Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/QxqYVPfAsE-57qCkcB06Rd4fymU.roa
File: QxqYVPfAsE-57qCkcB06Rd4fymU.roa (raw, json)
Hash identifier: dFoLKFXLMTu6Y8MtUD8SB8ObcfHEf/xTdKt12W5GL7w=
Subject key identifier: 43:1A:98:54:F7:C0:B0:4F:B9:EE:A0:A4:70:1D:3A:45:DE:1F:CA:65
Certificate issuer: /CN=fa7eb1115130fac94091061e31462a565226885a
Certificate serial: 01917A6544D452B40EF7AFC2BB99A2639AF8
Authority key identifier: FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/QxqYVPfAsE-57qCkcB06Rd4fymU.roa
Signing time: Thu 22 Aug 2024 14:02:22 +0000
ROA not before: Thu 22 Aug 2024 14:02:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202647
IP address blocks: 2a13:bc2:1000::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 23:17:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7a:65:44:d4:52:b4:0e:f7:af:c2:bb:99:a2:63:9a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa7eb1115130fac94091061e31462a565226885a
Validity
Not Before: Aug 22 14:02:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=431a9854f7c0b04fb9eea0a4701d3a45de1fca65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:dc:8f:61:17:8a:bf:ff:b4:4b:93:fe:60:60:
88:1c:94:e7:c7:6d:70:bc:59:54:83:73:cc:ce:96:
57:b4:9d:8b:50:96:b0:55:5a:42:b4:a9:78:71:06:
db:99:ea:61:55:f2:9f:7d:7c:5d:6a:a1:5b:4f:75:
b6:21:45:67:5d:8d:03:d0:6d:dd:1f:9b:07:bc:31:
44:39:d1:44:60:75:cc:99:eb:65:67:1b:7b:b7:40:
d3:30:ef:d1:46:6f:24:61:39:80:89:64:c1:a2:48:
79:85:e3:67:74:43:84:c7:67:17:dd:a4:1e:73:01:
cb:72:fb:28:b2:89:19:7b:b7:e9:2e:9d:53:5a:4c:
3e:b7:34:b7:10:3e:9e:57:26:e2:6a:c2:e8:f4:78:
12:8d:37:5f:b1:49:61:25:3a:83:d2:b4:76:72:2e:
6d:46:7d:ec:d0:a6:4c:ba:bf:84:49:d5:bb:78:e5:
5a:1c:55:6e:c2:6c:eb:18:d9:e4:8a:45:3c:54:d8:
6a:e1:b6:f7:b3:f9:5b:a1:c2:5f:4c:80:c0:c6:65:
5c:f5:48:d5:0a:26:1c:05:35:60:17:0a:e5:9d:03:
d0:3f:97:03:91:dc:f4:ed:af:e4:d2:1e:20:68:85:
ef:4c:7d:c9:5d:32:fc:4c:e6:43:d0:fa:3f:25:24:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1A:98:54:F7:C0:B0:4F:B9:EE:A0:A4:70:1D:3A:45:DE:1F:CA:65
X509v3 Authority Key Identifier:
keyid:FA:7E:B1:11:51:30:FA:C9:40:91:06:1E:31:46:2A:56:52:26:88:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-n6xEVEw-slAkQYeMUYqVlImiFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/QxqYVPfAsE-57qCkcB06Rd4fymU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/c15e99-2965-476f-9aef-8a273f4ad15d/1/1-n6xEVEw-slAkQYeMUYqVlImiFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:bc2:1000::/36
Signature Algorithm: sha256WithRSAEncryption
b2:3d:a6:94:a6:84:14:bb:81:e9:bf:a5:cf:b5:a0:e2:c4:21:
d6:40:30:01:cc:c4:5c:d8:dd:5f:86:1e:ab:1f:10:24:5a:ff:
70:3b:fe:89:13:c7:3d:24:b5:57:7a:06:42:8c:66:eb:19:b9:
08:ef:79:52:99:25:da:69:0b:34:49:34:b9:55:67:58:75:df:
55:4a:f3:26:7b:63:a8:22:52:79:4b:7c:1f:a8:61:47:14:5e:
a7:39:05:17:d1:28:31:0c:0c:f1:de:6c:65:85:1f:75:7e:7b:
5c:0a:b6:c7:3c:40:3d:09:d7:db:a8:c8:32:ae:dd:c9:91:e5:
ee:0f:c3:fa:4c:cb:af:fd:e5:db:f8:28:ba:5f:75:af:ab:57:
3a:a5:1f:96:f7:c0:de:ac:63:1f:0d:97:b1:0c:3d:ad:49:67:
f2:af:52:b7:fc:a8:af:d3:85:2d:00:21:a6:40:99:9f:eb:b7:
43:96:70:72:ef:71:af:96:40:39:48:ea:87:b3:4a:0e:5c:05:
6f:ea:f0:e3:ea:3b:46:cc:bf:3b:7f:56:a8:56:37:fa:77:7f:
a2:38:17:7d:02:00:a3:a2:bc:2d:75:22:d5:39:ba:ef:bf:b5:
0f:15:54:76:49:26:79:e5:40:05:8d:36:39:18:e8:2c:ee:b9:
54:49:df:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 04:35:52 2024 by rpki-client on console-fra.rpki-client.org