Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/y9DmaLoOKsb5OMqDxKsqr2hw93Y.roa
File: y9DmaLoOKsb5OMqDxKsqr2hw93Y.roa (raw, json)
Hash identifier: IJECbLz4KueKKk/3jAWVE6s8UcK0lcywiuZEHcENCI8=
Subject key identifier: CB:D0:E6:68:BA:0E:2A:C6:F9:38:CA:83:C4:AB:2A:AF:68:70:F7:76
Certificate issuer: /CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Certificate serial: 018CC94C1148026C541180DAFC7B1B54568E
Authority key identifier: D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/y9DmaLoOKsb5OMqDxKsqr2hw93Y.roa
Signing time: Tue 02 Jan 2024 08:30:54 +0000
ROA not before: Tue 02 Jan 2024 08:30:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212786
IP address blocks: 2a05:e600::/29 maxlen: 29
2a09:cac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 May 2024 22:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4c:11:48:02:6c:54:11:80:da:fc:7b:1b:54:56:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5e6733fa239c5fb0c438c82f7c230f55d478cb1
Validity
Not Before: Jan 2 08:30:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbd0e668ba0e2ac6f938ca83c4ab2aaf6870f776
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a5:19:3d:29:1d:48:20:c1:7e:65:1e:dc:4e:
5b:a2:bd:8c:e9:f5:39:40:8c:84:e7:f5:d5:60:13:
1f:11:95:14:3b:c9:de:9e:86:73:db:e8:66:c5:ef:
79:f9:40:e4:fe:e1:ef:86:9a:be:22:cf:31:83:fd:
f7:cd:e5:4d:c2:9c:be:76:2d:c4:9f:09:f1:04:f1:
4a:9c:f2:24:ab:3a:6b:52:78:fa:43:16:4e:2c:0c:
af:d1:92:71:0e:02:7b:d6:25:53:09:d4:f7:f8:f7:
f5:d4:39:e1:00:ee:8a:1d:86:c2:90:26:ca:0c:bc:
a0:7e:0c:ac:ed:cb:66:11:7f:70:30:0c:fb:10:ed:
9d:9c:94:35:b2:38:cf:75:7f:f5:4b:b8:5b:0c:ea:
c5:21:54:ad:a4:8b:3d:00:63:6b:49:0f:1a:89:71:
df:a0:b2:92:c8:9e:0b:eb:4b:67:66:58:5c:11:f6:
bd:b8:ca:16:06:a9:a3:b4:3a:11:49:d1:0e:51:8f:
cf:4b:61:28:b0:2b:d1:31:0f:da:8a:8f:ba:c9:38:
04:42:3a:fb:25:18:ad:6f:79:0a:f6:b7:e4:53:50:
be:45:ed:8b:d8:08:4d:30:81:cc:b9:a7:11:50:28:
df:f8:9d:96:68:d9:7d:6c:3d:cd:3d:1e:8c:38:de:
e2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D0:E6:68:BA:0E:2A:C6:F9:38:CA:83:C4:AB:2A:AF:68:70:F7:76
X509v3 Authority Key Identifier:
keyid:D5:E6:73:3F:A2:39:C5:FB:0C:43:8C:82:F7:C2:30:F5:5D:47:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/y9DmaLoOKsb5OMqDxKsqr2hw93Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/25c95e-7f27-4d69-856d-a38b6795fb24/1/1eZzP6I5xfsMQ4yC98Iw9V1HjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:e600::/29
2a09:cac0::/29
Signature Algorithm: sha256WithRSAEncryption
b0:c6:9d:ec:33:8b:a6:d1:87:2d:e7:13:38:12:d3:ee:ea:b4:
81:7c:45:c9:e4:db:10:da:7a:d0:3a:d0:fc:48:c5:cf:7a:30:
1e:4c:02:94:78:49:94:d0:0f:5d:ea:b2:6f:fd:7c:71:be:b5:
7f:f0:01:d2:ac:13:be:07:8e:fc:d3:d3:6a:a4:17:4b:03:29:
51:00:8a:19:20:4c:7b:f2:ce:d6:b7:ce:82:20:da:60:6d:d9:
98:f9:e1:61:84:bf:20:1c:68:91:eb:a9:cf:15:d7:a8:e5:9b:
b5:3d:a8:c2:7d:0e:99:29:56:b3:73:3b:4c:ec:3d:5a:bb:1f:
bf:ec:30:58:f4:20:da:38:1c:d2:e3:7a:ca:03:0a:50:97:32:
f3:e6:9a:da:93:a3:26:39:c1:1a:cd:76:fa:91:3a:c5:89:b4:
f5:62:2c:cd:67:d1:8d:44:ad:55:19:83:28:3d:8e:ee:a1:16:
28:dc:1a:2a:f7:fc:69:f3:6b:cf:0a:45:0f:ce:34:6f:66:84:
c2:28:22:33:87:8e:cc:9b:ee:56:2a:ed:b0:9e:6c:4a:96:14:
4d:a7:7f:c4:c5:e8:d8:e3:3a:c6:28:81:d8:8c:a1:08:41:82:
16:c0:f9:fd:21:18:84:de:bf:71:a8:84:04:df:f4:1f:fd:1d:
a1:59:a7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 06:10:12 2024 by rpki-client on console-fra.rpki-client.org