Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/YvFR1N2BJJyw62vkCKCfgC5TQks.roa
File: YvFR1N2BJJyw62vkCKCfgC5TQks.roa (raw, json)
Hash identifier: lo8XxVV2pdYChCP9UwCPWYvQS4AGeHON+y+YdY8AzxE=
Subject key identifier: 62:F1:51:D4:DD:81:24:9C:B0:EB:6B:E4:08:A0:9F:80:2E:53:42:4B
Certificate issuer: /CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Certificate serial: 018CC6B9441486EE65B2E5767F8E0129D60C
Authority key identifier: EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/YvFR1N2BJJyw62vkCKCfgC5TQks.roa
Signing time: Mon 01 Jan 2024 20:31:19 +0000
ROA not before: Mon 01 Jan 2024 20:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209102
IP address blocks: 2.56.130.0/24 maxlen: 24
2.56.128.0/22 maxlen: 22
2.56.129.0/24 maxlen: 24
2.56.131.0/24 maxlen: 24
2.56.128.0/24 maxlen: 24
2a09:c3c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Jun 2024 10:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b9:44:14:86:ee:65:b2:e5:76:7f:8e:01:29:d6:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebb016f46de2db5cc3116599ee871c76c2c834c6
Validity
Not Before: Jan 1 20:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62f151d4dd81249cb0eb6be408a09f802e53424b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5b:99:ab:1c:52:9d:10:b0:94:a6:5d:fc:8d:
b0:bd:56:3d:a5:7c:b9:f2:e9:7c:c4:8d:72:66:f5:
4d:a2:15:5a:ed:45:02:88:cc:2a:12:c7:e0:b5:0e:
c5:6b:4c:9f:1e:82:d9:21:e0:f0:3e:62:68:ce:57:
3f:09:2a:84:b2:86:51:42:0d:fd:e9:e9:0a:b0:b5:
c8:e5:69:e5:ac:55:02:7f:cc:f0:96:b9:dd:12:24:
a8:ed:06:97:be:51:af:7c:43:de:12:19:12:51:9d:
27:60:3f:53:99:f7:45:51:42:06:8a:30:df:d9:97:
56:ae:95:51:22:90:05:a4:cb:1b:cc:65:5a:56:6b:
c1:2c:76:7f:48:58:42:ba:9c:f3:9a:31:e9:e7:53:
92:f9:98:65:84:a7:8e:0c:f5:f9:4e:2c:99:95:d2:
f9:e5:64:d0:05:3d:c8:a0:97:8f:21:a3:e3:ed:12:
75:8e:b1:2c:9f:05:a2:7e:bb:3b:bc:05:ce:a6:f6:
c3:3a:93:4c:43:c6:89:1c:f9:88:8f:f4:86:8f:73:
f2:30:f6:89:50:1e:2d:a2:10:62:4f:39:1e:38:66:
28:90:d0:42:fb:9b:db:be:f0:0a:ca:c2:0a:2d:1b:
97:88:78:e7:c0:57:68:79:e2:1c:41:28:3c:92:66:
1e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:F1:51:D4:DD:81:24:9C:B0:EB:6B:E4:08:A0:9F:80:2E:53:42:4B
X509v3 Authority Key Identifier:
keyid:EB:B0:16:F4:6D:E2:DB:5C:C3:11:65:99:EE:87:1C:76:C2:C8:34:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/67AW9G3i21zDEWWZ7occdsLINMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/YvFR1N2BJJyw62vkCKCfgC5TQks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/3d013e-9e58-465e-87bb-072fca5ffebe/1/67AW9G3i21zDEWWZ7occdsLINMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.56.128.0/22
IPv6:
2a09:c3c0::/29
Signature Algorithm: sha256WithRSAEncryption
9a:32:7b:cf:49:f1:5b:ef:66:92:59:cb:bd:de:8d:4a:bf:48:
ce:e2:a9:ea:cc:e4:a1:4f:97:cd:6a:1e:69:eb:8e:71:e5:bb:
da:63:4e:9c:b8:a3:b1:8d:8f:8a:1c:9d:50:78:c0:c1:92:a8:
00:28:3d:d6:94:2b:5d:73:ba:bf:e8:5d:92:9b:27:b4:22:8c:
c1:47:e5:3a:e0:ee:51:ed:40:ac:27:20:2f:c8:69:ab:5a:54:
2a:c0:5a:08:14:33:d6:69:d6:66:ed:1a:70:4b:a6:7a:e8:5c:
8c:90:c0:0b:6f:5d:d2:44:3f:71:66:f6:1b:e6:c5:02:38:92:
2c:be:82:6f:2b:6a:c9:ef:92:2f:c7:5b:9f:2a:c7:36:ff:34:
89:91:94:ae:c9:05:dd:67:1f:69:2b:34:dd:95:93:a3:a4:cb:
4c:9b:8b:b9:53:51:6b:aa:08:04:6e:6b:f6:1c:55:40:02:35:
34:b2:43:f8:56:f5:f6:ec:e4:66:2b:1b:12:0a:51:02:b8:41:
c1:91:46:8e:1f:89:37:82:c2:85:aa:79:dd:78:d0:43:ae:c4:
9b:54:3e:22:f3:39:f7:7d:0e:42:1c:7b:90:3b:f0:a8:01:84:
37:41:07:ac:00:94:92:76:13:b6:8d:d3:af:b5:e9:dd:94:b3:
3f:c2:e3:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 18:43:56 2024 by rpki-client on console-ams.rpki-client.org