Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/QaRIxgrhB5H1p1um6MREj_1Hf7E.roa
File: QaRIxgrhB5H1p1um6MREj_1Hf7E.roa (raw, json)
Hash identifier: pj7eIcE+hdOEDxqUUexB08xXehV2OWad0FYHZuzPzgg=
Subject key identifier: 41:A4:48:C6:0A:E1:07:91:F5:A7:5B:A6:E8:C4:44:8F:FD:47:7F:B1
Certificate issuer: /CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Certificate serial: 018CC6B8DBC620A0F66139C2DDA5300F9774
Authority key identifier: 9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/QaRIxgrhB5H1p1um6MREj_1Hf7E.roa
Signing time: Mon 01 Jan 2024 20:30:52 +0000
ROA not before: Mon 01 Jan 2024 20:30:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 148971
IP address blocks: 2a0c:9a40:82f0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 May 2024 14:49:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:db:c6:20:a0:f6:61:39:c2:dd:a5:30:0f:97:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e95a361fe2b2c5292626ba4c56a65a814e48008
Validity
Not Before: Jan 1 20:30:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41a448c60ae10791f5a75ba6e8c4448ffd477fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:69:56:b9:d6:0f:46:d5:ce:33:d6:16:af:67:
b1:4f:2f:07:f1:e3:2d:3b:f2:63:a9:d6:18:06:dc:
00:08:1e:13:bc:fe:f4:e3:dc:55:2f:16:aa:7f:1f:
36:f8:8f:a8:c2:89:8d:b1:ca:ce:7f:ef:11:1f:00:
31:cd:a2:60:fd:c1:4f:fc:fa:51:af:d3:cb:f5:5e:
44:82:12:5f:53:1b:0c:ee:da:81:6a:af:e7:ec:cb:
59:2a:78:8b:06:28:9e:ad:1d:5a:a4:82:25:18:27:
3f:3e:2f:2e:0a:6b:a3:84:cc:81:0b:67:35:1d:8f:
ed:48:fd:07:99:88:66:0e:f4:be:e7:a0:d7:01:33:
38:47:94:9e:2f:28:19:e2:4d:43:8f:90:79:8e:35:
61:54:4c:76:f5:6c:2b:2d:34:d1:76:c7:8d:69:59:
9b:4a:37:a1:69:00:75:b1:e5:23:19:27:73:ff:d3:
d6:4f:3b:36:cb:28:51:44:80:b2:cb:72:a3:61:6f:
83:24:51:8b:2f:1d:de:b8:66:eb:ce:42:7f:60:ef:
a3:2d:dd:1d:f5:4d:dc:d1:71:67:b3:18:77:92:11:
f4:05:38:80:44:e6:09:6d:b2:7f:14:a0:ec:99:e7:
69:08:c2:47:c1:01:1e:d1:24:e2:3b:f6:e2:5f:d1:
09:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A4:48:C6:0A:E1:07:91:F5:A7:5B:A6:E8:C4:44:8F:FD:47:7F:B1
X509v3 Authority Key Identifier:
keyid:9E:95:A3:61:FE:2B:2C:52:92:62:6B:A4:C5:6A:65:A8:14:E4:80:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/npWjYf4rLFKSYmukxWplqBTkgAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/QaRIxgrhB5H1p1um6MREj_1Hf7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f96f73-6686-4164-b23f-bf4e527b9fa8/1/npWjYf4rLFKSYmukxWplqBTkgAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:9a40:82f0::/44
Signature Algorithm: sha256WithRSAEncryption
21:a5:80:d0:5c:29:b5:38:f6:51:d3:78:c8:5b:ac:f6:87:50:
9e:2f:f0:3b:8f:9a:50:0e:6a:29:50:ad:5e:e9:56:1f:94:8d:
03:da:e8:3b:64:90:c8:4e:77:7b:00:c5:9b:1b:99:20:5b:26:
47:5c:4f:0e:60:a2:6b:28:a1:7d:f8:02:16:47:84:3f:bc:8a:
04:71:3e:c1:fe:e8:c8:32:88:a4:b7:0f:f2:b7:d0:7a:2d:55:
33:8d:f3:b2:4d:c1:e2:6c:6f:1b:f9:d9:86:4b:01:c5:b6:a7:
84:c1:ea:b6:33:62:68:ac:c5:5b:9a:e6:d8:1a:d6:3f:c8:ea:
9c:05:03:03:9a:4b:2c:98:a8:7d:f5:60:2b:2f:f4:b5:d5:f3:
7f:47:ad:d7:38:eb:90:a7:f8:9a:26:93:40:cd:47:bc:38:54:
2f:e3:ba:0a:5d:cd:28:84:3e:2b:f8:cb:f9:ea:1a:c5:ba:d9:
75:51:16:c0:ee:a5:d4:e6:ae:e8:52:d2:14:23:40:fb:b2:51:
89:c4:0a:a8:7b:cc:11:10:58:99:7a:6d:c6:df:0a:05:3e:8d:
33:f0:3b:7b:f8:ac:85:36:85:24:84:e3:5e:6c:d9:25:12:40:
dd:0f:97:87:32:1c:c3:52:1a:bb:d2:b3:0d:4c:20:ed:ea:2f:
19:dd:0e:de
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGuNvGIKD2YTnC3aUwD5d0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllOTVhMzYxZmUyYjJjNTI5MjYyNmJhNGM1NmE2NWE4MTRl
NDgwMDgwHhcNMjQwMTAxMjAzMDUyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWE0NDhjNjBhZTEwNzkxZjVhNzViYTZlOGM0NDQ4ZmZkNDc3ZmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWlWudYPRtXOM9YWr2exTy8H8eMt
O/JjqdYYBtwACB4TvP7049xVLxaqfx82+I+owomNscrOf+8RHwAxzaJg/cFP/PpR
r9PL9V5EghJfUxsM7tqBaq/n7MtZKniLBiierR1apIIlGCc/Pi8uCmujhMyBC2c1
HY/tSP0HmYhmDvS+56DXATM4R5SeLygZ4k1Dj5B5jjVhVEx29WwrLTTRdseNaVmb
SjehaQB1seUjGSdz/9PWTzs2yyhRRICyy3KjYW+DJFGLLx3euGbrzkJ/YO+jLd0d
9U3c0XFnsxh3khH0BTiAROYJbbJ/FKDsmedpCMJHwQEe0STiO/biX9EJSwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEGkSMYK4QeR9adbpujERI/9R3+xMB8GA1UdIwQY
MBaAFJ6Vo2H+KyxSkmJrpMVqZagU5IAIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2Yt
YmY0ZTUyN2I5ZmE4LzEvUWFSSXhncmhCNUgxcDF1bTZNUkVqXzFIZjdFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mOTZmNzMtNjY4Ni00MTY0LWIyM2YtYmY0ZTUyN2I5ZmE4
LzEvbnBXallmNHJMRktTWW11a3hXcGxxQlRrZ0FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKgyaQILw
MA0GCSqGSIb3DQEBCwUAA4IBAQAhpYDQXCm1OPZR03jIW6z2h1CeL/A7j5pQDmop
UK1e6VYflI0D2ug7ZJDITnd7AMWbG5kgWyZHXE8OYKJrKKF9+AIWR4Q/vIoEcT7B
/ujIMoiktw/yt9B6LVUzjfOyTcHibG8b+dmGSwHFtqeEweq2M2JorMVbmubYGtY/
yOqcBQMDmkssmKh99WArL/S11fN/R63XOOuQp/iaJpNAzUe8OFQv47oKXc0ohD4r
+Mv56hrFutl1URbA7qXU5q7oUtIUI0D7slGJxAqoe8wREFiZem3G3woFPo0z8Dt7
+KyFNoUkhONebNklEkDdD5eHMhzDUhq70rMNTCDt6i8Z3Q7e
-----END CERTIFICATE-----
Generated at Thu May 16 22:38:46 2024 by rpki-client on console-ams.rpki-client.org