Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/QzjPlp56JgPP7ofx-Ha2JrhLBRg.roa
File: QzjPlp56JgPP7ofx-Ha2JrhLBRg.roa (raw, json)
Hash identifier: 8clv+YcRUvJCzsEJ2kzGtxeusJ9nRc+GPM3S2kNkNsM=
Subject key identifier: 43:38:CF:96:9E:7A:26:03:CF:EE:87:F1:F8:76:B6:26:B8:4B:05:18
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 019011EF9E6B168294DFE530BD3FB6D5F0EE
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/QzjPlp56JgPP7ofx-Ha2JrhLBRg.roa
Signing time: Thu 13 Jun 2024 14:10:34 +0000
ROA not before: Thu 13 Jun 2024 14:10:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 0
IP address blocks: 2a12:5980::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Jun 2024 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:11:ef:9e:6b:16:82:94:df:e5:30:bd:3f:b6:d5:f0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Jun 13 14:10:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4338cf969e7a2603cfee87f1f876b626b84b0518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2c:57:89:1a:c8:e7:f3:ef:de:63:d9:83:9c:
8e:1f:12:55:a0:a5:13:74:af:0a:af:ea:ec:4b:d5:
93:c3:3d:5c:6c:1d:3e:1f:b4:a4:b5:b0:d2:66:bc:
c4:54:16:cf:9a:c3:ba:0d:a6:20:ee:b3:9c:37:c6:
af:60:cb:33:9e:69:9b:b5:3e:00:35:55:26:64:6e:
05:d2:e3:b9:74:36:c1:ef:b4:49:2d:f4:7d:83:4e:
46:71:b2:bf:ff:0b:43:4e:22:15:c7:d0:d6:7f:50:
fa:e0:33:bd:47:4d:9e:be:02:64:68:54:8d:13:62:
70:18:69:96:c5:af:91:30:99:8b:a0:5d:79:c2:ba:
17:65:d7:32:f2:36:7e:45:6f:11:fc:87:14:42:ed:
bf:84:1f:8f:4a:65:3c:f3:4c:24:a6:6e:ed:3e:4a:
d5:18:aa:8c:39:25:0a:a1:52:02:cc:78:70:50:91:
dc:af:fc:f9:9d:61:95:7f:e4:ee:e5:38:81:3e:25:
46:9c:84:20:09:9b:7d:11:f3:be:a0:ca:b2:c6:f6:
30:72:d8:c5:e6:fe:50:62:57:4d:1a:c3:03:8f:53:
1f:25:87:76:e1:a1:34:82:6c:23:e5:1c:c4:f4:b2:
93:a6:e9:09:05:f3:9f:43:49:81:43:0d:b3:f6:64:
17:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:38:CF:96:9E:7A:26:03:CF:EE:87:F1:F8:76:B6:26:B8:4B:05:18
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/QzjPlp56JgPP7ofx-Ha2JrhLBRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:5980::/29
Signature Algorithm: sha256WithRSAEncryption
38:5a:4a:0f:b2:54:92:6e:54:09:4a:21:7d:8a:ec:30:5b:99:
15:10:09:59:f9:a1:68:33:cd:e0:57:11:88:93:68:df:98:fe:
03:8e:6c:e7:6b:ce:8c:83:0f:a1:61:40:c6:db:61:73:1f:0a:
41:03:a7:e2:90:f4:87:0f:0c:8a:a2:d7:37:f2:8f:a2:80:36:
26:f0:9a:da:d6:d5:f9:30:e0:2f:44:ba:09:9e:64:1f:da:ed:
d8:38:93:ca:92:74:52:95:1f:20:62:91:c0:a2:67:b5:f3:77:
4d:76:1d:c2:f3:2e:04:5a:62:48:1d:51:a8:7b:d2:25:61:c6:
ab:f0:7d:e1:28:01:31:9f:16:87:97:1e:d2:07:34:90:0d:38:
94:58:16:43:22:37:82:9d:4b:01:09:52:39:e0:1a:55:26:97:
df:79:73:31:96:42:02:34:3a:f2:74:cf:a5:49:d4:c1:3c:9a:
db:1e:ca:44:27:12:23:ba:53:5c:f3:84:4a:a9:17:11:af:fe:
5e:41:ba:05:a2:88:c1:9f:2d:e2:c8:71:b7:b9:76:52:6b:89:
82:39:5b:f8:af:d5:66:6a:8a:1d:18:b6:fc:f2:5c:d7:d8:bf:
8a:90:55:24:2a:96:f5:22:fb:72:f9:07:f9:db:6e:98:5b:a3:
96:4d:d8:ca
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZAR755rFoKU3+UwvT+21fDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjI1MjFlYjU4YjQ1YjBjNWEyY2NiZTM4MzMxNWNlNzlk
N2VlYTUwHhcNMjQwNjEzMTQxMDM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzM4Y2Y5NjllN2EyNjAzY2ZlZTg3ZjFmODc2YjYyNmI4NGIwNTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCxXiRrI5/Pv3mPZg5yOHxJVoKUT
dK8Kr+rsS9WTwz1cbB0+H7SktbDSZrzEVBbPmsO6DaYg7rOcN8avYMsznmmbtT4A
NVUmZG4F0uO5dDbB77RJLfR9g05GcbK//wtDTiIVx9DWf1D64DO9R02evgJkaFSN
E2JwGGmWxa+RMJmLoF15wroXZdcy8jZ+RW8R/IcUQu2/hB+PSmU880wkpm7tPkrV
GKqMOSUKoVICzHhwUJHcr/z5nWGVf+Tu5TiBPiVGnIQgCZt9EfO+oMqyxvYwctjF
5v5QYldNGsMDj1MfJYd24aE0gmwj5RzE9LKTpukJBfOfQ0mBQw2z9mQXEwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFEM4z5aeeiYDz+6H8fh2tia4SwUYMB8GA1UdIwQY
MBaAFEZiUh61i0WwxaLMvjgzFc551+6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUt
OGFiODY5Mzc0MTBhLzEvUXpqUGxwNTZKZ1BQN29meC1IYTJKcmhMQlJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUtOGFiODY5Mzc0MTBh
LzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUDKhJZgDAN
BgkqhkiG9w0BAQsFAAOCAQEAOFpKD7JUkm5UCUohfYrsMFuZFRAJWfmhaDPN4FcR
iJNo35j+A45s52vOjIMPoWFAxtthcx8KQQOn4pD0hw8MiqLXN/KPooA2JvCa2tbV
+TDgL0S6CZ5kH9rt2DiTypJ0UpUfIGKRwKJntfN3TXYdwvMuBFpiSB1RqHvSJWHG
q/B94SgBMZ8Wh5ce0gc0kA04lFgWQyI3gp1LAQlSOeAaVSaX33lzMZZCAjQ68nTP
pUnUwTya2x7KRCcSI7pTXPOESqkXEa/+XkG6BaKIwZ8t4shxt7l2UmuJgjlb+K/V
ZmqKHRi2/PJc19i/ipBVJCqW9SL7cvkH+dtumFujlk3Yyg==
-----END CERTIFICATE-----
Generated at Wed Jun 26 15:03:23 2024 by rpki-client on console-fra.rpki-client.org