Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/yB75EtoyN4cKPxhnJDPFWkgT8Bg.roa
File: yB75EtoyN4cKPxhnJDPFWkgT8Bg.roa (raw, json)
Hash identifier: LFKy3HdqoVoShYO7b8Sms0t+Gsq5QY/s675kLl3bXRQ=
Subject key identifier: C8:1E:F9:12:DA:32:37:87:0A:3F:18:67:24:33:C5:5A:48:13:F0:18
Certificate issuer: /CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Certificate serial: 018CC9BCD060C9DD42351AC2F11BD5C4A92B
Authority key identifier: 08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/yB75EtoyN4cKPxhnJDPFWkgT8Bg.roa
Signing time: Tue 02 Jan 2024 10:34:03 +0000
ROA not before: Tue 02 Jan 2024 10:34:03 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39028
IP address blocks: 2a02:2698:8400::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.mft
rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 01:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:d0:60:c9:dd:42:35:1a:c2:f1:1b:d5:c4:a9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0802b95ce6239d526c35ae7a8e2ceb48aeb82b5f
Validity
Not Before: Jan 2 10:34:03 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c81ef912da3237870a3f18672433c55a4813f018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:3d:48:d1:24:12:05:58:d8:76:5e:53:f5:ec:
62:36:3c:ee:93:92:a2:1d:2c:89:ad:7c:4e:f6:2d:
57:47:c8:a7:f4:71:a0:b7:46:00:6b:79:83:78:a4:
1d:57:69:89:ac:35:a5:d1:f5:eb:70:7b:1f:c7:84:
a5:f1:30:38:b9:05:43:e8:92:f4:29:92:2b:a0:9f:
9e:6c:02:61:bf:12:4f:19:a9:5e:f5:b8:25:20:6b:
64:74:92:48:48:c3:f6:70:90:ea:01:13:4d:50:ee:
78:e1:9e:8b:35:c6:78:b6:97:05:6f:3c:18:18:a0:
a8:f7:1e:4f:ce:3c:77:ff:07:31:f3:f8:d5:50:98:
15:ef:86:03:b7:e5:59:71:61:6a:cf:ef:ae:8a:8b:
2d:cd:61:36:42:f4:5c:ed:7d:fa:fa:db:5f:2e:bd:
67:33:4e:b7:c1:3c:18:34:9c:8d:49:39:85:07:8f:
3b:78:fd:44:c0:cc:f3:e0:e2:a2:fd:fa:9c:8d:30:
ba:96:fd:a0:0a:e9:58:7f:5f:be:bc:01:09:a3:12:
d9:09:1e:1d:d3:9f:60:66:06:5f:49:0a:c6:a1:5a:
8b:2c:17:5f:f3:ec:5d:cd:e4:e3:3c:b9:48:20:40:
f0:32:25:61:ab:3c:03:ff:9b:74:e4:69:20:a5:41:
5f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:1E:F9:12:DA:32:37:87:0A:3F:18:67:24:33:C5:5A:48:13:F0:18
X509v3 Authority Key Identifier:
keyid:08:02:B9:5C:E6:23:9D:52:6C:35:AE:7A:8E:2C:EB:48:AE:B8:2B:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CAK5XOYjnVJsNa56jizrSK64K18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/yB75EtoyN4cKPxhnJDPFWkgT8Bg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/10e965-7409-44d8-9502-cf0aa3ecad28/1/CAK5XOYjnVJsNa56jizrSK64K18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2698:8400::/38
Signature Algorithm: sha256WithRSAEncryption
a7:ab:2f:19:2e:c9:46:71:a8:e7:e4:0b:68:22:e6:dd:41:02:
53:8a:93:0e:e7:ab:34:8f:f6:55:1b:ed:11:bc:98:dc:2d:33:
fe:d8:0c:89:36:83:ef:d3:e0:0b:7d:94:ba:88:c7:db:ca:31:
73:95:a1:bb:38:28:32:77:d3:d1:73:a9:05:3b:18:a1:14:2f:
b8:15:94:6c:3a:9d:1a:df:a7:a1:b5:de:e6:a3:80:e8:d8:c1:
00:33:17:5c:e2:13:ef:f2:f5:4c:cd:fb:5c:37:a4:98:d8:33:
c7:c5:e2:4c:10:ce:c8:e5:37:58:89:17:ba:64:30:d4:49:8d:
3f:f9:2e:2a:eb:1e:19:16:f0:f7:97:3e:7f:99:7c:78:30:fc:
8b:0d:97:df:68:5f:37:19:65:64:7d:63:ec:93:b2:13:c0:42:
9e:3d:d2:23:a3:bd:16:b8:13:87:e9:a6:c7:85:65:0e:f5:26:
ea:1d:2e:90:0d:42:e6:a5:65:c6:e1:d6:49:6c:a9:98:66:ed:
8a:53:ff:bb:68:3e:29:67:11:d8:a5:0a:ab:d6:3f:6f:28:a3:
d9:0c:f8:59:4d:68:fd:64:3e:f7:35:2b:fa:36:e9:7a:60:a5:
96:de:88:4d:0f:46:53:69:73:50:2f:9b:be:74:e5:91:0b:bf:
e0:f9:a8:3b
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzJvNBgyd1CNRrC8RvVxKkrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MDJiOTVjZTYyMzlkNTI2YzM1YWU3YThlMmNlYjQ4YWVi
ODJiNWYwHhcNMjQwMTAyMTAzNDAzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjODFlZjkxMmRhMzIzNzg3MGEzZjE4NjcyNDMzYzU1YTQ4MTNmMDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhD1I0SQSBVjYdl5T9exiNjzuk5Ki
HSyJrXxO9i1XR8in9HGgt0YAa3mDeKQdV2mJrDWl0fXrcHsfx4Sl8TA4uQVD6JL0
KZIroJ+ebAJhvxJPGale9bglIGtkdJJISMP2cJDqARNNUO544Z6LNcZ4tpcFbzwY
GKCo9x5Pzjx3/wcx8/jVUJgV74YDt+VZcWFqz++uiostzWE2QvRc7X36+ttfLr1n
M063wTwYNJyNSTmFB487eP1EwMzz4OKi/fqcjTC6lv2gCulYf1++vAEJoxLZCR4d
059gZgZfSQrGoVqLLBdf8+xdzeTjPLlIIEDwMiVhqzwD/5t05GkgpUFfPwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMge+RLaMjeHCj8YZyQzxVpIE/AYMB8GA1UdIwQY
MBaAFAgCuVzmI51SbDWueo4s60iuuCtfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDIt
Y2YwYWEzZWNhZDI4LzEveUI3NUV0b3lONGNLUHhobkpEUEZXa2dUOEJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xMGU5NjUtNzQwOS00NGQ4LTk1MDItY2YwYWEzZWNhZDI4
LzEvQ0FLNVhPWWpuVkpzTmE1NmppenJTSzY0SzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCKgImmIQw
DQYJKoZIhvcNAQELBQADggEBAKerLxkuyUZxqOfkC2gi5t1BAlOKkw7nqzSP9lUb
7RG8mNwtM/7YDIk2g+/T4At9lLqIx9vKMXOVobs4KDJ309FzqQU7GKEUL7gVlGw6
nRrfp6G13uajgOjYwQAzF1ziE+/y9UzN+1w3pJjYM8fF4kwQzsjlN1iJF7pkMNRJ
jT/5LirrHhkW8PeXPn+ZfHgw/IsNl99oXzcZZWR9Y+yTshPAQp490iOjvRa4E4fp
pseFZQ71JuodLpANQualZcbh1klsqZhm7YpT/7toPilnEdilCqvWP28oo9kM+FlN
aP1kPvc1K/o26XpgpZbeiE0PRlNpc1Avm7505ZELv+D5qDs=
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:52:47 2024 by rpki-client on console-fra.rpki-client.org