Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/QIHvNW1Bo6YzbzSgYBzGtsuqEfs.roa
File: QIHvNW1Bo6YzbzSgYBzGtsuqEfs.roa (raw, json)
Hash identifier: aksF1ubhGM/peFh1jEUBQHm0KEuYf/ABFFFJosdR9zw=
Subject key identifier: 40:81:EF:35:6D:41:A3:A6:33:6F:34:A0:60:1C:C6:B6:CB:AA:11:FB
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA295AD488FA7825A6381976526C1223
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/QIHvNW1Bo6YzbzSgYBzGtsuqEfs.roa
Signing time: Tue 02 Jan 2024 12:32:37 +0000
ROA not before: Tue 02 Jan 2024 12:32:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201979
IP address blocks: 2a0e:8f02:f04c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 04:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:5a:d4:88:fa:78:25:a6:38:19:76:52:6c:12:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4081ef356d41a3a6336f34a0601cc6b6cbaa11fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a1:69:d3:d2:b0:5b:ea:d5:91:cf:e0:a2:6c:
58:a3:7e:70:66:66:f1:79:39:1b:ae:5c:d6:e1:60:
fa:93:99:1b:24:d8:9b:2d:7d:c8:8f:9d:5f:e4:64:
b1:0a:7a:85:5d:d9:42:20:07:f1:78:27:2d:a2:3c:
a6:5d:4e:a1:3f:da:46:cf:ef:5a:73:a1:fc:9b:d5:
13:30:88:54:4d:5d:5f:ad:58:e8:69:cd:bd:fa:76:
12:d4:bb:8b:c7:77:d7:34:5f:5c:88:22:d3:ba:0a:
20:d9:a7:35:26:bf:5f:ad:9c:7c:7e:d8:23:9a:21:
b1:ca:17:5f:33:42:c4:40:f4:87:a1:04:6c:f0:b7:
03:d5:57:49:04:7f:75:ae:14:a7:15:41:03:c0:12:
e2:03:18:2c:dc:a0:70:18:bb:cd:bc:43:86:49:55:
b2:02:1a:fd:f7:b7:56:7c:02:fb:73:e3:33:af:92:
cd:a7:06:10:eb:eb:2d:30:22:e4:2b:c8:1e:e9:e3:
57:f8:b4:78:5a:fd:16:46:c5:60:6a:24:63:66:22:
d5:9c:6e:8a:2e:d2:fd:5d:27:b3:b7:b0:21:60:9a:
b3:b7:cd:6c:57:ea:69:fd:d3:88:84:20:71:37:25:
5c:d5:50:64:eb:48:cb:86:99:7f:af:34:7f:1c:93:
09:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:81:EF:35:6D:41:A3:A6:33:6F:34:A0:60:1C:C6:B6:CB:AA:11:FB
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/QIHvNW1Bo6YzbzSgYBzGtsuqEfs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:f04c::/48
Signature Algorithm: sha256WithRSAEncryption
3f:9c:7f:44:dc:6c:a3:72:1f:e4:49:a5:07:73:ad:e4:b4:40:
2c:d5:c4:e0:b9:9a:80:7b:6c:cd:ac:18:7e:72:c4:ca:3b:8b:
ec:2b:ad:7b:eb:2c:34:32:2b:95:23:b0:23:4b:5e:0a:3b:0d:
65:08:44:c4:3f:65:91:05:fd:1a:c6:8c:4d:3a:b1:d7:ef:74:
d7:7c:fa:ae:70:6c:e1:52:7f:a3:84:59:54:0e:3c:dd:fc:94:
a1:a2:65:52:8b:41:07:d3:88:37:b7:a7:f8:21:59:d6:ab:00:
7a:8c:dd:2f:d8:93:7d:a7:d0:12:2c:fd:29:cf:c8:11:f1:1f:
d0:4e:bc:ac:f1:32:78:ad:80:aa:3d:2d:bf:11:24:3e:df:ca:
1a:98:c1:55:d5:5a:8e:38:3f:48:06:f8:fb:2a:14:7b:59:03:
18:04:29:3e:c4:78:ee:43:3d:71:78:ab:31:f4:a6:4d:ce:2f:
e9:4e:97:d7:43:b1:d4:7a:45:e9:91:e3:93:12:52:aa:38:20:
9a:22:2d:ee:88:33:b3:03:41:0e:44:7d:9a:0c:02:24:1b:70:
60:9b:8f:e3:58:16:dd:ad:89:43:5c:23:b0:ec:af:dc:c8:b4:
30:c0:de:8f:23:59:c8:13:48:e0:90:8d:f1:99:4e:72:5b:09:
7c:c4:3a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 12:50:21 2024 by rpki-client on console-fra.rpki-client.org