Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/qCfM6on5fuWrsdD3Y4j2FH58WDQ.roa
File: qCfM6on5fuWrsdD3Y4j2FH58WDQ.roa (raw, json)
Hash identifier: vkZ3rtRmwKFgH8wzp2jaeINgsuPd6BEIKHJXZvmQS7M=
Subject key identifier: A8:27:CC:EA:89:F9:7E:E5:AB:B1:D0:F7:63:88:F6:14:7E:7C:58:34
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018CC8013D37CE78CB5119A3E635736D58E5
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/qCfM6on5fuWrsdD3Y4j2FH58WDQ.roa
Signing time: Tue 02 Jan 2024 02:29:33 +0000
ROA not before: Tue 02 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398103
IP address blocks: 2a01:488:bb11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 19:51:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3d:37:ce:78:cb:51:19:a3:e6:35:73:6d:58:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a827ccea89f97ee5abb1d0f76388f6147e7c5834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:cf:90:17:da:f9:be:94:59:6a:5d:f6:16:9a:
72:8e:c1:2c:5f:0c:ae:b3:3e:47:2a:43:7f:e7:a2:
c4:1a:69:7d:31:d7:45:54:6d:11:04:9a:61:36:70:
6e:17:23:b4:ff:6e:a9:c4:b3:94:3d:fb:59:85:54:
c7:c8:a4:22:d7:ad:a5:91:d8:69:10:4f:ad:ca:40:
a4:79:3c:8d:ee:03:d3:27:4c:89:18:fc:b8:9f:dc:
7f:63:19:fa:30:f2:1e:5c:9a:be:28:0a:cd:39:7a:
39:5d:69:fe:26:0e:86:ba:ce:44:25:f3:4f:2b:50:
6c:d7:50:f0:a9:ac:d3:7a:33:4b:ae:26:71:fe:61:
da:38:96:79:d7:c8:a6:74:75:fa:63:35:c7:02:3f:
ee:24:9f:96:15:b3:c2:0f:e5:2c:a1:ac:8a:90:8f:
5b:10:94:e0:bc:5f:d1:86:f7:eb:b9:65:88:2c:e8:
ca:e1:c7:12:da:44:0e:9d:c3:1f:ae:fe:3c:59:bd:
2a:3a:c6:5a:f6:25:e4:05:85:11:d1:eb:cd:46:24:
4a:17:36:65:d0:27:a5:03:18:0a:a4:d9:03:16:ea:
aa:81:44:9f:06:a0:29:66:22:c9:d2:7b:7d:18:d4:
2f:61:50:2b:6d:c1:5f:4d:f7:22:f2:f1:6b:b8:70:
54:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:27:CC:EA:89:F9:7E:E5:AB:B1:D0:F7:63:88:F6:14:7E:7C:58:34
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/qCfM6on5fuWrsdD3Y4j2FH58WDQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb11::/48
Signature Algorithm: sha256WithRSAEncryption
b8:66:fa:e8:2d:ac:64:06:11:68:9c:c3:93:2c:6d:cc:f6:45:
5b:7f:8c:2d:fd:22:db:7f:a6:96:61:79:6e:39:54:ac:5d:02:
cb:70:23:b6:ac:ec:33:14:06:89:2e:a9:fd:92:70:07:8a:77:
73:1b:23:4b:66:26:35:10:25:52:12:6d:e9:32:bb:bb:a6:56:
71:b3:a8:04:f3:f7:ef:00:25:ba:e9:a6:2f:2e:2b:90:e0:2f:
38:d9:ce:92:2e:4e:34:2f:4d:1b:c4:20:57:2c:ed:7b:32:7b:
67:7f:7e:81:ab:eb:b7:be:1c:f6:0b:9c:ce:cc:47:ea:b9:16:
72:ee:c2:c7:94:58:20:6f:83:fa:7a:4d:20:b1:b0:60:2e:2e:
96:ee:6b:28:e4:0b:0d:e5:e7:21:45:d7:a7:a3:7e:e0:4e:d0:
af:26:cc:cf:d1:95:6d:ec:8e:db:da:36:1c:20:25:a1:9f:63:
2c:e2:15:ae:2d:89:99:0c:0c:3d:6f:99:81:b3:f6:3a:7c:a4:
e4:de:c9:ff:df:35:b3:d1:9b:ad:d6:1a:f1:ad:4c:6d:1d:15:
37:09:0c:2f:09:3f:d3:3e:e7:73:77:6e:dc:f7:08:32:0d:d7:
9d:58:54:c3:92:19:01:84:4c:ae:7e:12:8c:b0:8f:90:f0:18:
a5:19:b6:2d
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIAT03znjLURmj5jVzbVjlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjQwMTAyMDIyOTMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODI3Y2NlYTg5Zjk3ZWU1YWJiMWQwZjc2Mzg4ZjYxNDdlN2M1ODM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8+QF9r5vpRZal32FppyjsEsXwyu
sz5HKkN/56LEGml9MddFVG0RBJphNnBuFyO0/26pxLOUPftZhVTHyKQi162lkdhp
EE+tykCkeTyN7gPTJ0yJGPy4n9x/Yxn6MPIeXJq+KArNOXo5XWn+Jg6Gus5EJfNP
K1Bs11DwqazTejNLriZx/mHaOJZ518imdHX6YzXHAj/uJJ+WFbPCD+UsoayKkI9b
EJTgvF/RhvfruWWILOjK4ccS2kQOncMfrv48Wb0qOsZa9iXkBYUR0evNRiRKFzZl
0CelAxgKpNkDFuqqgUSfBqApZiLJ0nt9GNQvYVArbcFfTfci8vFruHBUvwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKgnzOqJ+X7lq7HQ92OI9hR+fFg0MB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvcUNmTTZvbjVmdVdyc2REM1k0ajJGSDU4V0RRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEEiLsR
MA0GCSqGSIb3DQEBCwUAA4IBAQC4ZvroLaxkBhFonMOTLG3M9kVbf4wt/SLbf6aW
YXluOVSsXQLLcCO2rOwzFAaJLqn9knAHindzGyNLZiY1ECVSEm3pMru7plZxs6gE
8/fvACW66aYvLiuQ4C842c6SLk40L00bxCBXLO17Mntnf36Bq+u3vhz2C5zOzEfq
uRZy7sLHlFggb4P6ek0gsbBgLi6W7mso5AsN5echRdeno37gTtCvJszP0ZVt7I7b
2jYcICWhn2Ms4hWuLYmZDAw9b5mBs/Y6fKTk3sn/3zWz0Zut1hrxrUxtHRU3CQwv
CT/TPudzd27c9wgyDdedWFTDkhkBhEyufhKMsI+Q8BilGbYt
-----END CERTIFICATE-----
Generated at Mon May 20 01:53:08 2024 by rpki-client on console-ams.rpki-client.org