Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/QM_egHDcrR5q7nQYoBWntLtbrf8.roa
File: QM_egHDcrR5q7nQYoBWntLtbrf8.roa (raw, json)
Hash identifier: JUyicMrB30y0J1zYURmpfu8mjeoieQp5GegTUKCNjqU=
Subject key identifier: 40:CF:DE:80:70:DC:AD:1E:6A:EE:74:18:A0:15:A7:B4:BB:5B:AD:FF
Certificate issuer: /CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Certificate serial: 018CC7271F815F57D546C2C882A553969065
Authority key identifier: 2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/QM_egHDcrR5q7nQYoBWntLtbrf8.roa
Signing time: Mon 01 Jan 2024 22:31:19 +0000
ROA not before: Mon 01 Jan 2024 22:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200132
IP address blocks: 2a12:8fc6:600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 01:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:1f:81:5f:57:d5:46:c2:c8:82:a5:53:96:90:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b967e772cc7298305a11ffa65dd185f6a58910b
Validity
Not Before: Jan 1 22:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40cfde8070dcad1e6aee7418a015a7b4bb5badff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2f:1e:36:b1:36:fa:cb:41:8f:23:0b:da:eb:
6e:80:bd:1b:b3:ba:7a:6b:35:4a:f7:43:9e:c3:a8:
d2:6c:e2:63:c6:f0:77:9f:e2:de:9f:a1:8d:4e:80:
0b:5d:a7:7f:4a:95:67:c9:48:b0:0f:3e:11:41:69:
23:34:e8:12:0f:ea:8e:c1:97:67:0c:c3:27:de:e3:
38:6d:7b:35:12:39:0a:a9:37:d2:ef:56:b0:a2:f9:
fa:2b:2c:8b:a6:20:b2:70:85:9a:06:14:28:42:14:
90:3f:cc:b9:83:4a:92:ae:98:5d:b6:f6:8e:40:de:
53:3d:ae:7c:e2:09:ec:45:9d:7b:dd:a9:a0:92:e1:
44:98:e3:5d:25:42:60:56:ac:6c:2c:37:22:2b:a0:
12:17:80:fe:90:e0:64:07:fc:c8:82:95:a5:e7:bc:
e0:a6:50:9d:42:6c:ec:bc:12:25:e5:04:b7:6b:2a:
ee:58:ed:1c:74:0d:5d:10:fa:75:8f:3f:dc:eb:f3:
81:41:c6:fd:39:77:04:f7:eb:e7:31:7c:99:a2:24:
51:32:f9:d1:a2:b3:14:8e:bc:1b:b6:df:d3:8b:2b:
15:d7:35:b2:4f:67:58:03:28:54:58:6d:05:4a:4f:
e0:bf:de:5f:34:42:02:63:c7:4c:06:f8:47:04:00:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:CF:DE:80:70:DC:AD:1E:6A:EE:74:18:A0:15:A7:B4:BB:5B:AD:FF
X509v3 Authority Key Identifier:
keyid:2B:96:7E:77:2C:C7:29:83:05:A1:1F:FA:65:DD:18:5F:6A:58:91:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/QM_egHDcrR5q7nQYoBWntLtbrf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/660e74-a3bc-444b-9c6a-58c96d66f0a1/1/K5Z-dyzHKYMFoR_6Zd0YX2pYkQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:8fc6:600::/48
Signature Algorithm: sha256WithRSAEncryption
97:85:4f:29:ec:ee:26:14:fd:c5:02:f1:42:5b:06:8b:8e:a3:
93:e1:3e:93:1c:05:6c:03:bd:3f:fa:1b:5a:94:b9:e8:f1:20:
57:8b:db:4d:b7:ff:d3:96:b5:2f:ee:4c:6d:f0:1d:b5:35:8b:
c4:58:81:d3:74:f9:30:e3:d7:0e:d1:78:31:44:93:30:07:2d:
70:5c:cf:9a:ac:7b:9c:29:f9:86:24:3e:84:fa:b6:91:44:c3:
fa:c3:e6:34:54:c3:a9:1c:59:c3:9b:52:c8:c5:bf:0d:28:c8:
63:23:c0:ac:d0:7e:77:62:2d:22:47:97:80:67:87:8f:63:ec:
22:2c:57:3c:72:07:00:ae:81:61:73:7c:d4:68:77:84:3f:de:
b6:b2:95:d0:11:b5:99:b7:5c:9c:3c:05:85:47:0c:a8:3c:e8:
c2:df:58:b0:f1:da:1c:b1:2f:03:b4:0b:5f:44:c0:b7:a2:5b:
5b:8e:f0:e7:81:81:c6:a9:02:c5:ff:e9:fc:8a:57:79:3f:15:
80:e1:79:db:4c:21:8e:95:45:3d:f9:3f:d6:91:5b:05:b8:1e:
f0:24:86:b1:49:8d:9e:84:5a:7f:62:a1:8f:6b:17:fd:82:77:
cf:f1:8b:9c:d2:d0:65:e0:4a:e2:ac:42:df:a3:7e:b8:70:12:
93:24:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:28:25 2024 by rpki-client on console-fra.rpki-client.org