Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/jy0Aqlmff-4sKpW6e-M7BEvA6DY.roa
File: jy0Aqlmff-4sKpW6e-M7BEvA6DY.roa (raw, json)
Hash identifier: WCT4aP+f89Tdfx5pUQnYpzBn4DWO6Jjmc0bjzRUvvEs=
Subject key identifier: 8F:2D:00:AA:59:9F:7F:EE:2C:2A:95:BA:7B:E3:3B:04:4B:C0:E8:36
Certificate issuer: /CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Certificate serial: 01902A354C1BF7116A91E415E06C6E945584
Authority key identifier: FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/jy0Aqlmff-4sKpW6e-M7BEvA6DY.roa
Signing time: Tue 18 Jun 2024 07:17:34 +0000
ROA not before: Tue 18 Jun 2024 07:17:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42
IP address blocks: 194.0.27.0/24 maxlen: 24
2001:678:28::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 20:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:2a:35:4c:1b:f7:11:6a:91:e4:15:e0:6c:6e:94:55:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff0ddf3fe5772201aff78c24e97f944c3805ff6b
Validity
Not Before: Jun 18 07:17:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8f2d00aa599f7fee2c2a95ba7be33b044bc0e836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:72:25:48:4a:0e:5b:7f:57:c7:11:3b:2f:dc:
17:41:17:b9:6d:f9:0c:f5:7b:aa:59:2f:db:69:22:
4f:80:e4:df:00:9f:7b:4a:69:0d:b6:04:ec:07:cf:
3e:92:58:88:a7:8e:84:45:d7:c9:29:8c:9e:05:2b:
3c:83:db:02:a3:8d:7c:04:d1:53:a5:c6:e8:76:4a:
97:95:ae:f5:ca:df:ba:b3:6c:85:2a:15:c1:38:7f:
a0:bf:5f:94:40:5f:c2:20:25:58:3b:d4:1d:8e:91:
1d:3c:75:22:a3:6e:8e:81:af:c3:55:3a:50:2f:e2:
2e:7e:73:99:d1:00:ee:90:40:e8:3e:5f:e7:db:2d:
f8:f5:6a:33:34:fd:bc:51:ba:25:2e:09:5e:78:9f:
42:e6:f8:03:d2:36:d8:86:37:30:0f:45:57:31:2b:
27:29:44:64:e4:6e:23:e7:ab:c1:4c:18:8e:6f:9a:
2d:b5:44:76:d3:83:9d:b4:f5:a0:71:98:78:a3:24:
b2:f8:9f:17:01:43:c8:4f:eb:73:a7:c5:db:18:a8:
20:e5:53:9d:75:0e:da:cf:6c:1f:30:87:2d:5b:9c:
54:80:ca:de:7d:73:31:99:b9:d6:03:5b:5d:54:04:
45:36:dd:eb:1b:a7:56:d6:0b:60:04:dc:cf:de:41:
08:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:2D:00:AA:59:9F:7F:EE:2C:2A:95:BA:7B:E3:3B:04:4B:C0:E8:36
X509v3 Authority Key Identifier:
keyid:FF:0D:DF:3F:E5:77:22:01:AF:F7:8C:24:E9:7F:94:4C:38:05:FF:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_w3fP-V3IgGv94wk6X-UTDgF_2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/jy0Aqlmff-4sKpW6e-M7BEvA6DY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/c455bd-b825-4901-8381-04d1247e5d0a/1/_w3fP-V3IgGv94wk6X-UTDgF_2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.0.27.0/24
IPv6:
2001:678:28::/48
Signature Algorithm: sha256WithRSAEncryption
5f:49:96:ed:e8:74:fb:60:61:75:c3:6b:a9:24:67:d2:df:7a:
ad:b5:fe:a5:f3:b1:46:43:18:e9:e3:11:5a:11:71:76:19:f9:
16:2a:df:c8:ad:a7:d7:dc:87:76:fc:82:a0:94:cd:fc:a4:5d:
5a:af:39:c5:fd:ab:12:7f:da:39:92:f9:27:1e:96:fc:5d:8e:
61:46:34:d8:8c:d0:e8:09:b3:13:2f:dc:bb:f7:da:29:17:2c:
3f:25:08:5b:69:5e:2b:13:ee:4a:ba:55:a8:35:94:1a:b4:b9:
86:58:6e:d0:c1:4c:25:f5:7f:8c:6e:90:4f:0c:44:89:cc:8d:
8f:f5:0e:d8:a5:12:7c:46:5b:e5:57:ab:a3:9a:96:a4:c1:f1:
42:16:5d:7d:f7:b1:44:10:95:0c:d4:55:bc:3e:5c:60:a8:43:
28:20:4a:68:f8:a8:1c:06:55:f0:8a:d4:8a:80:30:2a:5c:b7:
99:a6:ab:02:da:93:aa:0f:a1:29:64:cd:f1:e1:3b:ca:5b:c6:
e2:5d:8b:28:01:7c:22:f4:b7:6d:1b:26:fd:b8:5c:68:27:9d:
92:d8:fe:2f:85:40:9b:e3:84:18:e7:91:f2:1d:a8:ae:cf:36:
ab:6f:1f:88:33:0b:18:b0:8b:71:6c:4e:ba:f7:8b:dc:d4:c3:
4a:19:e9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:18:43 2024 by rpki-client on console-ams.rpki-client.org