Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/5qwKKcUgGIaAISlMXrIc-Hy4ano.roa
File: 5qwKKcUgGIaAISlMXrIc-Hy4ano.roa (raw, json)
Hash identifier: q0TLwfl9231lkJAz41EqxfxlUfMo0eLvpDeR+wj7pfI=
Subject key identifier: E6:AC:0A:29:C5:20:18:86:80:21:29:4C:5E:B2:1C:F8:7C:B8:6A:7A
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018CC2DAFB4893C9E15D9CF7942DB8E3F8FE
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/5qwKKcUgGIaAISlMXrIc-Hy4ano.roa
Signing time: Mon 01 Jan 2024 02:29:40 +0000
ROA not before: Mon 01 Jan 2024 02:29:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49575
IP address blocks: 2a0f:5707:fe00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:fb:48:93:c9:e1:5d:9c:f7:94:2d:b8:e3:f8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 02:29:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e6ac0a29c52018868021294c5eb21cf87cb86a7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:61:94:25:49:4a:2b:75:f5:5e:d2:8d:22:b6:
cc:1d:6f:0b:7c:18:6c:34:74:99:c3:50:7b:40:b6:
40:78:b7:fe:72:a9:f9:2e:d6:89:3e:d4:56:ab:bf:
67:0b:f8:df:7e:ed:d3:23:2c:5a:87:4a:83:3e:d9:
14:36:bf:8e:ec:dc:e6:3c:ab:a7:49:46:48:c8:30:
4b:86:8e:fe:6b:4b:21:f4:0a:68:43:8f:50:f4:52:
c2:98:41:e4:0e:13:54:b2:f7:29:24:4c:a9:b6:05:
a7:68:9e:6b:52:a9:7f:00:98:92:7e:e9:15:dd:d5:
d5:f9:ba:bb:fb:1a:3a:a1:9a:4a:cf:95:ac:2c:c9:
38:0a:7f:e7:ef:02:f4:c7:18:90:09:9f:ae:bb:6c:
9c:08:27:76:57:0a:0a:3e:33:94:02:b9:ac:a0:8a:
c3:6f:f0:a6:10:73:ac:c1:9d:35:a2:f9:6a:3e:2f:
bf:fb:b3:f6:00:a8:1d:14:98:a5:31:07:f8:95:26:
2c:5f:8f:98:c9:ed:be:08:5e:8d:91:d2:90:8c:bb:
9c:10:75:4a:f7:3d:3e:52:37:ef:72:85:07:75:fc:
1e:9b:0f:26:ec:d7:82:48:5a:d6:8d:4a:7a:ff:a8:
16:55:6b:3c:41:81:ad:56:02:18:14:58:dd:36:11:
8d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AC:0A:29:C5:20:18:86:80:21:29:4C:5E:B2:1C:F8:7C:B8:6A:7A
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/5qwKKcUgGIaAISlMXrIc-Hy4ano.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:fe00::/40
Signature Algorithm: sha256WithRSAEncryption
73:30:ac:d9:14:51:96:1d:e5:a3:1a:5e:49:0a:58:5a:0b:8a:
98:bc:a2:a4:48:a6:e5:b6:35:fa:a5:b5:de:4d:de:ff:86:b6:
54:48:6b:29:ed:cf:6c:ab:15:b0:30:30:9a:94:f7:e9:d1:cb:
6b:14:74:de:b7:ad:ad:4d:fe:24:c5:c2:86:db:e0:b8:e0:91:
d8:b7:5f:83:52:2d:d5:25:d4:56:6a:08:34:8a:f1:dc:ba:e5:
af:86:80:d6:9c:14:6b:a7:b4:b8:7c:79:64:d9:c3:e8:51:34:
9c:4d:7c:54:38:0c:3c:f3:d0:9c:42:74:cb:cd:72:1e:54:e6:
38:61:30:d1:7f:b0:ea:a7:e3:58:89:3d:90:1d:a5:f3:7d:68:
af:c0:5a:82:f3:8c:0e:bc:bb:fe:54:c0:2c:cf:1a:12:60:5f:
16:4d:a1:9f:7e:fb:96:4a:92:8f:cb:26:e1:ec:ea:a8:78:5d:
3b:ee:9f:ae:c0:d9:f3:1e:09:02:47:40:7f:6e:f3:2c:8e:a4:
1a:dd:61:08:af:cf:44:42:81:bf:37:0a:dd:b3:4e:57:14:be:
23:6f:f2:3a:ea:fc:6e:7d:cf:eb:3d:cf:7e:63:1c:bf:0b:75:
d6:a1:3a:8d:51:11:b6:27:75:fc:94:21:93:0b:2d:b4:ec:8a:
8a:3a:4a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:32:41 2024 by rpki-client on console-fra.rpki-client.org