Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/qq9kAUWj1l6WXkA4enA8jhagwkg.roa
File: qq9kAUWj1l6WXkA4enA8jhagwkg.roa (raw, json)
Hash identifier: r09tXy6Gd4xkR6CWGsuF7YhI4ib4F0d4Mvj9f37IeXQ=
Subject key identifier: AA:AF:64:01:45:A3:D6:5E:96:5E:40:38:7A:70:3C:8E:16:A0:C2:48
Certificate issuer: /CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Certificate serial: 018CC8013AAB31449C2B4D42D93D63F04138
Authority key identifier: BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/qq9kAUWj1l6WXkA4enA8jhagwkg.roa
Signing time: Tue 02 Jan 2024 02:29:32 +0000
ROA not before: Tue 02 Jan 2024 02:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 397520
IP address blocks: 2a01:488:bb19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:3a:ab:31:44:9c:2b:4d:42:d9:3d:63:f0:41:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba6ed0fb7b320832ac1580534c7b263f304e981b
Validity
Not Before: Jan 2 02:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aaaf640145a3d65e965e40387a703c8e16a0c248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4c:99:2d:c2:5e:d8:b6:a2:20:75:51:ac:3f:
68:8d:65:04:e7:30:af:a4:48:58:d7:b2:59:77:42:
6a:6e:90:aa:c7:2a:41:8f:41:bc:76:33:81:2a:f5:
02:81:2c:cf:e8:87:21:71:6a:f4:b7:14:e7:3e:fc:
cc:e3:43:a6:43:37:71:7c:83:c8:98:da:d1:f8:00:
dd:ab:46:b0:35:1d:0a:74:4f:bf:06:70:4c:3b:53:
03:6e:42:f3:24:17:7a:d9:3d:d9:0f:d8:a3:1c:af:
96:a3:e1:da:82:61:a5:5a:90:af:ff:3e:7b:df:4c:
14:d2:94:e8:43:ed:ac:95:20:04:8c:83:98:e0:33:
a0:b8:22:ec:1c:59:93:57:0b:73:4d:2a:5f:a1:dd:
f1:3e:1a:ba:d1:8a:b2:e7:9d:62:11:41:bf:27:c6:
2e:97:79:ef:e6:29:4f:f3:e5:21:d4:51:20:05:b4:
ec:53:68:08:1e:a6:f1:03:85:e0:0f:09:16:25:82:
a9:a0:05:83:a6:8a:3b:9d:94:4e:b2:9a:d5:c3:97:
09:bf:61:3c:70:cb:5c:0a:54:0a:02:94:c9:88:d2:
d9:c8:a0:10:9f:3a:6b:57:88:d6:54:65:2d:eb:bc:
19:9c:54:54:13:14:31:a3:c9:6a:ff:72:b8:24:b7:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AF:64:01:45:A3:D6:5E:96:5E:40:38:7A:70:3C:8E:16:A0:C2:48
X509v3 Authority Key Identifier:
keyid:BA:6E:D0:FB:7B:32:08:32:AC:15:80:53:4C:7B:26:3F:30:4E:98:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/um7Q-3syCDKsFYBTTHsmPzBOmBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/qq9kAUWj1l6WXkA4enA8jhagwkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/42041d-5931-4824-9254-161f342387d1/1/um7Q-3syCDKsFYBTTHsmPzBOmBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:488:bb19::/48
Signature Algorithm: sha256WithRSAEncryption
06:63:44:48:35:e8:11:37:7c:5b:42:01:8b:93:64:7b:22:4c:
d4:66:bc:94:00:d8:39:df:23:f6:86:bb:b7:57:41:2a:72:ce:
3a:59:a6:87:21:db:1f:fd:1c:39:cd:ee:df:86:a8:21:7e:37:
a8:bf:86:01:ad:45:15:6a:61:c4:58:5e:e8:35:a2:17:c5:bf:
7f:4b:05:ae:87:7a:3e:1e:d2:96:63:4d:47:a3:55:97:00:7a:
24:83:7c:5e:34:4c:60:d4:d5:c5:56:ff:63:eb:e2:76:8e:0b:
2a:3b:c6:53:c7:5a:df:ed:e4:93:f6:59:63:0d:74:f9:21:fa:
00:bd:b0:f1:0d:c1:89:80:6e:af:8e:37:44:11:95:a3:09:7e:
d3:0a:96:68:fa:ce:11:ba:44:6d:b8:1a:ed:36:49:ef:94:28:
87:91:6f:dd:ec:c0:d2:50:bf:98:40:92:b3:ec:0c:77:b4:8f:
68:d6:dc:b0:36:1a:e8:ed:16:86:60:29:8d:f6:ac:6a:50:2d:
96:8b:db:a7:c6:e6:bd:c7:44:c1:b2:87:6c:e4:03:93:2e:c7:
8d:11:3b:69:79:bd:77:13:e7:a8:f3:4b:41:20:62:fb:a0:8d:
53:aa:fe:92:31:30:3d:2c:01:4e:30:47:11:08:88:26:b1:b6:
59:73:93:7c
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzIATqrMUScK01C2T1j8EE4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNmVkMGZiN2IzMjA4MzJhYzE1ODA1MzRjN2IyNjNmMzA0
ZTk4MWIwHhcNMjQwMTAyMDIyOTMyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWFmNjQwMTQ1YTNkNjVlOTY1ZTQwMzg3YTcwM2M4ZTE2YTBjMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUyZLcJe2LaiIHVRrD9ojWUE5zCv
pEhY17JZd0JqbpCqxypBj0G8djOBKvUCgSzP6IchcWr0txTnPvzM40OmQzdxfIPI
mNrR+ADdq0awNR0KdE+/BnBMO1MDbkLzJBd62T3ZD9ijHK+Wo+HagmGlWpCv/z57
30wU0pToQ+2slSAEjIOY4DOguCLsHFmTVwtzTSpfod3xPhq60Yqy551iEUG/J8Yu
l3nv5ilP8+Uh1FEgBbTsU2gIHqbxA4XgDwkWJYKpoAWDpoo7nZROsprVw5cJv2E8
cMtcClQKApTJiNLZyKAQnzprV4jWVGUt67wZnFRUExQxo8lq/3K4JLd9ZQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKqvZAFFo9Zell5AOHpwPI4WoMJIMB8GA1UdIwQY
MBaAFLpu0Pt7MggyrBWAU0x7Jj8wTpgbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQt
MTYxZjM0MjM4N2QxLzEvcXE5a0FVV2oxbDZXWGtBNGVuQThqaGFnd2tnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC80MjA0MWQtNTkzMS00ODI0LTkyNTQtMTYxZjM0MjM4N2Qx
LzEvdW03US0zc3lDREtzRllCVFRIc21QekJPbUJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgEEiLsZ
MA0GCSqGSIb3DQEBCwUAA4IBAQAGY0RINegRN3xbQgGLk2R7IkzUZryUANg53yP2
hru3V0Eqcs46WaaHIdsf/Rw5ze7fhqghfjeov4YBrUUVamHEWF7oNaIXxb9/SwWu
h3o+HtKWY01Ho1WXAHokg3xeNExg1NXFVv9j6+J2jgsqO8ZTx1rf7eST9lljDXT5
IfoAvbDxDcGJgG6vjjdEEZWjCX7TCpZo+s4RukRtuBrtNknvlCiHkW/d7MDSUL+Y
QJKz7Ax3tI9o1tywNhro7RaGYCmN9qxqUC2Wi9unxua9x0TBsods5AOTLseNETtp
eb13E+eo80tBIGL7oI1Tqv6SMTA9LAFOMEcRCIgmsbZZc5N8
-----END CERTIFICATE-----
Generated at Tue May 7 19:36:00 2024 by rpki-client on console-ams.rpki-client.org