Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qRfH12hM3kWL4Z_QmhcYKmUQg9Y.roa
File: qRfH12hM3kWL4Z_QmhcYKmUQg9Y.roa (raw, json)
Hash identifier: tprc2wcJOWRsIZS8OcOdx7UVykHxOHmPBv7K5O7ANoI=
Subject key identifier: A9:17:C7:D7:68:4C:DE:45:8B:E1:9F:D0:9A:17:18:2A:65:10:83:D6
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 018CCA2A5A28C239F4508F9874A9219B320C
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qRfH12hM3kWL4Z_QmhcYKmUQg9Y.roa
Signing time: Tue 02 Jan 2024 12:33:42 +0000
ROA not before: Tue 02 Jan 2024 12:33:42 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209859
IP address blocks: 2a06:e881:5300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 May 2024 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2a:5a:28:c2:39:f4:50:8f:98:74:a9:21:9b:32:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jan 2 12:33:42 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a917c7d7684cde458be19fd09a17182a651083d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:48:9c:1f:33:4a:1c:d0:6a:6a:ab:f0:62:87:
67:f4:d1:a9:cb:ca:a2:eb:d8:5b:eb:1e:41:2a:cb:
5a:fe:57:91:ee:d1:fe:56:55:8e:ea:f5:0e:53:b4:
bf:8e:b5:74:0f:33:ae:a3:f0:54:1f:4b:be:6a:7d:
9b:89:12:e6:c0:80:f9:82:f2:b4:60:a0:73:9d:ed:
db:2f:d1:86:6a:15:f9:46:f8:5e:59:79:0c:c7:8a:
35:67:17:e5:49:aa:51:82:16:4c:b5:b2:41:77:0f:
51:c5:73:5e:32:a4:bd:af:f0:13:8d:34:5d:d9:d4:
8a:8b:3f:8c:1b:fa:0a:1a:3a:b6:9f:0e:81:1d:07:
f8:8e:67:86:46:ad:f2:17:d9:a8:dc:de:07:4c:5c:
1e:05:2f:15:83:b0:5d:6a:58:f6:53:7d:b4:33:34:
ee:1c:3f:ab:4a:81:73:e8:2a:9f:14:6a:ba:fc:89:
79:27:06:82:14:61:de:1e:02:e8:18:a3:44:ab:55:
d2:09:fd:ae:07:10:ca:3e:2c:9b:eb:f7:31:a6:f1:
68:72:18:7e:5c:36:2a:18:14:89:a8:85:e9:c0:bb:
fa:fd:5d:d2:3c:06:87:1e:cd:7c:ca:0e:d7:4a:f4:
49:f0:79:40:57:e5:15:0b:17:af:74:0c:7f:e8:ee:
91:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:17:C7:D7:68:4C:DE:45:8B:E1:9F:D0:9A:17:18:2A:65:10:83:D6
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qRfH12hM3kWL4Z_QmhcYKmUQg9Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:5300::/40
Signature Algorithm: sha256WithRSAEncryption
ae:3c:24:7f:e6:0d:a0:ce:af:01:0a:d8:a7:e6:d2:45:6a:c6:
bc:5e:e1:de:9d:90:67:7d:91:6b:ee:3e:af:42:64:b0:40:c0:
ca:83:fc:4e:f4:f7:14:bc:03:ea:9a:cb:59:c0:0d:45:97:26:
e7:36:da:d3:0d:87:8a:67:f9:e1:41:eb:d8:66:7e:ce:3d:bf:
8e:3d:e7:c2:e8:d8:56:d9:96:63:06:25:61:19:2f:3f:6b:19:
b8:7a:9e:e3:0e:1f:44:ad:23:0f:5c:39:30:b3:ab:4d:61:38:
d4:f6:7a:5a:15:9f:a7:95:83:6a:19:54:f5:95:d5:50:9e:43:
1e:3d:4b:6c:6e:45:6b:96:16:2a:d1:93:3a:e5:6e:fe:56:ba:
36:66:ee:69:8a:b9:bf:a6:0c:1c:2f:30:25:9c:6c:71:b2:7d:
79:e1:52:40:02:2d:4e:28:39:a3:d1:c8:e9:6a:de:cd:44:eb:
5b:18:f3:70:e7:74:80:1d:e5:6b:55:de:dc:c4:28:cd:57:c6:
e7:4b:a8:7f:51:1f:c2:7a:43:80:5e:13:21:dd:96:8e:48:33:
46:23:8b:06:ae:2d:1c:89:fc:00:05:95:bf:56:d2:69:84:77:
d6:48:ab:18:5b:71:cd:0a:09:92:ab:f1:30:34:cd:83:99:da:
a2:bb:c8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 15 21:19:23 2024 by rpki-client on console-fra.rpki-client.org