Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/dqzeHgkcr6ZxKp9mhOQbxHMxUxE.roa
File: dqzeHgkcr6ZxKp9mhOQbxHMxUxE.roa (raw, json)
Hash identifier: TYjyvuzbOtDXmXJX/UWNndJipaE32HMHCAjEiE7bMnA=
Subject key identifier: 76:AC:DE:1E:09:1C:AF:A6:71:2A:9F:66:84:E4:1B:C4:73:31:53:11
Certificate issuer: /CN=0bac82804700ad36538bf86f34c073e971430da5
Certificate serial: 018CC56E436182687241E41E55ABF75BC11E
Authority key identifier: 0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/dqzeHgkcr6ZxKp9mhOQbxHMxUxE.roa
Signing time: Mon 01 Jan 2024 14:29:46 +0000
ROA not before: Mon 01 Jan 2024 14:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39871
IP address blocks: 2001:67c:254c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:43:61:82:68:72:41:e4:1e:55:ab:f7:5b:c1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bac82804700ad36538bf86f34c073e971430da5
Validity
Not Before: Jan 1 14:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76acde1e091cafa6712a9f6684e41bc473315311
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1d:3c:04:fd:90:b7:55:6a:c2:3d:f2:b2:fd:
68:18:8e:69:d7:91:2c:46:48:7f:b6:77:22:8c:17:
15:e6:66:d0:ac:a1:e5:e0:4b:17:05:1e:ef:5e:33:
71:35:33:49:71:3e:a3:35:b3:1f:9e:62:a2:09:88:
c2:34:f0:ee:da:5e:44:a8:d0:de:bc:44:ea:39:b6:
fb:2d:da:71:e4:ea:57:91:bb:4b:e3:b8:74:44:33:
d2:6c:12:39:e8:91:ae:4e:53:27:13:3f:6b:78:69:
1b:31:df:53:c4:87:2c:6f:9a:f5:be:81:1d:42:1b:
00:cd:c9:ba:56:35:a3:ca:55:fe:04:00:2c:15:a8:
bf:fc:89:13:2e:c9:f2:ea:b4:64:58:e0:3b:78:82:
b2:7a:fa:73:da:72:e1:31:9b:fc:7f:13:b9:dc:53:
3b:49:4c:67:41:a2:50:f1:49:0a:11:5b:28:9a:51:
e7:46:cc:69:df:99:2b:c7:99:b9:3b:3e:06:51:4f:
e8:27:0c:60:ea:0f:3e:e9:13:df:35:13:43:4f:81:
fc:28:c4:4a:65:95:66:93:7f:37:59:f5:e8:89:04:
96:fa:b7:31:62:82:a8:f7:74:63:50:1e:50:da:e7:
5d:f2:7c:45:23:8c:a6:72:66:e7:2d:10:e6:3b:e8:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AC:DE:1E:09:1C:AF:A6:71:2A:9F:66:84:E4:1B:C4:73:31:53:11
X509v3 Authority Key Identifier:
keyid:0B:AC:82:80:47:00:AD:36:53:8B:F8:6F:34:C0:73:E9:71:43:0D:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6yCgEcArTZTi_hvNMBz6XFDDaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/dqzeHgkcr6ZxKp9mhOQbxHMxUxE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/a72891-de2f-4156-a011-43f64bcea99d/1/C6yCgEcArTZTi_hvNMBz6XFDDaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:254c::/48
Signature Algorithm: sha256WithRSAEncryption
09:e5:13:ee:05:f1:47:3f:2e:9b:3b:70:6e:52:94:f6:00:f3:
12:42:80:fe:46:fb:8c:ab:e2:a3:29:0f:d3:9c:12:d3:b6:3c:
d7:ef:86:11:80:0b:44:f8:f7:b6:cb:f9:12:ba:03:d3:38:2f:
9d:aa:a9:11:d6:3d:d6:8f:f8:fc:8b:00:1e:99:d1:f7:12:3a:
08:d8:ea:1c:e4:79:00:c7:1b:b4:80:c3:0e:ab:eb:57:8f:c1:
49:1a:8e:97:5f:0e:b2:ea:d0:77:2d:30:dd:af:fb:73:92:ba:
4a:57:27:ca:05:dd:03:c3:b3:99:c9:82:65:95:3b:6f:b7:f1:
fa:74:87:4c:82:9a:da:e6:73:93:cf:68:93:a1:fa:68:46:99:
5f:b1:1a:c8:de:36:54:56:b1:01:59:6c:4d:08:4e:20:d4:ab:
cd:52:d3:cf:ce:f9:44:63:9c:18:14:07:ff:2d:2c:75:fc:81:
b8:85:be:b0:1b:f2:11:25:57:ca:42:dd:f3:97:11:2c:4d:7b:
05:d4:93:4b:2d:09:71:6d:be:e4:e2:33:48:9d:58:9c:1f:28:
f3:e0:ee:0a:80:a2:99:44:d2:74:64:80:7f:06:23:96:f5:99:
05:2f:da:37:52:e3:e2:5e:9d:13:72:e5:c3:73:c5:3a:0e:ec:
1c:c4:cc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 21:26:30 2024 by rpki-client on console-ams.rpki-client.org