Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/mqGCdr5dZ1NLjQfRApFwlRZxmZ4.roa
File: mqGCdr5dZ1NLjQfRApFwlRZxmZ4.roa (raw, json)
Hash identifier: 2EKTUA9G76i0eaJNY5rDERBfYr7SZhdhwFTaXML0igg=
Subject key identifier: 9A:A1:82:76:BE:5D:67:53:4B:8D:07:D1:02:91:70:95:16:71:99:9E
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA29779831F063098FE44FB58DC2E7F3
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/mqGCdr5dZ1NLjQfRApFwlRZxmZ4.roa
Signing time: Tue 02 Jan 2024 12:32:44 +0000
ROA not before: Tue 02 Jan 2024 12:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213326
IP address blocks: 2a0e:8f02:f01b::/48 maxlen: 48
2a0e:8f02:2110::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 14:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:77:98:31:f0:63:09:8f:e4:4f:b5:8d:c2:e7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9aa18276be5d67534b8d07d1029170951671999e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:84:70:4a:29:95:d3:1f:99:e2:df:09:c3:f4:
72:fa:6f:d1:a4:0a:36:26:88:22:42:34:87:bb:bb:
52:c2:1b:5d:89:16:68:0b:2c:5e:59:f5:3f:df:b1:
97:1e:bc:36:29:0a:14:b6:86:3e:6d:fd:60:47:df:
44:3c:44:51:05:fd:b5:17:90:5d:6b:d7:30:26:65:
70:b4:07:ef:1d:3d:0e:cb:48:bd:ae:09:4b:ea:2a:
5d:b1:58:ef:bf:4b:5c:5f:73:6c:f9:f8:09:42:d8:
c1:37:fc:71:2c:e5:2a:3b:f6:29:1a:27:68:fc:c1:
a3:53:84:78:20:08:21:60:21:c2:29:8f:c9:be:cb:
8c:d3:33:9f:a4:44:87:e8:63:95:a3:d2:29:33:07:
1f:81:22:bf:64:2b:5a:e4:aa:9d:1a:60:4f:89:b8:
74:d4:16:47:c8:4c:71:e7:40:57:7e:0e:1c:02:57:
3b:d2:52:1f:59:51:59:6e:08:c0:2c:f8:35:60:a0:
19:95:f6:54:e6:f6:5e:97:b1:88:35:d8:7b:b1:fd:
76:3f:8a:17:5f:db:fa:e8:10:6f:f7:a8:21:e8:c0:
76:8b:5f:e5:fa:5a:ac:67:ba:55:68:ca:c8:8f:8e:
77:5a:72:ba:45:84:ca:8d:e9:bd:2c:88:19:8a:ff:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A1:82:76:BE:5D:67:53:4B:8D:07:D1:02:91:70:95:16:71:99:9E
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/mqGCdr5dZ1NLjQfRApFwlRZxmZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:2110::/44
2a0e:8f02:f01b::/48
Signature Algorithm: sha256WithRSAEncryption
5a:d6:11:b2:0a:a3:90:78:3e:25:a6:b0:9f:3f:29:5c:e8:93:
b6:8d:48:9a:42:32:b1:9d:51:b7:5a:2a:e1:f4:6d:f4:0b:d9:
90:f5:ec:f5:43:13:cb:75:91:49:94:f1:56:88:fa:b0:7b:29:
d6:54:e2:cd:91:33:a1:b6:ba:22:63:91:58:1a:93:00:91:76:
77:92:93:31:7a:4b:d1:5d:a3:dc:f1:d0:db:d4:ef:b8:dc:02:
58:25:ad:0e:d2:34:82:e9:0c:ec:e8:59:84:7b:f7:f0:b9:a6:
39:a4:77:18:2e:a7:7f:80:33:a0:ee:2b:d1:ec:cf:15:da:a2:
60:51:e4:87:9a:ec:5e:3e:e0:d5:41:62:d1:a7:de:e9:5f:5e:
87:72:45:bf:fc:af:07:26:c3:9e:6b:7f:6c:49:ce:b8:41:4f:
43:d6:67:7b:fa:70:3a:59:78:df:0c:ce:c6:04:79:77:cd:ff:
1f:97:a5:82:ad:57:af:40:e3:48:3b:1a:c8:b3:1f:fa:c8:3f:
a2:9c:02:13:4e:4e:c9:5f:95:7c:47:82:28:83:3b:eb:fd:b5:
08:af:bf:2b:83:0e:8d:41:a7:bd:3c:79:d2:89:56:fc:76:ed:
05:62:1c:df:9b:31:17:a1:98:68:a9:06:b9:61:17:ed:cd:45:
96:03:f1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 23:17:50 2024 by rpki-client on console-ams.rpki-client.org