Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/q_pSH87LvDyJ6u_JFrO5-2PLc84.roa
File: q_pSH87LvDyJ6u_JFrO5-2PLc84.roa (raw, json)
Hash identifier: Q/OwZJeLv0SFq6NShBOyoMcyCdHvavfp08J1Wp5Xb/8=
Subject key identifier: AB:FA:52:1F:CE:CB:BC:3C:89:EA:EF:C9:16:B3:B9:FB:63:CB:73:CE
Certificate issuer: /CN=d716209d7def98a2bb34977f65009b3520da256e
Certificate serial: 0190BB1F610DC2AE3AEDBF608D2816ACCB26
Authority key identifier: D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/q_pSH87LvDyJ6u_JFrO5-2PLc84.roa
Signing time: Tue 16 Jul 2024 10:38:34 +0000
ROA not before: Tue 16 Jul 2024 10:38:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212027
IP address blocks: 2a14:1bc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:bb:1f:61:0d:c2:ae:3a:ed:bf:60:8d:28:16:ac:cb:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d716209d7def98a2bb34977f65009b3520da256e
Validity
Not Before: Jul 16 10:38:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abfa521fcecbbc3c89eaefc916b3b9fb63cb73ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:5d:4b:73:6f:62:29:97:bf:9e:44:17:41:f1:
50:fb:f9:31:2d:03:82:aa:24:81:c9:0f:64:58:e4:
c3:0f:d3:dd:ba:7e:b1:a2:30:c0:60:74:b3:cf:17:
59:ed:89:ec:c8:eb:ad:23:4b:80:6e:92:28:ac:03:
20:74:82:bc:9e:08:55:c5:d2:fb:e0:27:e9:94:55:
a6:fc:5f:b2:b3:59:09:a8:7d:af:85:aa:54:cc:f9:
f7:5b:ed:8c:cf:d4:54:88:81:9b:d2:cf:bc:2b:19:
65:36:0b:cd:09:4c:1a:2b:5f:cb:b5:49:55:d6:a1:
c7:80:75:49:b9:0c:7e:df:e8:03:90:01:39:44:ce:
46:39:3d:d1:4b:06:2e:b4:59:d5:b4:91:dd:82:3f:
9a:9b:96:51:8d:6e:4e:42:31:ca:0e:d7:ba:99:0b:
f4:3d:7b:7e:d9:e9:3d:1a:30:b4:61:7c:09:6a:2b:
4e:46:b2:24:0e:38:6e:c7:3f:5d:b0:f2:70:57:c6:
07:d5:b7:ce:53:d5:63:d3:61:da:09:b4:da:be:2d:
91:14:af:25:4b:84:87:fb:1f:d0:c5:b2:d9:d1:2e:
f9:45:03:a4:5f:72:b2:d2:71:ca:8e:c9:29:97:b3:
55:3b:e3:bc:a3:75:3d:73:96:6e:53:05:4d:1e:b7:
9e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FA:52:1F:CE:CB:BC:3C:89:EA:EF:C9:16:B3:B9:FB:63:CB:73:CE
X509v3 Authority Key Identifier:
keyid:D7:16:20:9D:7D:EF:98:A2:BB:34:97:7F:65:00:9B:35:20:DA:25:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/q_pSH87LvDyJ6u_JFrO5-2PLc84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b52e02-3af8-4ebb-99d3-851d9c044e70/1/1xYgnX3vmKK7NJd_ZQCbNSDaJW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1bc0::/29
Signature Algorithm: sha256WithRSAEncryption
10:be:c2:5b:a8:25:fc:77:77:27:61:89:b8:94:87:31:94:82:
3b:8e:33:15:22:2a:bd:4c:c9:0f:d6:0f:77:4a:1b:b6:e3:b8:
40:9c:a8:7b:57:72:e4:62:a5:95:83:a5:89:f5:9d:a2:28:e8:
8a:81:b5:6f:6e:ee:40:97:1a:3f:08:f0:ba:9a:42:c5:39:a4:
73:0e:5e:c7:02:a2:d0:80:ea:0b:c8:d9:14:cf:07:11:5f:e1:
d8:b6:86:92:47:76:fe:f2:85:f0:d9:d9:88:12:da:96:d3:2c:
ee:90:e3:55:d5:7f:01:8d:dc:84:13:ca:c1:9a:3e:ee:f1:f4:
bb:4d:0b:3b:cd:f5:bf:b0:bc:c3:07:b3:dd:af:27:7d:59:38:
82:86:5e:27:7b:18:da:eb:50:b7:62:67:74:61:3a:5b:e3:c7:
4a:c1:c3:28:19:8b:33:9c:77:1a:61:05:62:87:3c:76:ef:cd:
54:fe:5d:cb:bd:e5:99:fa:91:c5:67:f3:54:d3:62:46:68:43:
df:79:6b:c8:04:b5:fb:fb:95:07:a3:53:34:a5:b1:b7:80:a1:
d2:fc:5a:0a:98:e7:34:71:c3:f5:1a:c5:9d:76:bd:37:65:b9:
ef:9f:46:40:72:d4:3f:66:c3:44:31:7f:6a:9c:7f:aa:83:12:
4c:54:45:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:26:01 2024 by rpki-client on console-ams.rpki-client.org