Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/QjA0EkhoDRufdrC1VFYfV_wBAq8.roa
File: QjA0EkhoDRufdrC1VFYfV_wBAq8.roa (raw, json)
Hash identifier: LKSBUfYejY574AX9jd5nPz3z29IiVlb+ClwVPFkgP6Q=
Subject key identifier: 42:30:34:12:48:68:0D:1B:9F:76:B0:B5:54:56:1F:57:FC:01:02:AF
Certificate issuer: /CN=4a644c1156851803f37adeec0876ccf989d5aef0
Certificate serial: 018CC2DAF7D2EFCE744FBFE60AC2164C41C5
Authority key identifier: 4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/QjA0EkhoDRufdrC1VFYfV_wBAq8.roa
Signing time: Mon 01 Jan 2024 02:29:39 +0000
ROA not before: Mon 01 Jan 2024 02:29:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 6369
IP address blocks: 2a0f:5707:ae00::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.mft
rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:f7:d2:ef:ce:74:4f:bf:e6:0a:c2:16:4c:41:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a644c1156851803f37adeec0876ccf989d5aef0
Validity
Not Before: Jan 1 02:29:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4230341248680d1b9f76b0b554561f57fc0102af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:12:6d:3c:8c:27:c2:13:6b:91:59:47:d8:a1:
f9:fc:2b:ab:8e:36:62:c8:97:27:1f:31:c8:58:91:
19:98:72:54:db:87:e6:47:f8:b1:cc:23:72:f7:ed:
39:8c:8b:be:57:09:3a:f1:83:51:34:7e:45:75:f8:
b9:da:d0:70:d3:6a:8a:1f:93:8d:62:3d:e8:0d:69:
4f:26:50:7d:8d:3d:1e:bb:15:90:c0:a1:8e:16:64:
0c:dd:61:d8:e3:8e:39:f6:46:5a:fb:13:57:19:6f:
08:ef:b0:f7:b4:85:fa:73:97:e0:9a:76:cd:99:c4:
1a:94:81:94:65:6a:d6:52:87:34:6f:c6:06:c7:3b:
d7:0a:f8:77:59:9e:95:57:7c:d0:60:4f:9d:63:96:
f7:90:3e:ed:ca:94:75:ba:0e:74:a8:eb:b7:d5:62:
0c:72:46:76:bb:cf:bc:18:ac:f1:44:22:50:78:8d:
f2:32:e8:67:56:9d:1b:0c:8b:6b:91:68:e9:dd:14:
03:4d:73:08:5a:22:6e:bc:d9:c5:ca:4e:9f:a1:9d:
87:38:a8:d3:c9:51:15:13:44:d9:50:b7:db:26:f7:
87:5a:d9:81:2e:84:f4:e7:8f:7b:d3:59:36:1c:e0:
45:e9:9b:48:3d:6e:49:5a:7b:87:a4:27:ce:44:da:
fa:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:30:34:12:48:68:0D:1B:9F:76:B0:B5:54:56:1F:57:FC:01:02:AF
X509v3 Authority Key Identifier:
keyid:4A:64:4C:11:56:85:18:03:F3:7A:DE:EC:08:76:CC:F9:89:D5:AE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmRMEVaFGAPzet7sCHbM-YnVrvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/QjA0EkhoDRufdrC1VFYfV_wBAq8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/6b0798-3d4f-40e6-b739-cc1c9b5f6640/1/SmRMEVaFGAPzet7sCHbM-YnVrvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:5707:ae00::/44
Signature Algorithm: sha256WithRSAEncryption
5c:6f:c6:2e:95:75:2b:b5:0e:55:05:2c:68:64:c0:67:93:ec:
e1:e8:f0:74:7b:96:81:e2:45:b3:3a:db:b2:70:76:b9:ea:0b:
fe:5c:86:38:fb:17:4a:64:ea:85:b6:40:4a:f8:30:54:67:ec:
f5:fb:80:e5:a4:f4:25:e2:46:d1:f2:ce:19:5e:b2:2b:fc:c1:
d6:d4:7a:c6:fb:e1:b6:87:ab:00:e7:80:89:02:ce:cc:72:38:
cd:a3:a8:19:bb:73:d9:ec:8d:10:19:28:ba:3e:3e:cb:5f:df:
44:e6:10:f6:6d:7c:b0:22:8a:ed:e6:1d:7c:5a:ea:42:6d:a0:
b0:c3:61:00:8b:5d:24:c9:c8:b3:86:97:4f:23:f7:f9:2a:89:
33:3e:d2:5a:3c:fc:40:ca:30:07:3a:63:e0:cb:e9:66:68:32:
4b:d0:31:aa:b3:01:13:76:39:46:ce:8f:11:ac:a7:65:6c:b7:
90:0c:55:22:95:ad:44:dc:9a:01:f4:e3:f4:15:2e:a0:fc:8f:
76:6b:7c:fc:aa:99:5a:d9:ce:cc:29:dd:01:db:4d:d8:1b:5d:
82:6c:6b:23:e7:2e:e7:94:aa:5a:57:79:49:53:03:df:ce:5a:
07:32:c4:94:d5:54:40:da:73:ff:06:9d:4b:9b:9b:34:23:5a:
c9:e2:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 05:51:34 2024 by rpki-client on console-fra.rpki-client.org