Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/gQD5lCitRA_VQMb78EAAXVzhRM8.roa
File: gQD5lCitRA_VQMb78EAAXVzhRM8.roa (raw, json)
Hash identifier: q6O73L2pghXBxxuNxZpmXwtV1zGGi9+QxDcjtz/7Itw=
Subject key identifier: 81:00:F9:94:28:AD:44:0F:D5:40:C6:FB:F0:40:00:5D:5C:E1:44:CF
Certificate issuer: /CN=6eeb10f0a4b91964541a5e19a9cb83cb7268950e
Certificate serial: 018CC2DB5DF5D2456FAA439A3F38FE5EFB33
Authority key identifier: 6E:EB:10:F0:A4:B9:19:64:54:1A:5E:19:A9:CB:83:CB:72:68:95:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/busQ8KS5GWRUGl4ZqcuDy3JolQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/gQD5lCitRA_VQMb78EAAXVzhRM8.roa
Signing time: Mon 01 Jan 2024 02:30:05 +0000
ROA not before: Mon 01 Jan 2024 02:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12859
IP address blocks: 2.56.226.0/23 maxlen: 23
2.56.226.0/24 maxlen: 24
2.56.227.0/24 maxlen: 24
2a09:d240:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/busQ8KS5GWRUGl4ZqcuDy3JolQ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/busQ8KS5GWRUGl4ZqcuDy3JolQ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/busQ8KS5GWRUGl4ZqcuDy3JolQ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 Nov 2024 17:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:5d:f5:d2:45:6f:aa:43:9a:3f:38:fe:5e:fb:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eeb10f0a4b91964541a5e19a9cb83cb7268950e
Validity
Not Before: Jan 1 02:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8100f99428ad440fd540c6fbf040005d5ce144cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:2d:d2:55:52:e4:de:50:71:c7:94:df:13:
c6:1f:fc:0a:8a:64:52:8f:0a:4c:5e:a1:da:59:0a:
62:7e:34:d4:cb:1e:06:78:6f:37:d9:39:62:21:72:
8f:ec:79:47:ee:65:7b:83:b5:cc:36:76:ca:0e:7e:
8d:d8:54:d0:3f:07:6c:49:82:32:5c:27:53:cd:d5:
3e:1f:80:f9:84:a2:74:2a:e9:49:6c:bc:c5:04:1f:
c9:7b:a2:48:36:91:6c:37:67:61:b3:eb:f4:d1:95:
07:99:f2:42:6f:f0:b2:db:90:cc:73:3f:8c:c2:5c:
d9:6e:e8:1e:85:2a:8d:43:99:11:40:25:74:09:04:
9d:da:8b:62:2f:42:8c:cd:da:66:5b:c1:87:66:57:
13:3d:20:c2:78:c9:48:15:29:e0:00:e7:27:8c:ae:
35:9b:1c:90:06:87:2d:78:85:30:e1:f7:f6:f3:3f:
14:d3:58:21:2b:17:3b:17:ca:8f:57:ba:eb:2f:db:
04:c0:76:66:43:e8:4e:24:b7:1f:d1:99:2d:a0:39:
83:d5:8a:81:02:f6:bd:fb:15:5a:76:79:ef:a9:00:
ca:24:ba:2e:91:ca:7b:75:d9:ee:87:53:5f:21:62:
a7:cb:ff:71:85:fc:42:1d:94:64:95:07:46:8d:af:
0a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:00:F9:94:28:AD:44:0F:D5:40:C6:FB:F0:40:00:5D:5C:E1:44:CF
X509v3 Authority Key Identifier:
keyid:6E:EB:10:F0:A4:B9:19:64:54:1A:5E:19:A9:CB:83:CB:72:68:95:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/busQ8KS5GWRUGl4ZqcuDy3JolQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/gQD5lCitRA_VQMb78EAAXVzhRM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/549a37-2c00-4b41-abf4-829a1cbe23f2/1/busQ8KS5GWRUGl4ZqcuDy3JolQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.226.0/23
IPv6:
2a09:d240:1::/48
Signature Algorithm: sha256WithRSAEncryption
29:90:03:35:c3:93:29:26:6f:ca:3e:a3:bb:cd:42:28:95:4e:
ea:97:13:62:c6:92:d9:30:7a:c2:f8:4f:dc:86:42:48:7f:d5:
a0:62:d7:5f:5c:6e:0d:ea:1e:e8:a4:cb:ae:96:2a:00:b2:cf:
4f:b2:d6:12:e6:91:53:8d:ea:52:22:9a:cb:75:6f:54:06:15:
96:25:f7:82:26:11:57:c9:b2:1a:18:19:d2:d3:03:5d:8f:bc:
c4:fa:26:31:a6:e1:f6:f4:f6:70:81:e0:b4:2e:70:21:56:d0:
8d:66:33:41:7b:84:77:1d:2d:b1:58:7e:2e:6b:1b:d3:7a:4d:
c6:03:c0:71:67:6c:69:1b:64:1b:ed:ac:3c:03:75:ea:fd:cf:
ad:ad:ee:d9:4b:8c:32:bf:98:c1:c2:d1:7d:8e:bc:10:5c:d5:
bd:7e:69:8d:92:e6:8c:a2:13:be:fe:3c:5f:53:7a:ed:6e:04:
aa:ae:03:1a:8b:73:33:d0:c6:5a:fb:55:e8:eb:df:81:8e:1c:
4c:1c:a8:7d:d9:89:f2:9c:e6:7f:83:ee:74:91:ee:b2:bc:1a:
0e:ed:ec:69:79:40:63:b3:3c:a4:33:10:80:17:d8:76:54:14:
fc:e0:de:4d:e8:ca:c6:8d:9d:f6:27:ec:e5:d9:fa:90:e5:f7:
92:d8:4c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 15 23:40:16 2024 by rpki-client on console-ams.rpki-client.org