Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Q5w5lw2_Ethn7rqLVtT8wDAf8DM.roa
File: Q5w5lw2_Ethn7rqLVtT8wDAf8DM.roa (raw, json)
Hash identifier: NBCdPcS/9puL/z7nnSkEpC7IwBMMEtykE5AMWVw8ZL0=
Subject key identifier: 43:9C:39:97:0D:BF:12:D8:67:EE:BA:8B:56:D4:FC:C0:30:1F:F0:33
Certificate issuer: /CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Certificate serial: 018CC42576997716BF98F261B6C5340E8EDC
Authority key identifier: B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Q5w5lw2_Ethn7rqLVtT8wDAf8DM.roa
Signing time: Mon 01 Jan 2024 08:30:38 +0000
ROA not before: Mon 01 Jan 2024 08:30:38 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213115
IP address blocks: 2a0b:b87:ffb0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:25:76:99:77:16:bf:98:f2:61:b6:c5:34:0e:8e:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1a7b0d8de8251d36d7c83faf6bc7efec73b5034
Validity
Not Before: Jan 1 08:30:38 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=439c39970dbf12d867eeba8b56d4fcc0301ff033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:80:59:9e:63:4e:98:85:2f:f5:d0:bf:cc:8a:
d5:30:ad:f5:c1:68:77:e9:2a:3f:83:e4:a4:14:05:
8d:d3:f7:22:74:f3:99:c5:f9:cd:9d:dd:0e:a9:06:
c8:05:75:87:73:c7:14:53:ba:40:aa:17:0c:a7:27:
18:46:e9:8e:bd:3f:94:35:02:12:70:cd:fd:0e:74:
ee:19:07:85:bb:7f:79:8a:2d:94:e4:17:38:91:07:
bf:bf:11:c6:49:c6:ab:fa:95:b3:e1:96:37:ba:4f:
12:8c:b4:b7:d9:96:4a:c1:28:f1:cc:b7:e7:a9:04:
63:d8:d8:d2:5d:3f:14:63:2b:f4:d1:9a:ef:f7:39:
fb:00:86:5b:c4:da:aa:db:05:ed:57:bd:56:8f:1a:
75:d4:14:3f:72:35:66:70:74:6b:f1:3c:8b:8b:1e:
07:3f:f2:5f:61:37:f8:98:cc:a3:7c:b3:e0:9a:2d:
92:b6:eb:49:19:c3:9d:37:6d:22:8b:e4:9d:dd:d2:
20:a6:16:84:14:cd:dc:79:26:5c:b7:30:9b:20:9a:
aa:1f:a5:b5:71:ed:77:42:6a:f3:77:30:b2:67:59:
67:61:ac:c6:ad:9c:31:f8:e2:b4:82:b2:a8:9a:39:
02:bc:bc:49:a5:8c:b6:be:a9:d3:db:b1:dc:3f:b7:
b2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9C:39:97:0D:BF:12:D8:67:EE:BA:8B:56:D4:FC:C0:30:1F:F0:33
X509v3 Authority Key Identifier:
keyid:B1:A7:B0:D8:DE:82:51:D3:6D:7C:83:FA:F6:BC:7E:FE:C7:3B:50:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/saew2N6CUdNtfIP69rx-_sc7UDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/Q5w5lw2_Ethn7rqLVtT8wDAf8DM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f134c8-f814-4b71-957b-394acd21f39b/1/saew2N6CUdNtfIP69rx-_sc7UDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:b87:ffb0::/48
Signature Algorithm: sha256WithRSAEncryption
7d:10:21:c3:6a:af:2c:7f:b4:4f:93:d5:68:50:4c:7d:69:54:
53:5f:d3:95:b8:45:64:0d:40:41:3f:d6:1f:4b:21:ee:a1:5c:
ba:57:5a:e4:fd:70:b9:1f:e5:2b:a6:67:95:5c:93:ab:e3:be:
30:7d:f7:5c:ca:5d:28:49:8e:42:ed:15:3d:bc:d3:bf:de:af:
95:64:71:e2:16:28:e6:2a:60:ba:75:4d:45:cc:d0:b9:e8:31:
80:ee:90:e6:89:86:d8:9b:e8:a2:05:57:19:34:14:56:43:ba:
e3:16:ca:16:a1:8b:84:74:1e:cc:ca:2d:46:4a:c9:b0:a6:cf:
d6:6f:6d:8f:56:dd:72:44:7f:43:a6:4f:f5:a8:74:77:c1:7f:
12:64:26:7b:8d:f0:2d:e2:d8:44:a1:c3:d6:8d:0f:61:ef:e5:
5e:4c:89:59:0e:5c:9f:e4:33:ef:ac:9d:95:2e:ab:6f:a9:ad:
c1:eb:ad:4e:bb:56:72:30:0f:0f:01:31:f1:62:61:9e:7b:41:
0b:f4:17:99:f0:11:c2:0e:2c:58:8d:e9:3a:e9:8a:f6:2f:45:
f4:4a:52:b0:28:68:07:d3:c9:8b:33:f2:58:53:2c:86:26:aa:
55:f1:27:a2:dc:c0:ba:e7:af:10:a2:f6:d4:17:76:db:80:97:
b1:a5:84:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 16:13:52 2024 by rpki-client on console-ams.rpki-client.org