Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/ay-0c23rmD07Ft7dn5zNQ0ykupo.roa
File: ay-0c23rmD07Ft7dn5zNQ0ykupo.roa (raw, json)
Hash identifier: 2e0uumIkJkTqW6S6HNzBC2GriF3+DmX/h8rOiK1Nh54=
Subject key identifier: 6B:2F:B4:73:6D:EB:98:3D:3B:16:DE:DD:9F:9C:CD:43:4C:A4:BA:9A
Certificate issuer: /CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Certificate serial: 018CC4935DE2B3215D20FB12391BF1FEA040
Authority key identifier: D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/ay-0c23rmD07Ft7dn5zNQ0ykupo.roa
Signing time: Mon 01 Jan 2024 10:30:41 +0000
ROA not before: Mon 01 Jan 2024 10:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13074
IP address blocks: 192.118.70.0/24 maxlen: 24
192.118.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 10:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:5d:e2:b3:21:5d:20:fb:12:39:1b:f1:fe:a0:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2c1d5fd4e20ade5f11b66afb10a54c8ffe4b040
Validity
Not Before: Jan 1 10:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6b2fb4736deb983d3b16dedd9f9ccd434ca4ba9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b5:16:7a:38:d5:76:7e:c5:5c:34:8d:b0:ef:
2d:74:d7:0b:7a:75:37:a2:7f:a4:09:ea:cd:7f:81:
a8:b5:71:3d:f0:37:08:49:60:54:66:96:68:96:50:
50:8d:6b:ac:86:e8:ae:1b:ab:8d:9b:40:46:79:36:
24:5e:b7:ec:bb:9f:b0:f5:c2:78:32:d9:3a:7a:f6:
59:75:3b:aa:47:64:d0:7b:64:1b:13:71:17:3c:11:
4e:ea:59:53:cc:23:fe:08:2f:53:1e:d5:71:d4:f4:
c1:d8:8b:4d:12:a4:64:21:20:58:78:3b:78:f7:8d:
71:1a:5c:d1:ef:40:a6:06:8f:57:9c:34:a5:a0:60:
07:52:6e:2b:ed:7d:17:6f:f6:3d:4b:ec:45:bb:08:
fa:47:f8:f0:5b:03:60:fe:c9:35:49:16:01:8c:82:
c4:4d:73:62:89:36:6b:99:70:e0:a6:c4:8d:a2:bc:
37:af:15:07:40:3f:1b:f2:f8:f2:f4:10:61:90:35:
be:94:af:7d:df:2a:2b:7f:59:67:04:06:51:a8:00:
37:f8:0a:49:d1:e6:99:5d:21:cd:fa:37:9e:c7:46:
a9:9e:27:5c:09:34:ea:da:9b:48:80:81:9e:71:ef:
ae:a1:ff:62:5d:ea:57:a2:54:be:32:65:17:02:f9:
1c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2F:B4:73:6D:EB:98:3D:3B:16:DE:DD:9F:9C:CD:43:4C:A4:BA:9A
X509v3 Authority Key Identifier:
keyid:D2:C1:D5:FD:4E:20:AD:E5:F1:1B:66:AF:B1:0A:54:C8:FF:E4:B0:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0sHV_U4greXxG2avsQpUyP_ksEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/ay-0c23rmD07Ft7dn5zNQ0ykupo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8613ad-4f5f-45fd-8799-a09a875f5903/1/0sHV_U4greXxG2avsQpUyP_ksEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.118.70.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:48:79:54:c3:13:53:94:88:1f:4d:f8:19:6d:62:2b:0d:48:
3d:8c:9f:a1:38:c8:51:10:2e:4f:f1:75:d3:4d:af:8b:30:bc:
75:fc:cb:c0:f1:1d:d7:68:de:ab:42:a0:ce:b1:a5:c5:35:6b:
29:22:66:b7:f2:61:8b:b7:da:90:40:69:b4:09:db:d0:5d:42:
f4:60:f7:31:25:8c:10:17:49:02:66:eb:44:0c:03:01:d3:d9:
05:23:bc:5f:15:2d:cd:68:70:50:6d:1d:bd:9d:d0:20:5d:86:
40:42:9b:fb:5a:16:62:ee:24:29:a1:ff:1f:f3:99:1c:02:d2:
af:de:2f:cc:3c:ef:23:08:f8:4f:dc:30:e9:2f:8f:b7:a6:33:
f2:b6:42:2a:6c:af:a7:e4:df:5e:88:0e:03:32:6a:b8:cc:04:
1c:4c:bf:db:77:e1:0c:20:07:9a:12:16:1b:0a:04:c5:5b:f0:
6d:02:38:da:33:9a:88:4c:0c:a5:82:d7:ef:eb:a6:2e:42:2a:
6c:ca:34:f6:87:8a:71:8f:f4:c7:36:d5:ca:ab:10:53:c9:a5:
e2:e0:a5:13:7f:03:12:5e:a5:d0:ee:ca:a1:7d:cd:9b:18:db:
da:9a:b6:7a:5c:99:27:84:36:aa:4c:61:61:6e:fe:d6:d8:cd:
62:95:18:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 12:34:09 2024 by rpki-client on console-fra.rpki-client.org