Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/LQhUv-sF5YG_M9E4JICstAXR8Ps.roa
File: LQhUv-sF5YG_M9E4JICstAXR8Ps.roa (raw, json)
Hash identifier: JZNFrqTTU0qLI7AB/o8TufJKE3cAD8kBk9y6K5n+1tk=
Subject key identifier: 2D:08:54:BF:EB:05:E5:81:BF:33:D1:38:24:80:AC:B4:05:D1:F0:FB
Certificate issuer: /CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Certificate serial: 018CC72715E92384F145C718C342D4DE8B7B
Authority key identifier: 3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/LQhUv-sF5YG_M9E4JICstAXR8Ps.roa
Signing time: Mon 01 Jan 2024 22:31:16 +0000
ROA not before: Mon 01 Jan 2024 22:31:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57045
IP address blocks: 2a0e:1106:1000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:15:e9:23:84:f1:45:c7:18:c3:42:d4:de:8b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aca50858a1856ffa02e91356f14236e7c38b85a
Validity
Not Before: Jan 1 22:31:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=2d0854bfeb05e581bf33d1382480acb405d1f0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:7b:1b:69:38:4e:a1:5f:97:15:08:67:3b:ab:
1c:d7:10:de:8b:97:43:5d:5c:f0:ec:db:6f:99:01:
89:12:62:4a:c2:6f:41:4e:c8:c3:c6:3c:df:55:d2:
f1:ea:ff:90:98:12:45:b2:25:3c:d6:11:1b:f5:78:
a4:98:a4:4c:05:6a:ec:be:16:3c:cc:87:92:80:42:
ba:34:af:15:b5:9b:46:5f:eb:66:98:dc:02:90:03:
19:a4:a8:ed:23:9d:4e:3b:16:00:21:13:f5:fa:c5:
27:d8:34:bc:3b:83:b7:58:c2:44:66:c3:3f:09:ae:
2c:8c:2b:ec:1f:9e:a4:73:dd:fd:58:a7:89:0f:cc:
a5:f7:06:c4:15:8b:a1:2c:8a:66:88:79:bc:10:d7:
b4:78:b9:54:d5:3e:1f:d0:07:c0:3a:0c:05:56:ff:
cd:72:8f:9b:c5:22:22:1d:95:53:86:ed:5d:21:13:
e9:20:c2:89:f0:63:cc:74:b6:d5:38:1c:2f:c0:ad:
69:21:37:03:c5:87:b0:c1:81:5c:93:67:1a:c6:6c:
30:3b:e9:3d:53:73:3e:ac:03:2a:c3:ae:70:d4:21:
1e:dc:33:f3:c8:8b:ce:73:3b:c0:c9:97:29:14:ad:
18:5f:1e:3d:e1:49:c2:2b:b1:04:03:c2:ca:83:04:
d7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:08:54:BF:EB:05:E5:81:BF:33:D1:38:24:80:AC:B4:05:D1:F0:FB
X509v3 Authority Key Identifier:
keyid:3A:CA:50:85:8A:18:56:FF:A0:2E:91:35:6F:14:23:6E:7C:38:B8:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OspQhYoYVv-gLpE1bxQjbnw4uFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/LQhUv-sF5YG_M9E4JICstAXR8Ps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/12b937-890d-47b5-a041-331d7fc77bd4/1/OspQhYoYVv-gLpE1bxQjbnw4uFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:1106:1000::/40
Signature Algorithm: sha256WithRSAEncryption
b7:8c:66:3e:74:6d:23:ac:3f:40:59:95:c5:ed:f3:ea:49:e1:
77:b1:61:62:e4:4f:de:ae:bb:62:0e:53:7e:a5:0c:7f:34:06:
bf:80:ec:ec:23:5a:b0:9d:c3:dc:32:4a:51:a4:44:df:06:ca:
85:b3:4a:d7:c6:44:90:e9:65:60:d7:de:89:0c:13:44:ae:80:
a7:9b:7f:bb:7c:2f:c9:5d:f2:36:bf:f9:a1:e7:46:0d:92:b0:
3f:5a:78:27:39:d5:d6:f1:0b:4f:5c:76:85:de:95:46:e8:2c:
10:32:84:02:b8:48:47:89:f7:dc:ad:7d:8c:d0:2e:76:9f:4d:
aa:96:3d:7f:f5:3f:06:18:b3:4f:8a:9d:8b:33:86:34:11:e2:
b0:52:cc:c9:4d:cb:46:66:23:55:df:f9:3b:2c:7d:d4:4e:41:
f7:c5:cd:5f:54:2a:ef:14:97:5d:49:3d:70:76:d3:73:41:ae:
af:cf:dd:c5:db:ec:e9:f7:0a:60:78:b4:7f:0d:ca:8e:95:8b:
1e:d7:ba:b1:41:5f:a8:a6:25:2b:cd:3a:af:b0:16:95:b7:8b:
a6:0f:df:2f:42:aa:d6:3f:5c:1b:0d:a0:44:11:97:10:7b:46:
17:19:0d:c2:6f:7e:14:6e:3d:6e:20:24:a4:88:d4:c6:6e:62:
60:9a:53:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 22:47:14 2024 by rpki-client on console-ams.rpki-client.org