Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/yCwoPXCAbSCPknYftbCTa3i0q0Q.roa
File: yCwoPXCAbSCPknYftbCTa3i0q0Q.roa (raw, json)
Hash identifier: fX922fWxcDDBQjy4NojIHNBv8xEB/Nan3IO/MGB1qmE=
Subject key identifier: C8:2C:28:3D:70:80:6D:20:8F:92:76:1F:B5:B0:93:6B:78:B4:AB:44
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 018CC50119D273A4058D88C28C03FAD3D204
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/yCwoPXCAbSCPknYftbCTa3i0q0Q.roa
Signing time: Mon 01 Jan 2024 12:30:32 +0000
ROA not before: Mon 01 Jan 2024 12:30:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62349
IP address blocks: 2a0a:6b40::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:19:d2:73:a4:05:8d:88:c2:8c:03:fa:d3:d2:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Jan 1 12:30:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c82c283d70806d208f92761fb5b0936b78b4ab44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a3:a9:bf:1f:6b:ba:74:ab:d0:74:25:68:e5:
01:7d:a8:2c:1c:a3:de:05:13:69:9d:46:16:bf:7c:
7f:2e:95:e3:01:3b:fc:20:ea:48:6d:80:15:5b:d4:
c5:1e:74:f8:de:ec:1f:41:f5:1c:96:f8:93:5e:9f:
c5:0b:8d:e6:08:d4:f6:f1:3d:be:be:e0:7e:27:aa:
42:04:69:bb:b7:51:d7:bc:18:a2:c4:74:eb:ca:21:
a7:eb:de:40:44:b2:f6:72:1d:20:03:34:b7:af:4f:
12:02:e2:02:f3:3a:98:a0:e3:f7:89:49:5c:d6:2f:
c1:cd:3d:39:39:65:b8:86:6d:ae:99:63:16:4d:6a:
49:ca:69:61:2f:3c:f6:37:9b:f0:a0:67:55:6c:72:
05:8b:2e:a4:5d:92:a3:c9:50:46:71:f5:e1:07:33:
ea:f9:9f:9a:69:55:20:b8:7d:a9:66:50:05:0b:b3:
09:37:bf:10:a0:7c:cd:ca:17:5f:dd:08:eb:31:f9:
89:86:fa:60:84:74:14:6b:89:c5:20:3c:f0:82:dc:
e5:06:03:91:21:1f:17:48:67:35:22:72:4f:62:3a:
fb:a2:15:d4:8f:83:1e:7a:36:a0:8b:ae:81:83:22:
a1:b4:aa:13:ca:08:2c:6d:60:cd:e2:76:51:de:5e:
8c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:2C:28:3D:70:80:6D:20:8F:92:76:1F:B5:B0:93:6B:78:B4:AB:44
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/yCwoPXCAbSCPknYftbCTa3i0q0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:6b40::/29
Signature Algorithm: sha256WithRSAEncryption
97:f1:23:5f:78:30:f9:c6:69:c2:a9:bc:34:10:6b:ee:2e:3a:
07:70:84:6d:e2:3c:00:cc:fe:7c:71:e8:66:a6:0b:57:3b:63:
83:e7:84:01:e6:56:c2:3e:76:a7:66:81:d0:41:ae:52:76:0a:
65:65:2d:e9:33:f8:15:19:b0:e0:1c:f8:81:d1:ac:fd:f3:ec:
d2:0e:6c:5e:3d:02:e7:29:e4:7a:85:8e:c1:6d:1b:21:31:41:
c9:aa:0c:16:5e:81:b7:01:7f:a0:aa:a1:01:98:91:f0:3e:1c:
c3:11:77:1a:cf:ec:06:ec:73:8a:b5:29:f6:cc:6d:22:e8:82:
f8:7d:9b:08:54:21:ea:b6:6c:f7:17:cb:7e:ae:9c:a1:6b:e0:
52:75:34:0b:16:27:41:53:4d:cd:a9:86:6f:45:2a:e9:6d:8d:
c8:1e:73:85:08:54:b0:1b:2a:b7:10:bd:7f:08:e8:ad:88:6c:
54:86:75:f4:c9:ba:ac:35:af:be:eb:5a:99:33:81:e0:c1:34:
a3:cb:89:ee:3a:6b:33:21:14:f5:69:33:1c:16:fc:9c:a7:30:
b3:7b:c5:4e:48:05:09:2f:8f:d4:a8:68:c0:5b:5f:54:a2:c0:
14:02:65:cf:6d:4a:5b:15:81:4e:7d:00:c1:d2:1f:ff:f1:e9:
9a:2b:3f:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 06:10:55 2024 by rpki-client on console-ams.rpki-client.org