Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qcESyJho236kkRbvaWCAhX-miAs.roa
File: qcESyJho236kkRbvaWCAhX-miAs.roa (raw, json)
Hash identifier: 1LWxs4g+I2yFIL/no7/kIY/0PMOjmSNdV+jfd8hn5rg=
Subject key identifier: A9:C1:12:C8:98:68:DB:7E:A4:91:16:EF:69:60:80:85:7F:A6:88:0B
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 0194236A05821295C5478A18925AD210BF41
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qcESyJho236kkRbvaWCAhX-miAs.roa
Signing time: Wed 01 Jan 2025 19:48:58 +0000
ROA not before: Wed 01 Jan 2025 19:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400907
IP address blocks: 2a0d:6f80:176f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 06 Feb 2025 09:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:05:82:12:95:c5:47:8a:18:92:5a:d2:10:bf:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jan 1 19:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9c112c89868db7ea49116ef696080857fa6880b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:83:cb:32:55:b8:4f:3b:01:f1:27:8c:b5:69:
c1:92:82:99:1a:1b:0c:f7:05:c4:e2:29:bd:08:fc:
0e:f8:4a:db:0e:b2:1e:a9:0d:60:63:07:42:f4:d4:
3f:f7:88:b2:e1:96:02:39:01:4c:bb:a4:07:1f:19:
39:7a:72:b2:4d:d0:b9:97:f7:81:c7:f2:ee:60:6d:
3d:fb:49:00:98:5f:7e:7a:54:a9:f7:8f:c4:f3:26:
a3:0c:4e:70:f5:8c:ce:b1:c6:21:4a:ab:38:63:6f:
59:05:ae:52:20:dd:7c:ef:a5:48:0a:c6:7b:36:ee:
d1:f5:52:05:4d:71:b8:b9:1b:d5:aa:27:46:5a:04:
1c:4b:6f:4f:2f:a6:fc:58:6a:b1:b5:fc:85:b1:71:
75:ee:53:9c:7a:6f:11:b1:f1:0b:fc:3e:5c:3b:3d:
d5:b5:e0:19:0a:2b:cc:dd:9c:1b:52:d5:d5:0c:2d:
f3:90:49:e0:17:89:22:e1:61:f2:7e:81:8e:7f:50:
62:a2:c3:22:71:65:0c:38:c4:af:4a:af:38:aa:8d:
ce:f3:8a:47:de:70:63:39:a4:43:64:c4:59:17:76:
24:78:34:da:6d:15:e5:82:bc:a4:d8:95:62:b3:17:
3d:16:aa:80:99:9b:ab:c0:6f:59:93:32:74:e6:05:
3f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C1:12:C8:98:68:DB:7E:A4:91:16:EF:69:60:80:85:7F:A6:88:0B
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qcESyJho236kkRbvaWCAhX-miAs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:6f80:176f::/48
Signature Algorithm: sha256WithRSAEncryption
74:ea:a8:97:a1:97:56:11:5a:c0:ee:96:96:99:01:5c:a3:b6:
ed:8e:d0:9b:68:a8:ba:f4:90:f7:6a:4d:08:4a:81:c5:96:83:
67:22:41:f0:23:ff:39:f0:41:20:a5:00:c8:85:84:03:33:b9:
31:33:2a:44:29:5d:57:18:9e:b8:34:80:fb:40:1e:69:46:0e:
94:19:92:1f:30:9c:aa:4e:2e:f9:d5:91:cf:2a:b2:11:67:11:
93:3f:cf:93:46:09:e7:54:f6:a6:51:21:53:0c:a2:c0:d3:16:
64:f3:4d:78:9e:95:b5:c4:c3:79:1a:9d:0c:4d:24:72:49:f0:
15:ac:2b:ff:f0:b7:79:e0:72:32:64:27:5b:4c:db:b5:69:76:
ae:56:2d:93:ab:7f:f0:0a:c4:d1:17:e1:20:25:72:2f:bf:42:
f7:c9:6f:71:56:32:cc:81:a6:f6:7c:61:11:27:15:d5:ff:b4:
61:70:42:7b:27:ea:1d:67:df:30:c4:af:fb:a7:85:7f:b5:39:
1e:9c:a8:b8:38:c2:4a:7e:b5:1d:66:78:4a:eb:41:21:bd:be:
ff:6c:9f:31:18:77:72:6e:29:41:62:28:26:7b:9e:1b:31:92:
1c:76:ce:42:24:f7:96:48:64:2f:f1:42:52:ce:fc:b1:72:40:
c5:af:2b:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 12:49:06 2025 by rpki-client