Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/q6-GzIlrAuR-YHmnhmMjQsluamU.roa
File: q6-GzIlrAuR-YHmnhmMjQsluamU.roa (raw, json)
Hash identifier: YrfDrRXgtd2n+bFTDoUNtyq5CxXhOJrowpTna8/gIKA=
Subject key identifier: AB:AF:86:CC:89:6B:02:E4:7E:60:79:A7:86:63:23:42:C9:6E:6A:65
Certificate issuer: /CN=741736f657221fc134316323b0740585a9c1b20c
Certificate serial: 018CC56EF368AB3B14945FA5795AEFD1D578
Authority key identifier: 74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/q6-GzIlrAuR-YHmnhmMjQsluamU.roa
Signing time: Mon 01 Jan 2024 14:30:32 +0000
ROA not before: Mon 01 Jan 2024 14:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8708
IP address blocks: 2a04:1240::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 16:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:f3:68:ab:3b:14:94:5f:a5:79:5a:ef:d1:d5:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=741736f657221fc134316323b0740585a9c1b20c
Validity
Not Before: Jan 1 14:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=abaf86cc896b02e47e6079a786632342c96e6a65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:47:fa:c3:3f:aa:a2:19:6d:bc:83:0d:38:b5:
2a:31:ef:42:21:50:5a:da:4a:95:d9:bf:53:dd:8d:
d9:a5:f1:d0:09:e8:f3:8b:ac:47:89:4f:c4:9f:51:
d0:c1:ab:93:c7:8d:04:94:fc:0e:bb:07:7a:55:b3:
53:9a:fd:10:e3:4f:2c:8b:8a:37:ae:11:e1:31:e6:
18:a2:31:95:93:4a:e1:22:9d:e5:23:07:1b:1e:cf:
29:2d:87:54:e3:64:a0:52:d2:b7:2f:66:af:2d:38:
7e:8d:a5:0e:cf:ad:96:aa:53:b0:74:67:13:19:ef:
70:f5:80:f9:6b:c2:69:f6:71:0c:b2:10:4a:92:56:
c6:40:6a:e3:d5:0c:17:25:ab:bd:07:a7:1f:a1:9d:
b9:22:e3:0e:4d:58:f1:aa:63:ef:12:62:01:4f:95:
54:cb:d8:5e:ff:53:33:79:a9:2c:89:8a:c6:1f:19:
a2:44:6e:04:f3:fa:b0:cd:52:96:14:7b:1b:58:5c:
ee:3c:37:c1:f4:57:18:13:40:3d:75:19:56:bd:e6:
dc:a5:c0:78:88:06:5a:5a:1a:9c:4e:0a:d8:08:8b:
54:b6:27:8c:de:12:4a:7e:ac:87:90:93:47:3d:9e:
7a:7b:39:ee:96:bd:34:9c:9a:53:16:43:56:d1:de:
be:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AF:86:CC:89:6B:02:E4:7E:60:79:A7:86:63:23:42:C9:6E:6A:65
X509v3 Authority Key Identifier:
keyid:74:17:36:F6:57:22:1F:C1:34:31:63:23:B0:74:05:85:A9:C1:B2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dBc29lciH8E0MWMjsHQFhanBsgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/q6-GzIlrAuR-YHmnhmMjQsluamU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/b314cb-62b5-4fa6-b445-cbfba459d8f7/1/dBc29lciH8E0MWMjsHQFhanBsgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:1240::/29
Signature Algorithm: sha256WithRSAEncryption
80:c0:53:74:61:76:23:53:b6:74:c7:78:7e:48:0e:16:63:c4:
4d:4c:c4:e4:4a:91:1b:a4:20:d8:8a:c1:42:a7:df:a6:47:eb:
b0:a8:57:22:23:12:82:8d:22:3f:91:fa:ff:9b:9b:ef:54:a9:
4b:c5:a6:8e:58:85:40:9a:ca:00:9b:95:2b:f3:10:69:13:98:
43:de:2d:f8:33:a9:06:9c:9c:e1:c4:6a:1f:1b:5d:68:45:d8:
de:5b:39:03:01:16:c8:7d:21:6e:cc:10:60:10:fb:e2:71:f5:
20:43:b6:70:88:df:d2:4d:5d:5e:cc:68:5f:a3:3a:f0:dd:46:
80:37:93:81:44:d2:d4:0c:b7:60:72:c9:40:29:9c:1d:df:8f:
cc:de:31:76:fc:e5:ed:07:9c:34:d2:07:ed:f9:e9:a8:8d:7c:
c4:44:90:db:e1:dd:c0:46:5d:e9:9a:dc:4d:5a:af:47:4e:b9:
74:13:57:b1:b3:a3:78:86:65:1b:c2:0f:a3:14:4b:c2:53:50:
6e:04:c6:f8:9c:08:4d:1c:35:3c:7e:0b:cf:1e:61:44:37:e2:
34:ac:8b:bf:ca:32:56:00:33:8b:76:98:3a:c8:f5:7b:a2:2a:
fb:57:bb:9f:31:a1:3a:0c:01:88:ae:d4:d9:f2:1f:d9:e4:37:
b2:32:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 00:56:14 2024 by rpki-client on console-ams.rpki-client.org