Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/QjqaxMJqN3fELvh7ETrC8-yDG6g.roa
File: QjqaxMJqN3fELvh7ETrC8-yDG6g.roa (raw, json)
Hash identifier: y0M6iAaOVtlXjkBCZ8+cIymBhydf/ttfbbT5iHE6TE8=
Subject key identifier: 42:3A:9A:C4:C2:6A:37:77:C4:2E:F8:7B:11:3A:C2:F3:EC:83:1B:A8
Certificate issuer: /CN=0415d5c95cd7b58d297d479267c762cde91063e2
Certificate serial: 018DE4AB9C9C688714C442049A9A92B41653
Authority key identifier: 04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/QjqaxMJqN3fELvh7ETrC8-yDG6g.roa
Signing time: Mon 26 Feb 2024 09:07:48 +0000
ROA not before: Mon 26 Feb 2024 09:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34359
IP address blocks: 2001:678:ebc::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:ab:9c:9c:68:87:14:c4:42:04:9a:9a:92:b4:16:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0415d5c95cd7b58d297d479267c762cde91063e2
Validity
Not Before: Feb 26 09:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=423a9ac4c26a3777c42ef87b113ac2f3ec831ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:8f:67:34:84:a1:1d:24:d7:13:60:41:c1:22:
7d:f7:d3:04:7e:48:f3:36:6c:4b:f2:2b:bf:91:86:
15:22:16:e7:d1:ed:9b:34:b7:b0:33:2e:53:15:a0:
8f:94:d2:e6:29:f3:e2:1e:8c:dd:fa:f7:0f:a6:ed:
4e:b5:5a:0c:c2:5b:c6:d4:ff:3f:73:bb:44:89:f6:
19:af:f2:5a:e5:58:a1:74:b7:2f:1e:09:12:1c:94:
ce:8b:5e:0c:38:7e:17:07:fe:da:26:53:7d:2c:9a:
2f:e6:62:6d:09:9a:7d:21:b0:88:9d:6a:21:cc:f1:
03:11:40:c5:8d:86:a7:02:f9:1e:c1:27:30:52:45:
b7:c2:91:01:fa:c6:48:4b:10:ee:02:ab:f4:23:0d:
7c:c6:f2:a0:52:62:3b:c3:ae:20:7b:6d:d5:e4:94:
5a:3d:ad:64:b3:14:a0:db:54:a6:ce:26:7d:06:67:
76:82:dd:45:5d:a3:e1:0f:69:63:dd:0f:27:fa:95:
7e:07:12:c7:7d:ec:02:01:ec:80:0f:9f:6c:7e:42:
c7:ef:74:3a:ac:b6:e2:56:af:c7:12:d8:ea:d7:37:
0e:40:9f:96:79:ce:e7:9d:86:42:ea:ab:d9:0a:0a:
8e:df:56:4f:2c:50:1f:f0:71:53:24:41:5b:5f:49:
ec:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3A:9A:C4:C2:6A:37:77:C4:2E:F8:7B:11:3A:C2:F3:EC:83:1B:A8
X509v3 Authority Key Identifier:
keyid:04:15:D5:C9:5C:D7:B5:8D:29:7D:47:92:67:C7:62:CD:E9:10:63:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BBXVyVzXtY0pfUeSZ8dizekQY-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/QjqaxMJqN3fELvh7ETrC8-yDG6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/a5c5e1-bda7-4e8a-b1b1-579c90c0de2a/1/BBXVyVzXtY0pfUeSZ8dizekQY-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:ebc::/48
Signature Algorithm: sha256WithRSAEncryption
49:73:2d:b5:76:02:7e:fd:5c:9e:47:4e:11:b2:9a:95:37:c0:
29:48:3d:16:36:7b:ae:42:06:d0:48:d9:f5:8e:18:74:3a:33:
1b:ae:95:f0:30:96:21:d5:1e:05:87:77:e7:ad:19:5f:bf:02:
f9:c4:18:23:30:99:02:52:19:ba:72:31:86:fd:50:52:2d:62:
21:bd:68:7f:51:64:3f:19:67:9a:18:ff:cd:15:7a:5a:15:a5:
5a:d1:16:ce:00:f1:79:f0:79:bb:b0:68:4e:40:eb:2c:ef:32:
62:79:e8:d0:24:59:8d:95:08:60:7e:5b:53:7c:fe:ce:e6:e6:
4d:db:31:eb:6c:94:1b:d7:a5:e5:d4:f6:3d:4a:7a:76:c0:08:
0b:e7:63:42:0c:6f:7b:f4:f6:5f:be:9d:fc:8d:0c:1e:fa:fd:
97:a5:8f:a5:eb:70:40:cf:b9:53:ae:54:16:ac:a5:b1:55:0f:
1e:3d:17:78:1c:c5:21:49:12:23:ce:bd:25:68:6c:65:b1:b2:
a1:8f:8c:ac:fd:f5:20:0d:15:26:1d:c9:f8:b1:a2:28:a8:60:
12:19:00:79:bb:55:52:b0:9b:32:ba:c2:fe:f6:32:c5:e7:0a:
74:f8:26:82:94:a2:25:00:0b:70:ad:75:93:55:7a:97:7c:0a:
10:0b:64:21
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAY3kq5ycaIcUxEIEmpqStBZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0MTVkNWM5NWNkN2I1OGQyOTdkNDc5MjY3Yzc2MmNkZTkx
MDYzZTIwHhcNMjQwMjI2MDkwNzQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjNhOWFjNGMyNmEzNzc3YzQyZWY4N2IxMTNhYzJmM2VjODMxYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY9nNIShHSTXE2BBwSJ999MEfkjz
NmxL8iu/kYYVIhbn0e2bNLewMy5TFaCPlNLmKfPiHozd+vcPpu1OtVoMwlvG1P8/
c7tEifYZr/Ja5VihdLcvHgkSHJTOi14MOH4XB/7aJlN9LJov5mJtCZp9IbCInWoh
zPEDEUDFjYanAvkewScwUkW3wpEB+sZISxDuAqv0Iw18xvKgUmI7w64ge23V5JRa
Pa1ksxSg21SmziZ9Bmd2gt1FXaPhD2lj3Q8n+pV+BxLHfewCAeyAD59sfkLH73Q6
rLbiVq/HEtjq1zcOQJ+Wec7nnYZC6qvZCgqO31ZPLFAf8HFTJEFbX0ns+wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEI6msTCajd3xC74exE6wvPsgxuoMB8GA1UdIwQY
MBaAFAQV1clc17WNKX1HkmfHYs3pEGPiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEt
NTc5YzkwYzBkZTJhLzEvUWpxYXhNSnFOM2ZFTHZoN0VUckM4LXlERzZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9hNWM1ZTEtYmRhNy00ZThhLWIxYjEtNTc5YzkwYzBkZTJh
LzEvQkJYVnlWelh0WTBwZlVlU1o4ZGl6ZWtRWS1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeA68
MA0GCSqGSIb3DQEBCwUAA4IBAQBJcy21dgJ+/VyeR04RspqVN8ApSD0WNnuuQgbQ
SNn1jhh0OjMbrpXwMJYh1R4Fh3fnrRlfvwL5xBgjMJkCUhm6cjGG/VBSLWIhvWh/
UWQ/GWeaGP/NFXpaFaVa0RbOAPF58Hm7sGhOQOss7zJieejQJFmNlQhgfltTfP7O
5uZN2zHrbJQb16Xl1PY9Snp2wAgL52NCDG979PZfvp38jQwe+v2XpY+l63BAz7lT
rlQWrKWxVQ8ePRd4HMUhSRIjzr0laGxlsbKhj4ys/fUgDRUmHcn4saIoqGASGQB5
u1VSsJsyusL+9jLF5wp0+CaClKIlAAtwrXWTVXqXfAoQC2Qh
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:56:58 2024 by rpki-client on console-fra.rpki-client.org