Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/YVNQNFHD6QBrUsZAFLHZL-yjDxw.roa
File: YVNQNFHD6QBrUsZAFLHZL-yjDxw.roa (raw, json)
Hash identifier: U9smjYqJJVYQMG/oeWFD0ZCwdGjQQIskvHNyNvoeUUo=
Subject key identifier: 61:53:50:34:51:C3:E9:00:6B:52:C6:40:14:B1:D9:2F:EC:A3:0F:1C
Certificate issuer: /CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Certificate serial: 018CC26D2A1E6A88B4745F4C5ADF5D3F677A
Authority key identifier: 1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/YVNQNFHD6QBrUsZAFLHZL-yjDxw.roa
Signing time: Mon 01 Jan 2024 00:29:43 +0000
ROA not before: Mon 01 Jan 2024 00:29:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 13032
IP address blocks: 185.12.8.0/23 maxlen: 23
2a03:5dc0:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 May 2024 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:2a:1e:6a:88:b4:74:5f:4c:5a:df:5d:3f:67:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e14eb1eef66c2d349f3f7d7bafa68e49fbfec9c
Validity
Not Before: Jan 1 00:29:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6153503451c3e9006b52c64014b1d92feca30f1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:9d:55:93:d8:68:3b:c0:eb:d1:e0:32:75:ab:
08:1a:ca:dd:78:39:44:3c:51:38:a3:ce:5a:f7:0b:
73:71:f5:bf:a2:8d:3d:21:9f:55:ff:8b:fb:20:3e:
10:6a:e2:f9:53:34:2c:e7:73:90:15:f5:ca:3b:5c:
63:46:96:bd:70:ed:fc:4c:df:b2:93:f1:ff:e9:b5:
33:18:ee:68:d0:64:d2:d0:4c:41:01:ec:6b:ad:c7:
62:c6:e8:6b:32:80:34:b8:9c:50:84:14:a3:f1:4d:
a5:c4:12:0d:ef:b0:1f:14:75:23:1b:0c:6c:19:81:
9d:2b:04:3a:b1:cc:ce:fc:a9:30:e7:d0:9b:a0:be:
5b:5c:11:70:10:a9:67:47:ca:80:8c:1a:a0:bf:30:
e4:36:76:64:06:b6:09:07:f1:6b:e4:49:9b:5c:2a:
e4:c2:d5:0f:60:d3:66:93:01:b6:b5:57:78:48:5d:
f8:18:39:1a:aa:24:db:ba:72:3d:d5:6a:23:fb:57:
e4:32:aa:16:ca:67:d0:3b:3b:e2:b0:d3:1a:1e:40:
11:97:06:32:63:e5:2e:d6:e1:59:67:3f:4e:c4:3c:
f8:ae:12:c6:b3:84:9d:96:69:69:87:a1:d1:77:6c:
b5:c7:0a:82:3e:c0:1d:7a:18:56:d8:c6:31:06:be:
7c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:50:34:51:C3:E9:00:6B:52:C6:40:14:B1:D9:2F:EC:A3:0F:1C
X509v3 Authority Key Identifier:
keyid:1E:14:EB:1E:EF:66:C2:D3:49:F3:F7:D7:BA:FA:68:E4:9F:BF:EC:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/YVNQNFHD6QBrUsZAFLHZL-yjDxw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/333ab1-af9b-434c-8d13-9ca98f4950cf/1/HhTrHu9mwtNJ8_fXuvpo5J-_7Jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.12.8.0/23
IPv6:
2a03:5dc0:6::/48
Signature Algorithm: sha256WithRSAEncryption
ad:45:d4:a0:7a:4b:79:e1:d6:e1:e0:f0:89:c7:cd:66:92:05:
42:a5:c6:20:91:49:6e:6a:38:35:68:54:eb:a4:b8:e5:23:4f:
f4:28:26:08:2b:51:6b:c1:95:63:5e:0e:b8:03:9d:ac:91:33:
2c:db:28:ec:34:db:ea:47:b2:47:59:49:65:13:70:93:87:60:
eb:a1:07:af:b3:10:55:88:7e:c6:eb:44:c0:03:bf:9b:e8:4e:
66:6e:b9:91:12:d5:5c:cb:7f:6d:88:06:09:e5:86:81:53:73:
48:a1:ea:bd:9a:e5:6a:bd:83:4d:76:d3:c9:53:8b:2c:09:e6:
6a:52:d4:39:24:4d:bf:5a:46:cf:cc:07:d4:9c:14:18:b3:7f:
74:b2:bc:98:3d:ed:e5:e0:c7:6b:6f:6a:2f:b1:cc:cd:35:93:
83:26:41:92:42:b8:9f:3b:31:7d:66:2d:c4:1d:21:76:45:16:
10:51:33:77:a7:37:f9:12:d1:51:29:65:ca:92:03:f5:00:fb:
38:73:58:74:5e:13:bf:0e:94:2d:d9:b2:45:51:ab:b4:38:e8:
c5:f3:28:45:0b:1f:4d:4d:f0:83:29:b6:59:22:2f:1d:5f:a2:
50:69:dd:b1:cb:7c:b5:e3:3a:c4:9f:54:38:0b:98:f2:e3:4b:
cb:c4:92:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 19 14:46:36 2024 by rpki-client on console-ams.rpki-client.org