Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/QP7kcUW0liLdCQGmC7ax3wPvlI4.roa
File: QP7kcUW0liLdCQGmC7ax3wPvlI4.roa (raw, json)
Hash identifier: i1weearkZ0GQKE67NYF+HHFJTFVV2vtdTcj3n7Bu0F4=
Subject key identifier: 40:FE:E4:71:45:B4:96:22:DD:09:01:A6:0B:B6:B1:DF:03:EF:94:8E
Certificate issuer: /CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Certificate serial: 018CC49342D15FEB64329B1554FC06BDAACD
Authority key identifier: 51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/QP7kcUW0liLdCQGmC7ax3wPvlI4.roa
Signing time: Mon 01 Jan 2024 10:30:34 +0000
ROA not before: Mon 01 Jan 2024 10:30:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47504
IP address blocks: 2a13:cc87:ff00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:42:d1:5f:eb:64:32:9b:15:54:fc:06:bd:aa:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=517a0c96842bafc9f630ba14b83ea79bd12a53b9
Validity
Not Before: Jan 1 10:30:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=40fee47145b49622dd0901a60bb6b1df03ef948e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:24:b4:84:03:8c:7d:fa:91:f7:2b:7f:04:44:
7f:9f:f2:9c:f7:89:8b:2f:47:f2:86:e3:29:72:f8:
fd:a0:58:e3:cf:7a:e5:a1:57:37:f6:bc:a0:81:ca:
e4:c0:04:e4:61:95:f8:cd:4a:dc:b6:d0:44:32:85:
98:41:2e:30:b4:07:7b:fd:c1:a0:f8:40:c2:0d:6f:
8d:59:34:b4:47:a8:2f:3f:63:fd:c0:fd:b5:3c:07:
75:f6:11:81:2d:ed:8f:07:c0:0b:07:29:4c:5f:8b:
fb:1b:c1:3c:1e:49:65:49:72:d7:12:42:3c:c2:ef:
c0:33:71:28:21:9e:8e:73:62:21:44:3e:66:e9:52:
b8:1e:f5:df:4c:e7:a8:d7:3f:f9:56:72:cc:5b:49:
79:46:8f:3a:69:58:ce:f0:10:5f:6d:1a:3e:25:68:
55:5e:13:16:9d:5e:df:40:b8:a0:5d:54:0e:c9:74:
18:f7:1e:08:96:8e:32:91:dc:be:24:d8:bf:1a:b4:
e7:5d:99:78:34:81:c9:6f:9f:84:1f:52:65:e5:24:
db:c6:0f:97:c4:da:f8:79:06:19:96:52:9e:e0:c4:
2e:eb:1d:d6:7a:fa:95:d5:d7:9e:3a:79:d7:6f:f7:
02:61:85:33:75:e3:13:f6:e1:72:c4:69:be:2c:31:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:FE:E4:71:45:B4:96:22:DD:09:01:A6:0B:B6:B1:DF:03:EF:94:8E
X509v3 Authority Key Identifier:
keyid:51:7A:0C:96:84:2B:AF:C9:F6:30:BA:14:B8:3E:A7:9B:D1:2A:53:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXoMloQrr8n2MLoUuD6nm9EqU7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/QP7kcUW0liLdCQGmC7ax3wPvlI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/14e492-8525-4eec-84bc-b0eb6715e0af/1/UXoMloQrr8n2MLoUuD6nm9EqU7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:cc87:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
cd:f6:67:80:d3:5f:51:3b:39:2a:b7:ef:ff:b7:26:2f:e6:c2:
2e:22:08:67:89:5e:ba:60:5a:d9:f5:4a:34:4a:f9:8e:65:a5:
f3:77:89:b2:db:ce:47:19:04:4e:83:a5:97:f5:55:57:cb:6e:
26:82:d3:1a:24:59:c9:5a:cb:6b:cb:a1:eb:56:72:ca:f8:3f:
8b:ce:d2:20:03:de:a2:48:c9:dd:89:41:8c:cd:bb:65:01:7f:
ee:b4:2f:55:43:5f:0e:97:3f:10:e3:32:9d:56:86:35:92:72:
7b:e8:99:87:c7:56:66:a2:0e:3c:53:59:f4:8e:83:2a:1b:8a:
bd:a5:94:db:4c:a7:af:9a:a0:98:5c:1a:ad:9c:5e:36:a5:09:
35:47:22:e1:af:04:1a:d6:66:18:ed:eb:ab:1e:28:99:7a:1b:
c6:02:bd:ee:e7:d5:f5:e7:b0:8a:1d:5c:76:26:60:5e:09:31:
b1:19:d2:2b:0f:74:c5:2d:6a:9c:9f:8d:1a:61:44:e7:b7:55:
8f:f8:67:d1:1f:74:c1:e6:8f:a8:3a:3b:29:6c:45:a3:c0:cd:
1b:62:31:76:bd:e2:9d:c5:51:55:d9:aa:bb:5f:d9:7b:7c:f5:
0a:5e:cd:9e:9e:f4:19:b9:a0:36:fe:0e:0d:8c:51:10:72:92:
03:9f:2b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:53:43 2024 by rpki-client on console-fra.rpki-client.org