Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6qg_poOZfTOWgERUaiOo-aVrEmY.roa
File: 6qg_poOZfTOWgERUaiOo-aVrEmY.roa (raw, json)
Hash identifier: 4yQTUv6ZS4W9no/NAxOP5vIYPpIBuQGPjyrnO/0GAYw=
Subject key identifier: EA:A8:3F:A6:83:99:7D:33:96:80:44:54:6A:23:A8:F9:A5:6B:12:66
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01920EB580782EC8D62EB59C5024B0FB79E1
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6qg_poOZfTOWgERUaiOo-aVrEmY.roa
Signing time: Fri 20 Sep 2024 09:13:48 +0000
ROA not before: Fri 20 Sep 2024 09:13:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57043
IP address blocks: 2a11:3500::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 01:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:0e:b5:80:78:2e:c8:d6:2e:b5:9c:50:24:b0:fb:79:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 20 09:13:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eaa83fa683997d33968044546a23a8f9a56b1266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:ba:09:f0:da:3d:4b:26:3b:a2:d3:e6:b1:
5b:0e:7d:09:53:34:02:3d:e5:59:2b:a5:b0:2d:c5:
2c:5d:dd:0a:fd:4d:58:29:4a:a1:c7:c2:bc:70:c0:
98:4c:74:fc:d7:56:a4:ee:ba:09:27:63:29:16:5e:
47:33:37:60:6b:08:5c:56:f5:88:d9:50:f6:e1:5f:
ad:5e:46:f3:1d:9a:2d:8b:5f:12:fe:56:82:76:19:
42:e8:dd:53:fa:c8:dd:5e:ce:de:46:8d:a6:87:bb:
ec:56:06:a6:bc:fc:b6:e7:68:8d:3b:59:67:69:19:
de:06:9b:e3:2e:16:a3:35:bc:40:98:5a:23:b3:5a:
be:47:44:27:d8:1a:76:af:9e:50:72:09:e9:7f:e4:
3c:0d:d1:22:3f:ba:32:2c:d4:83:e0:bd:63:a4:08:
8f:85:ba:55:db:4f:a4:e0:bf:09:98:dc:72:9f:52:
02:f4:28:19:f8:3a:ee:f3:e2:a2:0a:07:9e:f4:7e:
28:b5:c9:f8:62:28:94:3b:39:38:91:ca:f0:85:bf:
6b:be:87:dc:98:fb:05:1e:66:bf:31:65:e6:ae:b8:
b6:7e:b9:98:0b:36:de:4b:05:e9:99:46:1c:cc:a3:
eb:ac:fa:f7:b9:80:e1:cd:f7:56:e7:58:1a:79:4e:
9a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A8:3F:A6:83:99:7D:33:96:80:44:54:6A:23:A8:F9:A5:6B:12:66
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/6qg_poOZfTOWgERUaiOo-aVrEmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3500::/29
Signature Algorithm: sha256WithRSAEncryption
39:04:dd:27:6d:12:98:81:7d:81:08:70:c1:b6:7e:da:c1:5e:
98:1b:85:1f:1e:d9:3a:fe:52:a9:56:63:a9:94:e7:71:ee:96:
71:cc:51:39:f4:ee:ea:78:7f:fd:0e:22:6f:7b:67:54:da:cd:
a6:7b:7f:9f:ac:16:68:dc:68:7d:ff:04:ff:81:70:30:86:aa:
4f:58:fb:75:3d:9a:fd:ca:8c:b2:af:8b:5a:fd:f5:0f:7a:ad:
61:5e:86:e2:72:57:cb:64:3c:5e:ae:4d:6b:69:95:2a:e0:1a:
d1:79:77:4e:22:f0:6c:71:6f:58:a1:cd:b3:db:7f:0a:52:bc:
08:f7:2f:5d:6f:16:d4:65:24:9d:65:cf:72:91:f7:20:b2:9b:
af:4a:a0:ec:e4:cb:4a:f0:6e:ee:88:79:e8:7d:2f:8a:ab:1a:
77:97:49:ca:a9:bc:b4:d5:e5:cc:0d:7e:83:dd:a6:8d:cb:5c:
1b:34:57:32:d8:ab:8a:6e:6b:90:dc:ab:85:3d:74:7f:13:75:
2c:94:40:7b:8a:9a:7e:5f:07:12:3b:72:81:ff:1a:5d:29:3e:
8e:a4:10:c1:16:f3:ac:94:0b:54:c8:d8:06:ec:b8:6f:a6:39:
ce:3b:5d:36:2f:0f:11:88:29:95:85:fa:3c:c1:e5:e4:e8:e5:
30:9f:26:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:56:30 2024 by rpki-client on console-fra.rpki-client.org