Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/GqKJyRYv6T8qRJLHP2kWVwQCxrQ.roa
File: GqKJyRYv6T8qRJLHP2kWVwQCxrQ.roa (raw, json)
Hash identifier: oOy89BwbYFAiLB6iarL2fZgUKe3x9eKWtJ2eEd747Fw=
Subject key identifier: 1A:A2:89:C9:16:2F:E9:3F:2A:44:92:C7:3F:69:16:57:04:02:C6:B4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 018CC3B71D58E67A6144AC80D41643B2DF1B
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/GqKJyRYv6T8qRJLHP2kWVwQCxrQ.roa
Signing time: Mon 01 Jan 2024 06:30:06 +0000
ROA not before: Mon 01 Jan 2024 06:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57640
IP address blocks: 2a05:91c2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 09 Jun 2024 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:1d:58:e6:7a:61:44:ac:80:d4:16:43:b2:df:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Jan 1 06:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1aa289c9162fe93f2a4492c73f6916570402c6b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:24:f1:fe:3b:73:60:42:5a:7f:29:d5:f7:61:
0e:87:49:88:32:cb:21:59:11:09:fd:6e:86:4e:00:
6c:ab:3d:df:a6:ab:97:49:e1:49:1f:d4:6d:30:ec:
53:8c:47:7e:49:bf:28:40:59:2a:a0:07:51:d8:a6:
29:c1:e8:bd:af:de:a2:c2:a6:8f:9d:59:99:ed:63:
c4:7d:54:8c:fc:16:d9:6a:8b:97:78:42:60:50:c7:
fd:58:2f:05:33:66:1e:07:ef:09:aa:86:8d:71:5a:
e1:93:4b:c1:a7:51:a3:d0:13:73:bb:97:f3:65:06:
bf:d5:20:19:50:bf:3d:29:88:b7:df:cd:8b:90:62:
f0:09:22:e2:a8:36:95:eb:e7:94:75:8e:24:de:22:
7f:a3:cc:f5:5c:a5:ec:f1:53:72:11:50:79:e8:12:
61:fc:89:13:33:af:23:7e:77:85:5e:66:a6:6d:d8:
b7:9b:58:85:41:2c:2f:59:df:59:6a:12:3e:82:48:
c9:0e:f1:ee:2e:39:f4:4d:8b:85:05:ea:d4:47:63:
39:7c:8e:9f:2c:b5:e4:64:b8:cc:d2:77:ab:b6:f0:
38:c0:eb:e1:b6:ca:0a:86:86:ba:64:73:b1:9a:10:
47:fb:3f:5a:d7:4b:91:94:df:02:c3:bf:be:a4:6f:
20:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:A2:89:C9:16:2F:E9:3F:2A:44:92:C7:3F:69:16:57:04:02:C6:B4
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/GqKJyRYv6T8qRJLHP2kWVwQCxrQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:91c2::/48
Signature Algorithm: sha256WithRSAEncryption
57:ad:43:aa:8c:ad:d3:70:96:43:56:50:6c:44:c1:65:a9:da:
2d:7d:17:2d:30:9b:f1:c1:56:01:24:3e:a4:eb:59:18:6e:9c:
c3:30:6c:7f:10:91:9f:01:c8:49:fb:e8:19:a0:90:64:d6:34:
c8:f1:e6:31:70:f6:e1:07:6e:8d:fb:4f:98:d0:b7:6e:41:87:
38:96:0d:d3:fb:59:7a:54:b9:1e:9f:5a:44:4f:60:66:c2:a0:
66:6a:1d:97:a4:12:22:94:bf:06:d0:1b:91:62:18:66:16:9e:
9d:e3:99:68:ca:1c:ba:1d:15:6d:62:d8:df:2b:87:c8:b3:f2:
6e:1f:e7:9d:77:82:81:11:86:20:23:43:1a:be:5d:f7:49:6a:
36:a2:5a:04:ef:bf:3d:2f:ab:b2:d4:ee:84:63:44:41:1c:9a:
39:8a:35:95:5b:33:00:85:3a:00:b7:02:9c:26:6f:70:39:1a:
b4:fb:41:af:cf:47:bd:31:6d:86:71:64:e1:eb:c9:a1:60:be:
b2:e2:5e:e8:1a:c9:2e:3c:93:b0:26:11:ec:f7:dc:e3:df:46:
08:18:e3:f2:fe:40:8d:f2:bd:68:9f:2a:e7:42:a4:4c:24:57:
8e:ef:2c:0b:4b:73:9e:06:7f:c5:78:c6:bd:42:03:9e:ad:b0:
c5:b4:e8:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 11:09:36 2024 by rpki-client on console-ams.rpki-client.org