Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/QOShTNbhZF_Maz_iLs8synDomyg.roa
File: QOShTNbhZF_Maz_iLs8synDomyg.roa (raw, json)
Hash identifier: Y7DKNajt8W9iVVAFN4KVVdWkajMhsXgnQEevCyrEnwI=
Subject key identifier: 40:E4:A1:4C:D6:E1:64:5F:CC:6B:3F:E2:2E:CF:2C:CA:70:E8:9B:28
Certificate issuer: /CN=379d103b953071caa9e1a8973808904096e793d8
Certificate serial: 01905B72F4AA927DCC58D528FF24672E3164
Authority key identifier: 37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/QOShTNbhZF_Maz_iLs8synDomyg.roa
Signing time: Thu 27 Jun 2024 20:46:18 +0000
ROA not before: Thu 27 Jun 2024 20:46:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47447
IP address blocks: 2a06:fcc0:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:5b:72:f4:aa:92:7d:cc:58:d5:28:ff:24:67:2e:31:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379d103b953071caa9e1a8973808904096e793d8
Validity
Not Before: Jun 27 20:46:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40e4a14cd6e1645fcc6b3fe22ecf2cca70e89b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:35:74:cc:73:dc:7b:07:41:38:5c:4c:7b:14:
6b:5f:59:12:39:c1:26:d3:24:46:c2:75:22:b1:11:
48:db:f8:45:dd:63:e7:01:17:c2:b3:a6:cd:d5:4e:
d9:a6:c9:78:d7:fa:7d:24:4f:92:92:ec:ec:3a:43:
fc:ca:90:10:15:5e:91:2c:ef:14:6c:bd:70:53:f3:
95:4b:4e:27:27:77:88:62:76:c3:e2:e4:b2:56:d7:
ce:ab:9d:f8:3b:aa:c0:cc:27:77:0a:47:29:d8:75:
05:cd:6a:92:39:2b:2a:59:86:d8:db:69:2c:31:85:
f1:dc:5d:54:46:26:35:b4:7f:6c:55:b8:1d:d1:63:
91:82:b3:2a:11:7a:09:dc:a6:00:b8:ae:ae:82:75:
30:4e:fd:7d:a7:c4:f2:03:65:97:e8:34:9f:04:a6:
05:d4:c5:e4:4d:0f:4a:b8:8c:c3:a9:5c:9f:ca:bd:
bb:a4:04:41:ec:fe:b6:88:af:01:3b:a2:c4:7b:05:
c0:e3:64:82:8a:fa:85:95:a2:c6:20:c2:6c:77:6c:
97:0b:a4:7a:15:0c:ae:76:f1:dd:ed:15:ab:c8:69:
80:5d:78:68:69:37:63:d4:a6:f8:7b:7d:36:79:c8:
d9:70:5a:a8:40:e2:6f:e7:99:1c:55:31:2f:c5:a4:
21:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E4:A1:4C:D6:E1:64:5F:CC:6B:3F:E2:2E:CF:2C:CA:70:E8:9B:28
X509v3 Authority Key Identifier:
keyid:37:9D:10:3B:95:30:71:CA:A9:E1:A8:97:38:08:90:40:96:E7:93:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N50QO5Uwccqp4aiXOAiQQJbnk9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/QOShTNbhZF_Maz_iLs8synDomyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b18d38-9cf9-4519-911e-df2ac13cdb8b/1/N50QO5Uwccqp4aiXOAiQQJbnk9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:fcc0:a::/48
Signature Algorithm: sha256WithRSAEncryption
e6:85:59:28:a2:e6:58:08:f8:4d:68:de:e0:74:05:47:7b:53:
0a:d1:0d:e1:18:d8:4e:16:c4:f8:a6:df:63:bc:af:a6:fb:ea:
f6:15:70:e5:92:d3:60:0f:36:3c:be:f5:e2:2b:d6:3d:d4:3e:
6e:fb:90:25:98:26:15:d3:86:28:18:f1:9c:29:10:6e:d0:0f:
61:94:a7:4e:d5:6c:44:be:e3:31:aa:b7:af:9a:7b:3a:10:bc:
73:10:d2:02:5e:56:a7:cf:31:4c:22:a6:88:fc:a1:6b:4f:b8:
d7:fd:da:a2:b8:de:9e:70:8d:26:ea:75:08:2f:d0:bd:ce:00:
9e:40:36:19:ee:b6:c4:3e:3f:ba:b8:bf:ea:17:52:c2:1e:8b:
63:5a:b0:f1:74:8d:0e:83:59:83:d3:13:d7:9b:4c:89:c7:97:
b7:f1:17:21:db:79:23:27:73:18:61:f3:bf:66:1b:37:b2:ec:
42:13:97:5c:c9:14:67:ae:68:78:5f:15:89:38:ca:75:62:88:
10:6d:32:7a:68:54:73:3a:ae:b0:c7:89:32:e6:5c:ed:b8:15:
e8:8f:b5:44:63:96:2b:77:fb:f4:7a:2f:be:f3:cf:d0:c5:16:
89:98:3f:83:87:e3:eb:6e:3a:dd:9f:cf:f8:bc:40:70:b5:8b:
22:37:7a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:43:36 2024 by rpki-client on console-ams.rpki-client.org