Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/CYR6mbQdVcQV1VkH1BrQpXRbEW8.roa
File: CYR6mbQdVcQV1VkH1BrQpXRbEW8.roa (raw, json)
Hash identifier: yQTrWh2A+K7dyhmvKuMXQiWYy/p/3vn9KovwDaB/CNk=
Subject key identifier: 09:84:7A:99:B4:1D:55:C4:15:D5:59:07:D4:1A:D0:A5:74:5B:11:6F
Certificate issuer: /CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Certificate serial: 018CCA295BCA4B403E31F03C5EF46167BEB7
Authority key identifier: D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/CYR6mbQdVcQV1VkH1BrQpXRbEW8.roa
Signing time: Tue 02 Jan 2024 12:32:37 +0000
ROA not before: Tue 02 Jan 2024 12:32:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202952
IP address blocks: 2a0e:8f02:f04d::/48 maxlen: 48
2a0e:8f02:21e0::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 May 2024 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:5b:ca:4b:40:3e:31:f0:3c:5e:f4:61:67:be:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d56ef48ed6155dd7843eed3632469abaa3100bf3
Validity
Not Before: Jan 2 12:32:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=09847a99b41d55c415d55907d41ad0a5745b116f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:40:e9:c4:5b:cc:a7:26:41:f9:e4:84:e3:05:
df:dc:19:01:3c:ba:04:b9:76:35:88:84:70:9a:12:
66:82:51:c0:07:7f:b8:f2:0d:f0:a7:08:a6:7d:1a:
46:d3:8f:97:7e:d9:89:e8:49:d7:11:22:f4:04:25:
31:a4:cb:41:72:2a:ce:d2:5c:c1:90:d6:82:04:2a:
25:d6:48:32:a0:61:5c:a9:fa:da:f6:62:d1:ef:52:
39:93:1a:89:bd:b3:dc:89:e5:e5:74:87:e9:22:cf:
71:20:4b:90:2d:d6:a4:95:30:89:70:7a:4f:01:c9:
95:ef:fb:c9:de:90:00:69:a8:c1:00:ab:00:95:a6:
08:c5:64:be:98:ca:b6:b3:d8:ad:c0:10:84:08:24:
f2:9d:c1:b6:e5:46:7b:ee:8a:f5:0a:d5:4d:f5:d6:
5c:a7:81:cf:6c:93:ed:63:39:64:ee:89:24:a3:85:
40:7e:de:1e:63:4b:4a:5a:79:86:73:f3:0d:ce:5e:
dd:6b:b3:ae:95:ea:49:30:c1:47:14:94:80:48:d4:
e1:ee:a1:17:59:d3:5a:0b:1a:f6:ba:15:91:93:d7:
a8:c5:58:d6:54:c1:68:c9:ee:b6:c4:09:42:72:08:
6d:bb:47:82:7d:2b:c0:27:1a:94:d6:6d:4b:76:9f:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:84:7A:99:B4:1D:55:C4:15:D5:59:07:D4:1A:D0:A5:74:5B:11:6F
X509v3 Authority Key Identifier:
keyid:D5:6E:F4:8E:D6:15:5D:D7:84:3E:ED:36:32:46:9A:BA:A3:10:0B:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1W70jtYVXdeEPu02MkaauqMQC_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/CYR6mbQdVcQV1VkH1BrQpXRbEW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/58ff54-3410-4e42-aab8-d2d7f2bb64df/1/1W70jtYVXdeEPu02MkaauqMQC_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:8f02:21e0::/44
2a0e:8f02:f04d::/48
Signature Algorithm: sha256WithRSAEncryption
a4:87:99:5e:57:04:55:7b:c6:39:e9:07:b0:70:97:3e:7a:31:
2c:22:68:15:79:dc:12:a7:63:a9:0a:30:86:1a:ab:ca:2c:35:
34:70:4f:18:4e:ae:8b:12:5e:35:21:80:df:b7:fa:2d:1b:36:
72:c1:0b:45:af:a5:c6:52:2e:fb:81:a0:c0:fc:c7:99:61:00:
81:0a:5b:32:c5:4a:3c:32:0b:b0:59:42:23:ed:25:e8:97:b7:
cf:df:9c:89:92:2b:48:a6:08:74:52:37:65:67:47:45:a6:c0:
8f:f7:f1:2e:52:77:13:1c:2b:3e:7f:d6:ab:ae:ab:9a:ec:e8:
55:f2:8a:a5:84:8b:b1:3e:11:61:f3:ab:42:48:bf:de:28:2a:
aa:20:f8:b1:29:b1:18:dc:3e:46:33:5a:ca:60:53:65:6d:f7:
4d:50:68:3b:2b:6f:89:bd:15:22:29:09:84:da:40:d6:07:23:
20:0e:ca:c8:4b:af:d7:9b:c2:bc:62:3d:1e:f0:d2:5b:dc:0a:
4f:03:8c:8d:30:9a:d6:84:d4:7a:a4:94:18:aa:33:c4:1b:18:
a0:d8:6c:e7:be:30:e3:db:d7:ee:15:af:46:65:f0:38:72:33:
35:45:ab:be:d1:3b:c7:e7:fb:26:1d:d6:7b:93:22:88:7e:52:
c6:98:df:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 19:01:56 2024 by rpki-client on console-fra.rpki-client.org