Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/QJhXOV55T9ze_YObLppbGVUr_cE.roa
File: QJhXOV55T9ze_YObLppbGVUr_cE.roa (raw, json)
Hash identifier: P3l+Xo0RN0zl2r1YOkbXrS8g/MR1vJWtgn3t+aSzkBo=
Subject key identifier: 40:98:57:39:5E:79:4F:DC:DE:FD:83:9B:2E:9A:5B:19:55:2B:FD:C1
Certificate issuer: /CN=e9be181aabdb195513a26c67b621e2986818d03d
Certificate serial: 018EA0438C0C76B812AD8CC86DD17627EC2D
Authority key identifier: E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/QJhXOV55T9ze_YObLppbGVUr_cE.roa
Signing time: Tue 02 Apr 2024 19:22:45 +0000
ROA not before: Tue 02 Apr 2024 19:22:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213220
IP address blocks: 2a09:3902::/32 maxlen: 32
2a09:3905::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.mft
rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 04:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:a0:43:8c:0c:76:b8:12:ad:8c:c8:6d:d1:76:27:ec:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9be181aabdb195513a26c67b621e2986818d03d
Validity
Not Before: Apr 2 19:22:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=409857395e794fdcdefd839b2e9a5b19552bfdc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:94:f8:53:06:98:21:79:20:ba:c3:1f:4a:67:
29:91:c6:bc:87:8b:a2:10:24:77:3d:e6:6e:71:fa:
5f:36:5c:dc:af:4c:2a:cf:0f:82:72:82:99:eb:55:
de:50:05:0f:01:f0:f7:6f:e2:56:4f:c0:d6:57:c8:
73:9a:e4:7d:de:f2:86:c6:c0:12:9c:0e:da:c6:bc:
81:3e:1a:c5:fb:ae:7b:02:76:61:58:4b:b9:81:be:
be:93:86:38:03:4f:c3:2a:57:e5:01:77:ec:98:2d:
29:0a:e9:cf:b2:51:75:5d:df:7d:7e:3c:3a:04:60:
45:69:5a:a1:2c:72:34:6b:8e:61:14:40:1a:88:25:
c5:4c:2d:38:ed:84:82:0e:d2:4c:b9:5f:34:7b:ee:
56:20:2e:2f:ee:d9:a2:6b:59:a0:1b:69:09:b5:ac:
52:7a:fc:74:3c:61:a4:c9:8a:71:2c:a5:e7:ba:9a:
9e:c1:bc:f0:59:39:c7:f9:31:c4:1d:e5:c5:d6:b9:
63:9d:f6:f9:5d:14:3b:d3:c0:09:5f:3f:a0:d5:1c:
6f:94:66:6d:7a:90:c4:d5:e7:f3:ea:cb:22:8a:ac:
b2:c7:5c:93:84:8a:c4:cc:cd:0f:33:b3:1c:31:fa:
a4:82:72:66:99:43:41:7f:a2:2b:3b:e5:db:01:64:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:98:57:39:5E:79:4F:DC:DE:FD:83:9B:2E:9A:5B:19:55:2B:FD:C1
X509v3 Authority Key Identifier:
keyid:E9:BE:18:1A:AB:DB:19:55:13:A2:6C:67:B6:21:E2:98:68:18:D0:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b4YGqvbGVUTomxntiHimGgY0D0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/QJhXOV55T9ze_YObLppbGVUr_cE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/becd16-a9e9-4cd6-800e-f008dd83e32a/1/6b4YGqvbGVUTomxntiHimGgY0D0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:3902::/32
2a09:3905::/32
Signature Algorithm: sha256WithRSAEncryption
17:7b:e4:d3:f7:ee:f3:22:f5:e6:86:07:11:4b:23:d4:b9:b0:
4c:be:28:d5:c0:62:77:fd:c4:3f:1f:31:bd:6c:49:a5:e3:da:
5a:65:fe:63:48:0f:e2:6f:dc:ba:3b:05:a8:48:8b:c9:cb:ae:
c7:84:8d:a1:0b:96:6a:10:c9:d6:9f:fe:85:5a:e5:33:68:4c:
80:41:f3:65:29:37:1b:d4:86:5f:88:d9:88:98:b2:c2:57:a2:
0a:b1:6d:c2:88:f8:a9:87:c5:d7:6e:11:0c:82:8c:ce:a6:06:
24:e9:e0:11:34:cf:b6:d1:28:54:7d:98:ca:66:01:27:9f:ab:
f6:c9:80:d4:d1:6a:37:f2:ed:d2:81:47:08:0b:ed:86:32:4b:
30:3b:d3:71:57:f8:cf:91:fe:b1:6a:aa:ab:61:5e:43:4b:f5:
8b:30:08:25:53:13:a7:55:78:65:8a:40:cd:1d:0f:19:36:52:
ac:da:d3:1b:0c:60:dd:15:21:c4:b1:1e:58:62:85:bb:0b:ba:
35:0d:83:8f:b9:82:04:4f:46:a3:92:fd:e8:87:ea:39:8b:8b:
4d:10:77:a1:a0:68:eb:be:66:5a:3c:d4:af:d0:80:cf:12:28:
a6:40:c3:be:e4:85:0f:0d:27:81:e4:2d:ee:54:75:a7:05:4c:
0b:05:31:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 05:58:12 2024 by rpki-client on console-fra.rpki-client.org