Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/qIe-9p4YSvEjSJR_4gasJEzfJYg.roa
File: qIe-9p4YSvEjSJR_4gasJEzfJYg.roa (raw, json)
Hash identifier: mnnKC9NlICMVWak7pBpBArRPi2QPEIH1NuB5SKfyAmY=
Subject key identifier: A8:87:BE:F6:9E:18:4A:F1:23:48:94:7F:E2:06:AC:24:4C:DF:25:88
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D2B5665C944999B5A2459F04E23CC
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/qIe-9p4YSvEjSJR_4gasJEzfJYg.roa
Signing time: Mon 01 Jan 2024 00:29:43 +0000
ROA not before: Mon 01 Jan 2024 00:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198739
IP address blocks: 2a0e:aa07:e090::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2b:56:65:c9:44:99:9b:5a:24:59:f0:4e:23:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a887bef69e184af12348947fe206ac244cdf2588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:d9:25:59:4c:6c:f5:70:1e:54:5d:b4:20:2d:
6d:67:56:d1:3b:54:eb:00:83:a7:94:2d:da:f8:42:
71:86:72:e4:10:1d:c5:af:04:5f:df:2d:d3:77:47:
ef:27:fa:c7:14:64:03:55:8b:a7:8d:7a:4c:d0:50:
14:a2:41:df:90:b2:2a:4e:d2:9d:ca:8c:4f:96:a4:
a9:77:fa:78:ef:7a:53:e7:0b:2f:03:26:ae:02:c0:
5a:0e:44:d1:ba:72:d0:d5:7a:f3:94:19:a2:00:c1:
67:dc:83:f2:d4:52:42:1c:d2:0c:67:65:03:14:2a:
9e:15:b9:c2:ca:ea:6b:51:a7:9d:b2:54:f3:3a:11:
07:c5:e3:0e:c3:07:ac:72:20:ee:81:56:bf:97:55:
a0:ed:7b:aa:3e:6b:5f:e5:5f:c3:4c:77:85:82:00:
f7:62:a4:48:13:89:5c:8a:cc:6f:39:41:3b:cb:61:
c2:0f:c1:ad:2e:75:4d:c4:0e:fb:1b:3e:e6:78:1e:
c4:22:3d:6c:6a:82:27:03:35:a6:1a:6a:99:bb:f4:
3a:6b:3b:9b:cc:b3:53:7b:50:ef:b3:3b:a8:fd:84:
39:cc:1f:4b:2c:e8:7c:9f:f7:41:c8:52:38:e9:ab:
71:0e:c7:86:a0:47:16:df:44:17:23:51:be:b1:a8:
de:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:87:BE:F6:9E:18:4A:F1:23:48:94:7F:E2:06:AC:24:4C:DF:25:88
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/qIe-9p4YSvEjSJR_4gasJEzfJYg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e090::/44
Signature Algorithm: sha256WithRSAEncryption
c7:d6:db:e3:e6:79:4e:84:1a:7c:cf:ec:05:d3:a7:b1:4a:61:
85:c7:ae:0d:26:cb:b2:72:15:7d:6f:f8:d6:5f:af:4c:09:2d:
3e:56:bf:68:d0:97:94:32:83:7f:b0:d9:f8:b9:86:05:29:45:
0a:dd:29:a4:eb:3b:b3:64:0f:80:53:a5:62:73:1a:8e:7f:9c:
28:22:54:d0:de:7c:92:01:cf:86:c9:27:18:10:d5:a9:d0:4a:
43:6f:12:88:17:9b:14:4b:75:a0:32:d7:79:83:14:0b:4b:37:
bc:df:37:a0:dd:cb:e9:25:fb:f3:e3:58:20:31:32:2b:be:47:
04:b7:45:d6:25:29:ed:ca:a9:27:76:e1:69:2e:e3:c7:ac:20:
c0:40:e8:22:84:b5:78:fe:78:2d:5a:ed:2d:d1:a2:96:1a:57:
ca:7e:b8:89:08:f5:63:18:c2:7f:d2:ee:36:4c:ac:81:9f:86:
cc:b1:d0:96:aa:58:0a:89:61:01:12:e2:25:6c:7d:59:ae:a6:
fe:a6:08:fe:2a:27:06:7d:09:07:62:18:86:46:ef:16:12:02:
68:19:4f:71:cc:17:c6:0b:02:d1:18:67:86:e3:f1:b2:ae:8b:
24:ae:88:d8:32:e8:80:16:c2:97:4a:76:cd:e9:65:c7:53:ee:
bf:64:dd:10
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAYzCbStWZclEmZtaJFnwTiPMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNjFiNWNkNjk2ODI1Yjc0ZmNjYmE3ZDk3YzNkMGEyNzI0
ZWYzYWEwHhcNMjQwMTAxMDAyOTQzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODg3YmVmNjllMTg0YWYxMjM0ODk0N2ZlMjA2YWMyNDRjZGYyNTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx9klWUxs9XAeVF20IC1tZ1bRO1Tr
AIOnlC3a+EJxhnLkEB3FrwRf3y3Td0fvJ/rHFGQDVYunjXpM0FAUokHfkLIqTtKd
yoxPlqSpd/p473pT5wsvAyauAsBaDkTRunLQ1XrzlBmiAMFn3IPy1FJCHNIMZ2UD
FCqeFbnCyuprUaedslTzOhEHxeMOwwesciDugVa/l1Wg7XuqPmtf5V/DTHeFggD3
YqRIE4lcisxvOUE7y2HCD8GtLnVNxA77Gz7meB7EIj1saoInAzWmGmqZu/Q6azub
zLNTe1Dvszuo/YQ5zB9LLOh8n/dByFI46atxDseGoEcW30QXI1G+saje3QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKiHvvaeGErxI0iUf+IGrCRM3yWIMB8GA1UdIwQY
MBaAFJNhtc1paCW3T8y6fZfD0KJyTvOqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEt
YTU0MWQxYmNlZTE5LzEvcUllLTlwNFlTdkVqU0pSXzRnYXNKRXpmSllnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi83MmJmMmYtOGUzNC00OGEyLTg0OWEtYTU0MWQxYmNlZTE5
LzEvazJHMXpXbG9KYmRQekxwOWw4UFFvbkpPODZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKg6qB+CQ
MA0GCSqGSIb3DQEBCwUAA4IBAQDH1tvj5nlOhBp8z+wF06exSmGFx64NJsuychV9
b/jWX69MCS0+Vr9o0JeUMoN/sNn4uYYFKUUK3Smk6zuzZA+AU6VicxqOf5woIlTQ
3nySAc+GyScYENWp0EpDbxKIF5sUS3WgMtd5gxQLSze83zeg3cvpJfvz41ggMTIr
vkcEt0XWJSntyqknduFpLuPHrCDAQOgihLV4/ngtWu0t0aKWGlfKfriJCPVjGMJ/
0u42TKyBn4bMsdCWqlgKiWEBEuIlbH1Zrqb+pgj+KicGfQkHYhiGRu8WEgJoGU9x
zBfGCwLRGGeG4/GyroskrojYMuiAFsKXSnbN6WXHU+6/ZN0Q
-----END CERTIFICATE-----
Generated at Sat May 4 03:57:52 2024 by rpki-client on console-fra.rpki-client.org