Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/QyR1Wa6uy342Tx2vHz-uOJ4l5kI.roa
File: QyR1Wa6uy342Tx2vHz-uOJ4l5kI.roa (raw, json)
Hash identifier: MZexVJ5m4umFrkq1pzaE8XoiXh1ZsngdQTjBuMherJU=
Subject key identifier: 43:24:75:59:AE:AE:CB:7E:36:4F:1D:AF:1F:3F:AE:38:9E:25:E6:42
Certificate issuer: /CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Certificate serial: 018CC727556174B52AE545D3074B64B92510
Authority key identifier: 83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/QyR1Wa6uy342Tx2vHz-uOJ4l5kI.roa
Signing time: Mon 01 Jan 2024 22:31:32 +0000
ROA not before: Mon 01 Jan 2024 22:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60271
IP address blocks: 2a0b:6b86:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:55:61:74:b5:2a:e5:45:d3:07:4b:64:b9:25:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=835bc9bb547e27788d221bc8bbd5fb02e024480f
Validity
Not Before: Jan 1 22:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43247559aeaecb7e364f1daf1f3fae389e25e642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:d9:ec:dc:ef:f2:ad:fe:17:cd:43:e3:78:
9c:f0:96:30:64:8a:0a:60:68:51:34:53:3a:0f:e0:
29:7c:1e:d7:52:a3:a7:e0:40:ba:02:02:a0:cb:f3:
49:2a:b3:07:01:65:ed:22:ea:9b:5d:60:1c:7a:7f:
57:a8:ed:0e:c6:2e:d9:78:17:ef:41:1d:6a:27:64:
9d:18:20:36:fe:f2:6b:7a:0d:19:d1:c4:66:0c:ac:
7a:b0:a7:3e:99:41:6d:85:ae:b2:b5:af:f5:bd:f4:
18:ce:8e:41:51:c5:eb:a6:f4:a4:e9:1e:d8:af:56:
e4:ea:10:58:b6:25:9d:e5:9c:15:7a:0f:73:a0:a6:
0c:79:f2:8b:45:68:2b:5c:28:44:b4:f7:19:1f:28:
b3:88:2b:cc:53:3f:26:ca:f5:83:71:fe:ab:2b:06:
e5:5c:2d:88:a3:75:3b:90:d1:dc:77:b8:f1:07:98:
d3:dd:f4:67:34:0b:78:5f:84:98:08:5b:36:8a:95:
c9:8b:42:f1:79:51:aa:94:58:fa:96:8b:02:f5:80:
8c:63:6e:84:55:de:f6:08:6c:5b:b4:80:e9:bf:d7:
d9:57:ec:fe:e5:9e:c9:b6:f3:5a:29:39:f8:42:95:
31:5c:a8:3e:f5:b9:f7:92:f2:c7:73:85:c1:34:6c:
cf:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:24:75:59:AE:AE:CB:7E:36:4F:1D:AF:1F:3F:AE:38:9E:25:E6:42
X509v3 Authority Key Identifier:
keyid:83:5B:C9:BB:54:7E:27:78:8D:22:1B:C8:BB:D5:FB:02:E0:24:48:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g1vJu1R-J3iNIhvIu9X7AuAkSA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/QyR1Wa6uy342Tx2vHz-uOJ4l5kI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/962fb1-3df0-4ec2-b50a-b36a24d39427/1/g1vJu1R-J3iNIhvIu9X7AuAkSA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:6b86:200::/40
Signature Algorithm: sha256WithRSAEncryption
b0:8c:8b:84:d1:fb:36:b5:ca:ed:23:9b:ab:86:32:b7:d1:9f:
65:8e:06:55:d5:1f:f2:bc:29:da:d4:9a:91:2b:40:12:b7:e1:
c4:9b:09:f3:96:8e:7b:cf:f4:19:4b:46:7f:1b:8e:e1:9a:91:
b2:89:77:4c:68:eb:86:6b:e9:3c:81:c3:bf:f1:75:bf:d4:c6:
f9:41:7a:ea:89:e2:96:4b:bc:e3:2d:29:d5:30:94:01:f9:1f:
14:d4:36:e0:3e:f1:56:3a:ac:02:f2:f0:d0:f7:ab:db:d8:0a:
c8:61:e9:f2:d9:19:7d:17:43:95:61:fa:73:14:52:7d:09:a8:
72:56:f4:b7:83:9a:7f:fd:1f:73:90:7d:75:3a:d3:62:0a:bc:
a5:5e:f6:88:56:d9:6a:53:2b:4e:2f:6f:1f:cc:57:e5:02:b7:
43:6e:27:cb:10:70:77:66:4a:68:26:78:c1:d1:6c:82:64:28:
d9:91:af:10:50:95:dd:51:3d:7c:74:7a:d0:d5:82:9e:8c:fc:
ce:91:99:16:e3:f8:fd:c7:37:75:64:4f:15:f8:c7:78:a8:65:
19:0a:9b:9a:b8:34:7e:e8:23:b5:e2:b0:53:b4:64:c5:c8:26:
d2:ba:52:37:6d:00:6d:d8:55:90:d5:08:79:39:f1:3b:dd:28:
68:f5:0b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:51:40 2024 by rpki-client on console-fra.rpki-client.org