Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/dQ2QtGX607DJ5QSvt7w3vU31W4I.roa
File: dQ2QtGX607DJ5QSvt7w3vU31W4I.roa (raw, json)
Hash identifier: H3PXP+vYd8O4Nxe4tdBDsp+miUGJic2whSDbyoUjrgI=
Subject key identifier: 75:0D:90:B4:65:FA:D3:B0:C9:E5:04:AF:B7:BC:37:BD:4D:F5:5B:82
Certificate issuer: /CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Certificate serial: 018E2DF4C66883F7DD1731496062F9F21D92
Authority key identifier: E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/dQ2QtGX607DJ5QSvt7w3vU31W4I.roa
Signing time: Mon 11 Mar 2024 14:40:00 +0000
ROA not before: Mon 11 Mar 2024 14:40:00 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215341
IP address blocks: 2a0d:2146:8660::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.mft
rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 11 Jun 2024 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:f4:c6:68:83:f7:dd:17:31:49:60:62:f9:f2:1d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e14ac611614dd165d94557296ed7ed46c8fc025f
Validity
Not Before: Mar 11 14:40:00 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=750d90b465fad3b0c9e504afb7bc37bd4df55b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:fa:21:ef:4c:29:9d:df:1c:7f:46:77:ed:db:
0f:67:99:f8:5b:3d:49:94:b3:24:c4:f7:ab:c7:a1:
1c:31:e5:4f:a2:91:5b:c0:b3:e1:5d:da:5e:66:6e:
be:3e:cf:1b:1e:89:f0:aa:10:b0:21:16:0e:82:90:
a9:a6:cc:02:29:de:fe:46:94:5b:6f:69:ad:53:31:
04:b1:50:c2:99:4c:84:39:cc:06:33:ef:c4:02:5d:
bc:99:74:a2:e0:1a:81:29:b1:81:5d:21:3d:ec:fc:
f6:66:8d:c0:ee:0d:7b:04:27:28:8f:43:c5:07:d9:
dc:3e:65:de:66:d8:f3:1c:a9:7e:4a:9b:ac:87:0f:
7d:f2:bd:c1:7a:12:3e:32:e3:68:1c:71:76:0b:16:
4d:8e:91:89:d4:81:34:91:8f:1e:d8:ad:31:ec:56:
47:1c:c9:3f:35:a3:71:3c:17:35:d2:11:4b:33:53:
b4:44:90:89:c6:e6:41:76:df:2b:94:1b:b8:13:f1:
0e:fd:6a:05:27:3d:bc:55:d1:9e:f8:e3:0e:7c:a7:
db:75:0b:25:e8:dd:13:61:cb:54:49:fd:e6:e5:8c:
d6:84:bc:df:9f:1d:93:b4:45:81:4c:99:68:72:d3:
a9:10:6d:9c:a4:be:33:d8:e6:7a:74:d4:4e:56:bd:
e9:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:0D:90:B4:65:FA:D3:B0:C9:E5:04:AF:B7:BC:37:BD:4D:F5:5B:82
X509v3 Authority Key Identifier:
keyid:E1:4A:C6:11:61:4D:D1:65:D9:45:57:29:6E:D7:ED:46:C8:FC:02:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4UrGEWFN0WXZRVcpbtftRsj8Al8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/dQ2QtGX607DJ5QSvt7w3vU31W4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6e79b8-2b8f-4ecc-9a6e-70e898bb38dd/1/4UrGEWFN0WXZRVcpbtftRsj8Al8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:2146:8660::/44
Signature Algorithm: sha256WithRSAEncryption
c8:61:1e:25:1e:9a:7e:7a:72:48:d7:ee:dc:88:57:19:20:bf:
78:5e:2a:44:bf:36:d2:a2:1a:af:15:97:75:01:15:54:43:2c:
22:9f:31:04:52:0e:55:ee:59:da:89:85:72:8f:11:c7:0b:01:
84:44:a0:d5:ed:8c:c6:0e:96:6a:11:98:ba:98:29:5a:9a:c9:
b1:03:e2:c9:8a:85:8c:86:7f:b4:d7:20:bc:8a:76:7b:94:e7:
67:f4:80:55:15:8e:54:b8:30:6d:0d:93:04:f2:21:bc:e8:ca:
db:5d:51:33:5d:7b:1b:81:c5:bb:d8:05:cd:f2:f9:aa:bb:de:
b1:1e:3b:40:4e:a8:97:c7:bd:82:90:3d:43:a6:51:69:0c:3e:
b9:65:03:c9:09:13:92:9e:a4:a0:d4:46:b7:60:52:f9:51:b3:
04:cf:fd:6e:ae:d5:87:84:1f:ac:dc:a2:60:14:a7:47:67:3d:
d6:99:ba:ad:72:f1:e2:38:b4:63:36:97:56:65:01:af:31:b5:
d8:0d:e6:cf:f0:78:79:47:1a:7e:15:6e:73:5d:29:bf:5c:d4:
b1:8b:0d:55:9c:1e:e0:16:66:2a:83:70:8a:1e:64:a3:fd:4d:
66:54:51:4c:d9:1b:88:d1:9a:c7:c8:37:a9:20:52:82:db:0d:
76:ac:3e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 04:04:27 2024 by rpki-client on console-fra.rpki-client.org