Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/YUBsVpdYXIlmUPYRfEeRDmYszkQ.roa
File: YUBsVpdYXIlmUPYRfEeRDmYszkQ.roa (raw, json)
Hash identifier: 6NSlbKrv4y/W4rBSDgkaF8rZOEvjdZ04rJMe/DGZsC0=
Subject key identifier: 61:40:6C:56:97:58:5C:89:66:50:F6:11:7C:47:91:0E:66:2C:CE:44
Certificate issuer: /CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Certificate serial: 018CC94D05C15F70CB620D2D1C8E9959A5B8
Authority key identifier: 1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/YUBsVpdYXIlmUPYRfEeRDmYszkQ.roa
Signing time: Tue 02 Jan 2024 08:31:57 +0000
ROA not before: Tue 02 Jan 2024 08:31:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200160
IP address blocks: 2a0a:280:1100::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:05:c1:5f:70:cb:62:0d:2d:1c:8e:99:59:a5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b9f21ba04e5e3077b391e3d48ff5b0a50b3369f
Validity
Not Before: Jan 2 08:31:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61406c5697585c896650f6117c47910e662cce44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1e:18:6b:c5:00:47:40:d8:d6:85:28:c2:37:
4d:97:54:16:8e:17:96:18:9a:3c:6c:fd:e7:7d:f2:
61:44:8e:a1:eb:e9:d5:ed:dc:9e:76:8d:d5:be:da:
93:ec:97:d7:bd:e5:4a:64:71:04:7a:65:a0:fd:7e:
28:81:a0:06:de:a2:70:10:0f:15:3b:f7:46:b8:a2:
f3:a8:c3:92:8c:6d:33:3a:fb:ec:df:b9:aa:47:9b:
a4:3d:e8:fa:e7:75:87:5c:08:56:5f:69:ae:47:c4:
7a:6a:48:35:f4:e9:25:ad:c9:c5:9a:83:cf:09:d5:
ce:78:12:8c:dd:fe:29:01:48:4e:b7:33:71:43:36:
8e:32:9e:1b:46:ea:5e:ca:32:e4:31:a9:33:b0:15:
70:08:aa:fc:b3:65:e8:40:6f:1a:11:15:31:06:46:
42:92:b5:b4:52:c1:fb:a8:0d:90:e9:5c:f8:82:4d:
bc:a4:8a:94:0c:10:ad:3d:36:71:f2:16:11:40:6e:
5a:5d:03:4c:b1:7a:81:a5:15:0f:e2:75:1b:72:67:
01:6a:e5:2a:47:93:6f:d1:03:bb:6a:6f:74:b3:f3:
ef:f3:45:07:1a:d6:15:55:d8:73:76:31:f7:be:da:
4d:2e:53:88:2e:6c:1b:e4:b3:1d:cd:d2:e3:cb:1f:
23:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:40:6C:56:97:58:5C:89:66:50:F6:11:7C:47:91:0E:66:2C:CE:44
X509v3 Authority Key Identifier:
keyid:1B:9F:21:BA:04:E5:E3:07:7B:39:1E:3D:48:FF:5B:0A:50:B3:36:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G58hugTl4wd7OR49SP9bClCzNp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/YUBsVpdYXIlmUPYRfEeRDmYszkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f67a78-183d-494a-995e-f51c5fb3df9a/1/G58hugTl4wd7OR49SP9bClCzNp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:280:1100::/40
Signature Algorithm: sha256WithRSAEncryption
65:22:f4:9f:23:94:75:93:64:ec:f8:5e:e9:ec:0c:56:d3:da:
d4:a3:23:54:bf:39:3b:93:91:dc:27:4b:89:24:90:73:5e:31:
75:6c:a3:3e:c1:d9:bb:fb:28:5c:a4:7f:92:0e:4f:13:da:c3:
a9:d5:8f:c0:6d:8e:51:71:70:4d:7b:d6:e8:97:14:32:c1:62:
2d:76:88:21:7d:6d:25:04:8b:2b:76:2b:7b:22:dd:17:71:7b:
8b:8b:f8:71:2f:5b:71:12:34:aa:c4:dc:f4:98:8a:1b:95:d4:
75:19:b2:40:78:fe:ae:e6:fd:89:25:30:4a:16:ed:65:37:41:
a4:26:ae:87:3d:e1:73:a1:3f:0f:25:7a:2b:55:0f:56:aa:ce:
56:57:07:e7:0c:ac:e4:ec:99:02:67:9f:e8:fe:6b:e0:17:89:
87:ea:07:43:bb:0d:15:f0:1c:ae:1c:cd:5f:6c:8d:9c:66:bd:
e2:52:36:f6:dc:e0:72:92:d8:1d:aa:af:ec:41:b7:90:d0:0b:
ac:f4:c8:2c:98:69:7b:42:ee:a5:b7:62:8d:dc:a7:58:51:dc:
9e:15:57:7e:17:e4:b1:20:82:7e:f3:48:06:36:a2:f5:e0:c7:
77:94:d5:dc:07:ea:d7:f4:33:f9:04:27:f6:04:78:7d:83:a2:
96:43:18:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:24:52 2024 by rpki-client on console-fra.rpki-client.org