Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/vQqgl7NlOvNPcD5YyJRVXCifWV4.roa
File: vQqgl7NlOvNPcD5YyJRVXCifWV4.roa (raw, json)
Hash identifier: OmFHIJSjblewXqaQCXbtRyI0B8ruZybdO3EKk4q3WEU=
Subject key identifier: BD:0A:A0:97:B3:65:3A:F3:4F:70:3E:58:C8:94:55:5C:28:9F:59:5E
Certificate issuer: /CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Certificate serial: 018CC6B77ED41021373FFB7838BBA088219D
Authority key identifier: A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/vQqgl7NlOvNPcD5YyJRVXCifWV4.roa
Signing time: Mon 01 Jan 2024 20:29:23 +0000
ROA not before: Mon 01 Jan 2024 20:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20712
IP address blocks: 2001:67c:a18::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.mft
rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b7:7e:d4:10:21:37:3f:fb:78:38:bb:a0:88:21:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a60e46d63a7183f70da492f02b8098c2bffc28be
Validity
Not Before: Jan 1 20:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bd0aa097b3653af34f703e58c894555c289f595e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:97:2f:c0:e7:99:0e:fa:1a:bc:1b:eb:d3:09:
ad:1b:d8:8e:9f:8a:4c:7e:01:df:ea:0b:de:af:76:
fc:ff:ee:f9:b3:6b:a8:c7:ae:7d:ac:98:7f:c7:54:
ad:c6:28:e5:73:5a:95:5a:3f:29:86:24:b6:58:74:
e3:cf:69:5f:83:ec:da:db:97:d1:fc:24:65:66:0b:
04:53:a9:34:b1:b5:5c:8d:2a:d9:c1:24:16:cb:41:
ca:54:64:a9:08:93:46:05:ec:45:69:86:df:2d:c4:
f2:02:75:ce:67:36:2a:de:94:a3:1d:6b:63:b8:fc:
c6:6b:33:0a:be:bc:f4:6e:8e:74:71:2d:ea:25:0d:
16:b0:6d:c7:2c:d1:85:e5:12:24:2d:f9:02:25:36:
55:6b:04:86:40:ee:d1:25:f9:24:6d:84:e3:9a:38:
55:b4:aa:13:2d:82:78:47:4b:19:c7:01:72:ef:b0:
9a:29:17:36:2a:ab:83:98:56:12:af:33:1d:b5:ef:
a7:9d:ca:5c:ef:d1:69:22:9e:7c:e7:4e:10:1c:97:
a3:94:3f:75:90:17:87:7f:de:a5:8c:aa:6c:a8:ab:
11:6d:55:77:a3:ad:06:32:2a:c4:c6:74:10:01:0d:
46:a0:79:5b:f3:40:81:22:df:7d:38:17:c0:20:ca:
90:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0A:A0:97:B3:65:3A:F3:4F:70:3E:58:C8:94:55:5C:28:9F:59:5E
X509v3 Authority Key Identifier:
keyid:A6:0E:46:D6:3A:71:83:F7:0D:A4:92:F0:2B:80:98:C2:BF:FC:28:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg5G1jpxg_cNpJLwK4CYwr_8KL4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/vQqgl7NlOvNPcD5YyJRVXCifWV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f0cfa7-6254-4a81-996c-3b7ef25cfe83/1/pg5G1jpxg_cNpJLwK4CYwr_8KL4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:a18::/48
Signature Algorithm: sha256WithRSAEncryption
98:5d:94:7c:3e:66:f3:ca:09:7b:4e:00:fd:23:32:d1:67:2c:
f4:17:7b:38:63:56:f3:dd:aa:88:2a:1d:38:a6:c7:26:6a:58:
43:2e:23:79:04:ce:98:8e:0a:20:74:57:b5:8f:be:33:fc:94:
50:e3:ce:2d:7f:f8:7b:55:b6:b3:65:e8:e7:11:0c:87:94:97:
23:0f:ef:4d:45:db:09:87:c5:52:db:4a:bd:ad:60:12:b2:a2:
41:63:27:f2:94:0b:80:05:2e:35:b0:c2:85:16:ce:86:26:46:
c0:b3:88:8d:42:d8:18:52:20:fe:ba:2f:f8:2d:53:9d:e7:a7:
d7:66:ea:ee:92:ed:da:48:41:d4:85:74:97:61:18:ec:96:95:
d7:f5:57:c3:d1:3f:a9:fd:97:ab:3e:0b:6d:03:c9:cf:5e:1d:
bd:4e:3a:19:c4:e8:d9:cb:de:dd:68:fa:55:b4:30:38:09:c1:
d2:15:b9:a6:a4:90:97:ca:8c:f9:1f:cc:c5:e3:fb:9c:70:8e:
c7:dc:e2:62:36:7e:47:3e:87:63:1c:07:db:fe:d3:48:89:04:
ac:74:7a:98:5a:34:82:13:09:69:5a:d8:ef:b1:50:ca:f2:ac:
12:1f:2a:0a:0a:c6:6a:9b:ba:0d:3a:1c:83:5d:2c:d3:78:62:
eb:e8:33:72
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzGt37UECE3P/t4OLugiCGdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2MGU0NmQ2M2E3MTgzZjcwZGE0OTJmMDJiODA5OGMyYmZm
YzI4YmUwHhcNMjQwMTAxMjAyOTIzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZDBhYTA5N2IzNjUzYWYzNGY3MDNlNThjODk0NTU1YzI4OWY1OTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZcvwOeZDvoavBvr0wmtG9iOn4pM
fgHf6gver3b8/+75s2uox659rJh/x1Stxijlc1qVWj8phiS2WHTjz2lfg+za25fR
/CRlZgsEU6k0sbVcjSrZwSQWy0HKVGSpCJNGBexFaYbfLcTyAnXOZzYq3pSjHWtj
uPzGazMKvrz0bo50cS3qJQ0WsG3HLNGF5RIkLfkCJTZVawSGQO7RJfkkbYTjmjhV
tKoTLYJ4R0sZxwFy77CaKRc2KquDmFYSrzMdte+nncpc79FpIp58504QHJejlD91
kBeHf96ljKpsqKsRbVV3o60GMirExnQQAQ1GoHlb80CBIt99OBfAIMqQDwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFL0KoJezZTrzT3A+WMiUVVwon1leMB8GA1UdIwQY
MBaAFKYORtY6cYP3DaSS8CuAmMK//Ci+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMt
M2I3ZWYyNWNmZTgzLzEvdlFxZ2w3TmxPdk5QY0Q1WXlKUlZYQ2lmV1Y0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mMGNmYTctNjI1NC00YTgxLTk5NmMtM2I3ZWYyNWNmZTgz
LzEvcGc1RzFqcHhnX2NOcEpMd0s0Q1l3cl84S0w0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGfAoY
MA0GCSqGSIb3DQEBCwUAA4IBAQCYXZR8Pmbzygl7TgD9IzLRZyz0F3s4Y1bz3aqI
Kh04pscmalhDLiN5BM6YjgogdFe1j74z/JRQ484tf/h7VbazZejnEQyHlJcjD+9N
RdsJh8VS20q9rWASsqJBYyfylAuABS41sMKFFs6GJkbAs4iNQtgYUiD+ui/4LVOd
56fXZuruku3aSEHUhXSXYRjslpXX9VfD0T+p/ZerPgttA8nPXh29TjoZxOjZy97d
aPpVtDA4CcHSFbmmpJCXyoz5H8zF4/uccI7H3OJiNn5HPodjHAfb/tNIiQSsdHqY
WjSCEwlpWtjvsVDK8qwSHyoKCsZqm7oNOhyDXSzTeGLr6DNy
-----END CERTIFICATE-----
Generated at Fri Nov 22 20:10:10 2024 by rpki-client on console-ams.rpki-client.org