Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Q6ceFPvCj5xDRGEv4zJTTylwLhc.roa
File: Q6ceFPvCj5xDRGEv4zJTTylwLhc.roa (raw, json)
Hash identifier: /p6IJaozloNZP2YBP7B1KSmwJR3RoJJR7OSkj5Cu+9Y=
Subject key identifier: 43:A7:1E:14:FB:C2:8F:9C:43:44:61:2F:E3:32:53:4F:29:70:2E:17
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 018E2DF57785B946C325ECC0987FA81DF586
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Q6ceFPvCj5xDRGEv4zJTTylwLhc.roa
Signing time: Mon 11 Mar 2024 14:40:45 +0000
ROA not before: Mon 11 Mar 2024 14:40:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35196
IP address blocks: 2a0c:f647::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 17 Jun 2024 10:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:2d:f5:77:85:b9:46:c3:25:ec:c0:98:7f:a8:1d:f5:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Mar 11 14:40:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=43a71e14fbc28f9c4344612fe332534f29702e17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:07:09:98:86:1b:2d:8f:73:ac:a5:b7:d3:37:
8f:a0:f5:90:20:85:ca:1c:03:8b:1a:14:ea:b0:3e:
cc:bb:5e:5f:08:23:5f:9d:f4:dd:b4:fc:ad:5e:39:
fe:a8:e4:94:1d:a5:8d:dc:5f:e3:e5:40:c9:42:05:
01:69:95:ae:61:25:af:61:c0:ab:95:db:cb:ea:b8:
8b:36:e7:77:34:40:9a:53:9c:9e:d3:54:e7:c6:bd:
34:85:07:48:98:ba:b4:b8:46:46:2e:9e:81:cb:4f:
c2:c6:33:e5:f5:88:12:ed:a8:b0:9f:e6:c7:5b:15:
5a:db:4f:51:f9:a6:3c:d9:ee:37:b3:8d:89:48:a7:
dd:d5:2c:c4:d5:e0:5a:47:44:1f:49:73:4f:02:d9:
53:3f:71:92:a0:da:a8:ae:2c:e7:51:13:33:df:ec:
c3:ff:9b:dd:d1:a5:92:80:77:98:df:b3:f2:ea:d6:
76:4d:c2:a6:78:fa:78:cd:03:71:b9:0d:68:24:14:
8b:9d:57:de:f3:0a:28:2f:9b:e0:43:3d:6c:93:b1:
d3:21:d9:a9:cc:74:d9:74:d7:6a:11:91:66:8d:a7:
47:a9:e1:f1:7d:18:06:79:87:14:1f:46:c5:a2:81:
d7:d9:1d:7d:c5:f9:30:e0:fc:7a:1f:73:91:34:b3:
a8:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:1E:14:FB:C2:8F:9C:43:44:61:2F:E3:32:53:4F:29:70:2E:17
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/Q6ceFPvCj5xDRGEv4zJTTylwLhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:f647::/32
Signature Algorithm: sha256WithRSAEncryption
35:bb:21:23:6f:9d:1f:8e:f9:89:7b:84:d2:2e:dc:6c:fd:75:
62:ba:02:a1:00:58:b7:2a:2d:4b:75:3d:30:0e:86:bc:1e:16:
b9:15:d5:bd:79:d3:67:2c:a9:fa:ca:3a:03:99:c0:ca:b8:1e:
32:ed:49:7f:4c:7d:55:ba:f8:fb:17:1a:03:40:b1:18:79:3e:
80:b5:5f:71:ec:21:4f:6e:db:ab:b4:fa:1e:9a:1a:79:21:27:
42:68:60:bc:f1:85:4f:49:78:7b:8b:2f:16:a5:9a:e7:45:d6:
16:95:23:85:5a:b0:5e:9a:93:32:38:bf:ba:88:a9:84:3b:75:
9d:51:a6:71:99:fb:fa:13:fe:06:cf:8f:7e:82:0a:29:10:e9:
09:6f:54:39:5c:86:38:d7:2c:67:17:95:69:03:f9:d4:8a:9d:
ec:1c:af:d6:fe:6c:9a:e1:39:9a:12:3d:03:4a:84:5f:99:1f:
18:7f:4c:3b:e6:0e:ec:31:77:a0:45:8a:83:d0:b1:9e:49:2f:
0d:76:61:8a:1b:77:41:62:44:a5:26:68:e9:5a:58:84:d5:43:
00:17:30:0c:5d:d0:2b:12:84:17:fa:85:e8:77:4c:87:c2:e5:
55:34:d7:5f:fb:6b:6c:5b:e9:19:39:ac:3c:a7:94:02:85:a2:
79:fb:41:bf
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAY4t9XeFuUbDJezAmH+oHfWGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YzY3MGM4ZGIzMmRkNzQ4ZGY3OTdjNWM5MzAxM2Q4Yzkx
ZmE4MzkwHhcNMjQwMzExMTQ0MDQ1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2E3MWUxNGZiYzI4ZjljNDM0NDYxMmZlMzMyNTM0ZjI5NzAyZTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQcJmIYbLY9zrKW30zePoPWQIIXK
HAOLGhTqsD7Mu15fCCNfnfTdtPytXjn+qOSUHaWN3F/j5UDJQgUBaZWuYSWvYcCr
ldvL6riLNud3NECaU5ye01Tnxr00hQdImLq0uEZGLp6By0/CxjPl9YgS7aiwn+bH
WxVa209R+aY82e43s42JSKfd1SzE1eBaR0QfSXNPAtlTP3GSoNqoriznURMz3+zD
/5vd0aWSgHeY37Py6tZ2TcKmePp4zQNxuQ1oJBSLnVfe8wooL5vgQz1sk7HTIdmp
zHTZdNdqEZFmjadHqeHxfRgGeYcUH0bFooHX2R19xfkw4Px6H3ORNLOoLwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEOnHhT7wo+cQ0RhL+MyU08pcC4XMB8GA1UdIwQY
MBaAFFfGcMjbMt10jfeXxckwE9jJH6g5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQt
MzA0OTVmNDAzNzg0LzEvUTZjZUZQdkNqNXhEUkdFdjR6SlRUeWx3TGhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC81YTZmZGEtNzg5Ni00YzUwLWFmZmQtMzA0OTVmNDAzNzg0
LzEvVjhad3lOc3kzWFNOOTVmRnlUQVQyTWtmcURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKgz2RzAN
BgkqhkiG9w0BAQsFAAOCAQEANbshI2+dH475iXuE0i7cbP11YroCoQBYtyotS3U9
MA6GvB4WuRXVvXnTZyyp+so6A5nAyrgeMu1Jf0x9Vbr4+xcaA0CxGHk+gLVfcewh
T27bq7T6HpoaeSEnQmhgvPGFT0l4e4svFqWa50XWFpUjhVqwXpqTMji/uoiphDt1
nVGmcZn7+hP+Bs+PfoIKKRDpCW9UOVyGONcsZxeVaQP51Iqd7Byv1v5smuE5mhI9
A0qEX5kfGH9MO+YO7DF3oEWKg9CxnkkvDXZhiht3QWJEpSZo6VpYhNVDABcwDF3Q
KxKEF/qF6HdMh8LlVTTXX/trbFvpGTmsPKeUAoWieftBvw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 19:21:50 2024 by rpki-client on console-ams.rpki-client.org