Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/TqwTSrBzrTYmNyo8T1t8BDlT1f4.roa
File: TqwTSrBzrTYmNyo8T1t8BDlT1f4.roa (raw, json)
Hash identifier: w+XCCT06YsgjpDolNno8LnRxzdvXMfW6wcI2e+xABDk=
Subject key identifier: 4E:AC:13:4A:B0:73:AD:36:26:37:2A:3C:4F:5B:7C:04:39:53:D5:FE
Certificate issuer: /CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Certificate serial: 018CC94C2C73F785EE0BF2C627A034752D9E
Authority key identifier: 46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/TqwTSrBzrTYmNyo8T1t8BDlT1f4.roa
Signing time: Tue 02 Jan 2024 08:31:01 +0000
ROA not before: Tue 02 Jan 2024 08:31:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 41960
IP address blocks: 2a00:d220::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:2c:73:f7:85:ee:0b:f2:c6:27:a0:34:75:2d:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ccab7479a4e0d8a4177350a00a69bd883b048d
Validity
Not Before: Jan 2 08:31:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4eac134ab073ad3626372a3c4f5b7c043953d5fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e1:9e:e1:0d:2f:60:ad:40:f5:bc:dd:b8:22:
42:13:76:9e:12:7a:26:28:44:d4:8d:1f:17:ed:34:
7c:1d:cf:e4:af:b7:b0:60:87:87:88:9a:2f:46:0b:
84:28:4e:b1:7a:2d:e9:a8:8c:a5:55:47:92:45:b6:
d8:04:2f:38:8f:aa:41:b8:0c:d3:8d:de:76:db:54:
9f:a9:89:60:e8:50:a0:2b:94:1e:12:b4:cf:24:e1:
b6:b0:84:2a:2c:dc:5b:ae:49:4d:e3:c9:4d:1e:7a:
fc:d1:7d:24:b4:d1:4e:fe:5c:6a:37:4e:ad:82:c3:
db:71:cc:da:f2:b4:ef:58:30:d2:2e:d9:64:a5:4f:
76:40:09:fa:e7:c9:d4:ff:e8:dd:b9:c8:6d:83:ec:
ac:fe:8a:9d:2d:9d:f8:d8:7c:45:e9:90:6f:9e:fa:
36:78:83:1f:49:b3:b4:f7:95:08:ec:5d:1f:ff:d8:
16:a2:fa:04:26:21:c9:17:d3:cb:95:7b:c2:27:d7:
f8:b3:ee:42:2e:2f:93:99:67:ab:21:bf:c0:3b:02:
ec:fd:79:f9:94:a5:49:9f:b1:2b:b6:3b:40:96:b0:
ac:6d:6e:30:d6:da:9e:38:91:cc:94:53:18:2d:2a:
0f:d2:9d:cb:17:e7:8f:ae:7a:ad:31:41:68:b8:6c:
8e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AC:13:4A:B0:73:AD:36:26:37:2A:3C:4F:5B:7C:04:39:53:D5:FE
X509v3 Authority Key Identifier:
keyid:46:CC:AB:74:79:A4:E0:D8:A4:17:73:50:A0:0A:69:BD:88:3B:04:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsyrdHmk4NikF3NQoAppvYg7BI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/TqwTSrBzrTYmNyo8T1t8BDlT1f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/dc5243-bba4-4acf-a218-2f30252eb442/1/RsyrdHmk4NikF3NQoAppvYg7BI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:d220::/36
Signature Algorithm: sha256WithRSAEncryption
72:55:c6:23:e2:a6:4c:0c:0b:be:e6:9d:24:15:46:07:63:f0:
e7:0b:64:96:f3:9e:0c:86:53:0b:51:0a:30:4f:66:d7:3c:7d:
fa:e9:c7:e2:0c:d7:f9:64:a0:98:c6:81:0d:e1:9f:2e:97:1a:
bb:a4:a7:61:ab:9c:2a:5d:fb:52:92:45:8e:35:20:40:92:bf:
72:11:af:71:6d:7b:ff:e6:52:8c:85:d6:e6:a7:43:66:69:d1:
c1:86:b3:2f:b0:c6:f1:14:6e:4b:29:c8:e8:6d:ef:1f:ba:1a:
fd:58:19:4f:fb:64:e9:ae:80:13:c4:9e:9e:0e:a1:c6:7b:2e:
6c:c2:a3:61:12:1a:04:c8:40:a9:12:8a:8a:e4:9a:10:4a:1c:
d7:a1:22:4e:51:f1:72:61:ac:12:f8:b2:91:35:77:2a:32:22:
30:d3:b1:96:31:35:e5:bd:8d:71:d4:5d:92:47:42:c6:4d:1a:
da:2e:01:08:23:74:fa:d5:3d:cd:9c:00:14:fc:ef:d3:75:f8:
46:58:43:4d:83:4b:9f:da:12:0e:82:e4:c5:bd:b2:3e:7f:da:
13:42:0a:53:83:7d:d6:d3:0f:cd:05:cb:9e:77:5a:d1:ae:46:
b7:62:63:85:b5:c3:53:72:c7:be:70:11:8a:de:03:d1:4b:d9:
f5:96:65:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 20:07:54 2024 by rpki-client on console-ams.rpki-client.org