Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/qAwuED-1VNPVMySVKSnG4_G6nJk.roa
File: qAwuED-1VNPVMySVKSnG4_G6nJk.roa (raw, json)
Hash identifier: krbAmNL/6aSKicRchzWScMV4WZEf6dqMGaGCkJ80Myc=
Subject key identifier: A8:0C:2E:10:3F:B5:54:D3:D5:33:24:95:29:29:C6:E3:F1:BA:9C:99
Certificate issuer: /CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Certificate serial: 018CC26D5C44AC2BC63F897BBF655A5423C7
Authority key identifier: E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/qAwuED-1VNPVMySVKSnG4_G6nJk.roa
Signing time: Mon 01 Jan 2024 00:29:56 +0000
ROA not before: Mon 01 Jan 2024 00:29:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207424
IP address blocks: 2001:67c:2fc0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 May 2024 10:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:5c:44:ac:2b:c6:3f:89:7b:bf:65:5a:54:23:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e680478faec8b67ddfece6357cf25cf2ca1d85d0
Validity
Not Before: Jan 1 00:29:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a80c2e103fb554d3d53324952929c6e3f1ba9c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f1:4c:b6:6a:f7:eb:b0:45:6b:31:1c:92:7f:
d2:c6:5f:85:91:a7:e2:8d:f1:59:4e:62:d4:d0:79:
62:ae:81:63:44:86:8d:aa:8e:06:be:25:d2:cb:97:
ae:15:b7:b9:8f:04:59:7c:93:41:bf:8c:45:4b:d8:
d3:43:c6:b2:63:40:c3:f2:35:f1:0e:14:17:e4:e8:
e0:d8:53:65:54:08:8a:21:b4:55:d6:c7:3d:5f:d4:
98:11:ca:51:1c:0f:08:39:83:24:35:db:ff:3b:f8:
1d:02:59:35:3d:1e:3a:8c:1e:75:73:03:8a:24:57:
7b:52:d2:25:77:7b:4f:a5:55:f0:d0:ad:99:8b:57:
e1:1f:33:39:ca:b7:93:1b:80:2b:f9:51:04:4a:61:
0f:c1:f4:9f:28:b9:ba:5c:a3:a6:3a:f8:e0:49:5d:
55:7e:ab:dd:31:3b:30:cf:69:e4:0d:f3:e0:a5:0d:
b3:f6:aa:be:a3:f1:e0:7f:b5:6e:7b:d6:e3:3a:aa:
9d:a5:89:8d:82:9b:f0:dc:b8:7e:a6:75:a0:d6:32:
60:33:06:4f:af:fc:c8:22:c4:7e:9e:aa:01:5e:cd:
7a:48:db:7b:3b:d6:99:81:71:6f:6b:09:57:78:b1:
3c:a9:6b:f4:aa:9a:76:4d:ad:a2:e9:1f:e8:74:41:
47:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0C:2E:10:3F:B5:54:D3:D5:33:24:95:29:29:C6:E3:F1:BA:9C:99
X509v3 Authority Key Identifier:
keyid:E6:80:47:8F:AE:C8:B6:7D:DF:EC:E6:35:7C:F2:5C:F2:CA:1D:85:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5oBHj67Itn3f7OY1fPJc8sodhdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/qAwuED-1VNPVMySVKSnG4_G6nJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/25a01b-5fb0-444e-a2c7-339c9d48774c/1/5oBHj67Itn3f7OY1fPJc8sodhdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2fc0::/48
Signature Algorithm: sha256WithRSAEncryption
0c:70:8e:ee:34:c0:97:62:e1:ad:9c:17:b9:cb:31:62:8d:d1:
c7:38:5d:b4:2c:a9:6d:25:c0:09:ef:4e:12:43:c4:61:84:67:
c3:27:ba:75:4b:9d:8b:9d:88:13:1a:d4:12:f6:ba:9e:44:05:
f1:9d:6b:32:a7:81:f8:45:5b:11:55:3b:b2:ba:4e:cf:dd:ad:
dc:93:5f:63:0f:85:13:f9:1f:18:c1:e9:18:c3:0f:91:a6:20:
2a:7b:a2:22:42:24:0a:0b:11:9c:cc:71:cf:16:79:7b:00:65:
b7:71:89:6c:ad:6b:88:38:46:42:6e:0f:7b:d7:a8:49:3e:9d:
cb:c0:5a:d0:45:c1:07:0b:bf:af:aa:53:7e:7a:09:8b:5e:2f:
f8:52:fe:13:41:df:90:4d:6e:18:55:bc:38:12:f0:94:91:c9:
7c:71:b8:2e:86:32:b7:04:e0:85:9d:6b:5a:c5:c8:6f:ea:c3:
51:f0:96:78:e0:a6:b5:9b:61:e5:08:0a:8a:46:db:61:e2:5e:
34:4d:46:ee:6f:c5:ad:15:a6:1c:5c:60:46:d7:f0:67:5a:10:
19:86:ca:de:cb:d7:75:c7:0d:cf:79:fc:f7:71:02:5f:8e:82:
43:95:b0:4a:a8:40:10:16:8e:66:52:d7:74:2b:f2:5c:e9:c0:
2b:03:b0:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 13:49:11 2024 by rpki-client on console-fra.rpki-client.org