:fe:50:5b:c0:62:
6b:16:0a:0b:51:eb:50:bc:8d:25:f5:b0:95:ca:63:82:0a:ea:
2f:df:24:a9:c7:c2:15:7f:25:4f:22:98:51:90:cd:31:23:9b:
80:fc:5d:e4:b3:13:4e:a0:b6:fa:18:e9:64:05:ee:c0:03:6b:
4f:4c:27:14:92:54:f1:7e:db:9e:5f:f5:ce:32:56:aa:99:82:
a4:cf:3c:3b:24:3d:a7:1a:d6:19:0c:4f:70:0a:d2:d3:2f:1c:
5b:bd:66:b6:cd:51:3c:8c:18:98:33:61:40:2e:64:8d:39:cc:
43:8a:30:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 13:28:33 2024 by rpki-client on console-fra.rpki-client.org