Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/cq-aHm-UoUn0CnLPrgfFz8I21CM.roa
File: cq-aHm-UoUn0CnLPrgfFz8I21CM.roa (raw, json)
Hash identifier: 2OVQIOeRpyUInQSn+XI7VTU3nU9Fwlsfgmq7P3AoKy4=
Subject key identifier: 72:AF:9A:1E:6F:94:A1:49:F4:0A:72:CF:AE:07:C5:CF:C2:36:D4:23
Certificate issuer: /CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Certificate serial: 018CC3B73943E7B56F5DB7D78EA9C007551B
Authority key identifier: 6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/cq-aHm-UoUn0CnLPrgfFz8I21CM.roa
Signing time: Mon 01 Jan 2024 06:30:13 +0000
ROA not before: Mon 01 Jan 2024 06:30:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198998
IP address blocks: 2a13:b487::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:39:43:e7:b5:6f:5d:b7:d7:8e:a9:c0:07:55:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca977f854c63dc9f97a18be7b13002121a5d384
Validity
Not Before: Jan 1 06:30:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=72af9a1e6f94a149f40a72cfae07c5cfc236d423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:de:f7:e0:d3:55:94:70:65:34:bc:de:88:
10:66:dd:25:c5:45:f0:23:38:fb:59:d8:ca:f2:d2:
41:e6:a0:83:4c:d7:f6:d8:75:63:b1:0a:b2:02:0e:
4f:ba:75:bc:70:73:eb:ae:f6:41:66:d3:41:b0:11:
e9:d2:8d:54:50:dd:1e:52:11:e7:e9:12:e9:47:1f:
ae:37:9f:f0:e8:f4:ff:b9:af:8e:dc:79:e6:8d:b1:
04:24:0b:6b:98:c7:99:ad:2d:be:03:c7:fe:ab:41:
85:ff:7b:a5:93:5c:0a:4b:43:7b:c9:b8:be:16:a7:
4c:e3:df:e3:d7:9b:80:c3:06:91:3a:cc:30:47:5b:
f0:0e:9c:39:b4:8c:89:15:a4:02:88:0b:58:19:2a:
11:ca:d9:07:1b:92:a6:55:8a:30:12:7d:a2:bd:9d:
59:96:a6:c6:14:67:9d:04:f2:eb:7d:1c:db:38:97:
65:6a:f0:f4:76:74:83:20:c4:a4:5a:ba:59:d1:dd:
0e:33:ac:45:66:c7:7a:b3:d0:09:1b:5a:0b:ad:ca:
85:b6:eb:07:7e:32:fa:e9:a8:df:9a:82:e3:44:ba:
8c:be:29:44:bf:0b:94:ed:37:f0:1a:ba:f7:ab:17:
69:70:ed:20:17:81:3d:52:6e:83:d6:af:5c:5b:95:
4b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AF:9A:1E:6F:94:A1:49:F4:0A:72:CF:AE:07:C5:CF:C2:36:D4:23
X509v3 Authority Key Identifier:
keyid:6C:A9:77:F8:54:C6:3D:C9:F9:7A:18:BE:7B:13:00:21:21:A5:D3:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKl3-FTGPcn5ehi-exMAISGl04Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/cq-aHm-UoUn0CnLPrgfFz8I21CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/09ccb4-2483-4ba7-9634-d6a5950cadf2/1/bKl3-FTGPcn5ehi-exMAISGl04Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:b487::/36
Signature Algorithm: sha256WithRSAEncryption
13:c1:a0:fd:71:05:06:a2:51:81:6b:1e:21:f8:ce:42:c9:58:
42:f1:af:f5:6a:48:1e:97:5a:2f:63:13:4b:26:db:54:6b:3a:
e8:fc:41:d7:b8:f9:cf:35:b4:73:30:2b:81:4b:ea:63:ed:3d:
2b:14:95:21:08:75:e3:0f:0f:0c:49:c0:17:99:10:2c:92:8b:
ad:fa:d8:f1:03:15:bf:b5:ad:59:6e:99:14:85:22:d2:27:1b:
49:d4:6a:f3:e4:fc:81:97:93:5c:d0:07:1f:b8:ba:9a:bc:d5:
1a:d3:c4:5b:cb:74:ed:a4:35:61:7c:8a:60:e9:8c:90:cb:7f:
45:36:81:d5:b6:ef:c2:20:4e:6c:22:13:12:11:38:d6:42:25:
44:3d:9b:d1:f0:15:58:04:fa:d8:48:78:41:63:97:d0:ac:1a:
0e:b4:f9:84:3d:ba:51:db:29:9a:eb:da:07:b2:60:91:a7:55:
29:8f:fc:12:a1:21:3a:f2:e2:31:3a:8c:2a:1e:2a:fd:77:47:
de:8f:6d:25:3e:0b:12:fd:93:f2:c9:81:78:d9:c5:2f:e7:2f:
13:5b:93:38:c5:44:c7:68:36:e1:0b:7f:25:94:a9:ea:c9:b2:
e6:75:ed:dc:e7:33:f4:5b:5d:b0:7f:13:bf:bf:05:db:8a:a9:
af:d9:5b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:32:33 2024 by rpki-client on console-ams.rpki-client.org