Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/QCraeD01iyRQ_Le8U50FnBsucOI.roa
File: QCraeD01iyRQ_Le8U50FnBsucOI.roa (raw, json)
Hash identifier: CfpESyntgNsOtFiR2QtbzsqhZEmB4AEQhe3kIQx/iZQ=
Subject key identifier: 40:2A:DA:78:3D:35:8B:24:50:FC:B7:BC:53:9D:05:9C:1B:2E:70:E2
Certificate issuer: /CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Certificate serial: 018CC493701E9CA27D4C94F0FD385E71FBDA
Authority key identifier: 4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/QCraeD01iyRQ_Le8U50FnBsucOI.roa
Signing time: Mon 01 Jan 2024 10:30:45 +0000
ROA not before: Mon 01 Jan 2024 10:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212106
IP address blocks: 2a10:4646:60::/44 maxlen: 44
2a10:4646:11::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:70:1e:9c:a2:7d:4c:94:f0:fd:38:5e:71:fb:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a6d2817491dd2cd0678068e35a9efc68667df02
Validity
Not Before: Jan 1 10:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=402ada783d358b2450fcb7bc539d059c1b2e70e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a3:30:40:ce:cb:3a:f2:b2:81:82:00:1e:e2:
b1:6c:91:21:52:d1:79:67:ea:ed:b9:7f:ee:7e:1f:
10:a1:e7:38:d5:4b:1b:29:50:84:92:7e:01:d9:d8:
2a:91:fe:e9:a4:8f:a5:fb:5a:ee:29:6b:59:fb:96:
93:0c:5c:21:f4:c3:d6:13:f6:69:dc:53:64:98:37:
fa:96:39:a4:19:96:1f:09:42:fe:ef:29:9d:96:5e:
13:c5:52:c2:e9:84:cd:47:d8:e4:3a:c5:d8:46:66:
60:23:64:48:2a:6f:88:df:bb:d5:48:9a:8c:49:5c:
da:c2:cc:26:dc:23:3d:52:a0:fa:80:80:76:25:f2:
e2:9d:79:be:56:19:28:b7:ee:0e:ff:70:59:38:53:
08:41:59:8e:16:80:57:ee:c8:59:fb:b4:66:82:e5:
ff:a3:ba:a4:e2:ec:60:42:46:61:71:19:80:30:1e:
45:41:6f:58:95:35:ba:bc:79:13:fb:fd:a2:2b:80:
f0:60:f2:7f:09:fd:dc:e6:ab:9d:00:b3:ce:75:7f:
4e:8f:11:95:a0:a3:c9:e5:9e:8b:84:ff:36:0a:4f:
40:49:a7:73:f7:c8:0c:94:0b:06:89:06:33:5c:72:
6b:87:45:40:7f:5e:53:5c:e2:2a:24:b0:b5:09:24:
13:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2A:DA:78:3D:35:8B:24:50:FC:B7:BC:53:9D:05:9C:1B:2E:70:E2
X509v3 Authority Key Identifier:
keyid:4A:6D:28:17:49:1D:D2:CD:06:78:06:8E:35:A9:EF:C6:86:67:DF:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sm0oF0kd0s0GeAaONanvxoZn3wI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/QCraeD01iyRQ_Le8U50FnBsucOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Sm0oF0kd0s0GeAaONanvxoZn3wI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:11::/48
2a10:4646:60::/44
Signature Algorithm: sha256WithRSAEncryption
d1:28:cd:45:9c:6d:f2:ed:8b:b7:e5:5a:df:36:36:24:3d:83:
ba:01:8e:7b:ff:c6:77:cc:24:67:bf:0b:86:6e:25:5a:ee:ec:
56:c2:ab:60:60:15:26:82:75:00:ee:7e:7c:37:28:49:18:b3:
14:1c:03:80:1c:8d:bd:dd:e5:67:6c:36:b4:c6:90:d8:06:88:
da:c5:77:65:ad:3a:6e:8b:74:7d:55:bd:4d:47:fe:e5:1a:ac:
b5:7e:88:83:8e:ec:16:07:a2:8d:66:a6:34:4c:a0:8b:a8:45:
b5:35:dc:4e:29:22:c6:95:c1:3b:86:e1:7f:35:f3:e8:cd:93:
df:67:0e:d6:50:72:5e:d7:13:d5:40:8d:00:e6:ef:a7:eb:2a:
0f:51:19:0a:6b:30:f5:fc:d1:dc:b9:ec:1a:75:b8:a5:0d:c6:
ed:81:80:33:be:40:c4:c8:f5:b2:b7:2c:f7:2e:d5:b0:a3:8b:
a1:df:23:c6:d1:17:b1:e0:02:ea:83:70:59:f6:ac:08:1d:d7:
d3:25:bd:99:ed:2d:2a:69:e4:9e:ad:91:42:2d:49:ee:fc:28:
f7:da:49:ef:6a:d0:e6:13:8c:1e:ed:7d:8c:55:26:a0:11:e7:
46:55:33:59:7f:13:1f:eb:aa:3e:ee:d9:05:8a:e6:12:ce:6a:
e2:3f:49:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 19:26:37 2024 by rpki-client on console-ams.rpki-client.org