Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/pqacqNCldBSnhIBD0D7GqNdirRA.roa
File: pqacqNCldBSnhIBD0D7GqNdirRA.roa (raw, json)
Hash identifier: wRFidqB3JkBPQf/uxHF54KwEhS5EFfyJb9MtlsfkioM=
Subject key identifier: A6:A6:9C:A8:D0:A5:74:14:A7:84:80:43:D0:3E:C6:A8:D7:62:AD:10
Certificate issuer: /CN=e9aab1446100a8fce03df19d755e06329ee24713
Certificate serial: 019420D6513983D7C498DA4A04C8AD9B03BB
Authority key identifier: E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/pqacqNCldBSnhIBD0D7GqNdirRA.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 33886
IP address blocks: 2a00:1a28:1106::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 20 Feb 2025 14:00:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:51:39:83:d7:c4:98:da:4a:04:c8:ad:9b:03:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9aab1446100a8fce03df19d755e06329ee24713
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a6a69ca8d0a57414a7848043d03ec6a8d762ad10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:7e:41:ca:8b:bf:27:22:f5:b5:b2:6f:43:
a9:29:15:5e:3b:fb:5b:20:80:23:6f:64:44:28:03:
79:7f:f1:78:ae:fe:68:d9:26:15:1f:e7:d5:6d:af:
43:47:b3:72:71:1c:f9:c5:f6:b7:c2:8f:ac:52:31:
6f:6f:e1:3e:17:09:77:13:2e:ac:8a:99:55:c3:89:
15:7e:49:5f:ca:06:41:3d:f2:e6:39:ed:2f:fd:5a:
35:b8:ca:e9:f5:c2:e9:43:95:19:a5:60:a1:19:68:
b5:12:c6:4c:de:85:21:d0:44:16:17:df:df:bc:1a:
78:53:2e:80:c9:55:13:c9:23:48:db:93:9d:55:df:
7b:82:e6:3f:fa:60:ff:48:75:f5:20:cc:bf:e4:15:
a0:bd:03:53:ba:d3:9a:48:d8:b6:ce:ff:31:39:96:
7d:ac:16:f5:f2:01:b4:7e:55:9f:65:67:9b:32:e5:
94:a9:95:b0:cb:e5:b9:8d:77:09:8a:95:86:96:31:
6e:37:82:e0:77:a4:61:ee:8d:46:69:a3:17:5f:b1:
91:22:06:35:d9:75:65:e0:e1:68:2d:b0:f6:d9:ba:
5f:7f:2c:b8:4d:1b:9d:ef:08:b2:24:a1:30:1f:10:
c8:cb:8c:dc:a7:16:64:89:10:ad:48:32:e9:fd:86:
e8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A6:9C:A8:D0:A5:74:14:A7:84:80:43:D0:3E:C6:A8:D7:62:AD:10
X509v3 Authority Key Identifier:
keyid:E9:AA:B1:44:61:00:A8:FC:E0:3D:F1:9D:75:5E:06:32:9E:E2:47:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6aqxRGEAqPzgPfGddV4GMp7iRxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/pqacqNCldBSnhIBD0D7GqNdirRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/71e09c-28f3-4825-806f-a0dc354f4ca3/1/6aqxRGEAqPzgPfGddV4GMp7iRxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:1a28:1106::/48
Signature Algorithm: sha256WithRSAEncryption
46:9b:78:3a:88:21:d1:db:0e:1f:6f:bd:a3:eb:53:ac:2b:e2:
51:03:da:83:ac:2e:96:af:27:18:3e:66:54:58:ac:7d:3d:40:
a6:a4:a9:5d:11:b9:96:3d:d8:36:e8:d2:ae:c4:ba:47:89:e9:
ae:7d:2d:f0:7b:a6:ba:32:64:35:4f:d8:f9:c3:ce:87:09:28:
25:b5:85:14:4c:a7:bc:65:83:88:4b:22:6a:c9:83:20:73:c3:
f0:80:77:13:f3:2c:57:b9:2f:c5:88:8a:e9:25:a5:e9:42:05:
ec:7b:ab:6e:8e:c3:57:20:a9:57:91:28:d7:40:96:61:cb:02:
43:52:8f:14:4e:e3:12:ee:98:57:13:0d:3a:36:e1:c1:54:77:
04:65:bc:82:8d:98:04:0a:bf:10:17:79:d1:bb:76:61:c4:18:
11:c8:59:5e:7f:c3:42:ad:de:2f:3e:ae:ce:63:b7:51:91:42:
3b:37:69:38:79:a0:ae:93:1b:a5:67:71:76:b4:8f:4e:3c:03:
b2:6d:fc:f0:60:62:4f:53:fe:30:68:52:fc:72:d3:0b:78:91:
7f:41:2b:7b:a0:0c:99:52:f2:3c:02:88:fc:28:8c:81:b7:82:
fb:cd:30:a5:5c:f7:6e:a6:11:ff:a8:8b:59:0e:ac:14:8e:56:
ea:0a:e5:2a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZQg1lE5g9fEmNpKBMitmwO7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5YWFiMTQ0NjEwMGE4ZmNlMDNkZjE5ZDc1NWUwNjMyOWVl
MjQ3MTMwHhcNMjUwMTAxMDc0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNmE2OWNhOGQwYTU3NDE0YTc4NDgwNDNkMDNlYzZhOGQ3NjJhZDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyh9+QcqLvyci9bWyb0OpKRVeO/tb
IIAjb2REKAN5f/F4rv5o2SYVH+fVba9DR7NycRz5xfa3wo+sUjFvb+E+Fwl3Ey6s
iplVw4kVfklfygZBPfLmOe0v/Vo1uMrp9cLpQ5UZpWChGWi1EsZM3oUh0EQWF9/f
vBp4Uy6AyVUTySNI25OdVd97guY/+mD/SHX1IMy/5BWgvQNTutOaSNi2zv8xOZZ9
rBb18gG0flWfZWebMuWUqZWwy+W5jXcJipWGljFuN4Lgd6Rh7o1GaaMXX7GRIgY1
2XVl4OFoLbD22bpffyy4TRud7wiyJKEwHxDIy4zcpxZkiRCtSDLp/YborQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKamnKjQpXQUp4SAQ9A+xqjXYq0QMB8GA1UdIwQY
MBaAFOmqsURhAKj84D3xnXVeBjKe4kcTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYt
YTBkYzM1NGY0Y2EzLzEvcHFhY3FOQ2xkQlNuaElCRDBEN0dxTmRpclJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOS83MWUwOWMtMjhmMy00ODI1LTgwNmYtYTBkYzM1NGY0Y2Ez
LzEvNmFxeFJHRUFxUHpnUGZHZGRWNEdNcDdpUnhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgAaKBEG
MA0GCSqGSIb3DQEBCwUAA4IBAQBGm3g6iCHR2w4fb72j61OsK+JRA9qDrC6WrycY
PmZUWKx9PUCmpKldEbmWPdg26NKuxLpHiemufS3we6a6MmQ1T9j5w86HCSgltYUU
TKe8ZYOISyJqyYMgc8PwgHcT8yxXuS/FiIrpJaXpQgXse6tujsNXIKlXkSjXQJZh
ywJDUo8UTuMS7phXEw06NuHBVHcEZbyCjZgECr8QF3nRu3ZhxBgRyFlef8NCrd4v
Pq7OY7dRkUI7N2k4eaCukxulZ3F2tI9OPAOybfzwYGJPU/4waFL8ctMLeJF/QSt7
oAyZUvI8Aoj8KIyBt4L7zTClXPduphH/qItZDqwUjlbqCuUq
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:29 2025 by rpki-client