Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/UYw8aoKvBmc3YA24FADJRdYS3YY.roa
File: UYw8aoKvBmc3YA24FADJRdYS3YY.roa (raw, json)
Hash identifier: eoSf8piQlD2cXm+1u1Tqcduj2seQ8ghKqsFRY0y/TyM=
Subject key identifier: 51:8C:3C:6A:82:AF:06:67:37:60:0D:B8:14:00:C9:45:D6:12:DD:86
Certificate issuer: /CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Certificate serial: 018DC09932EB9EF0AFE73D3669BD34C9462D
Authority key identifier: FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/UYw8aoKvBmc3YA24FADJRdYS3YY.roa
Signing time: Mon 19 Feb 2024 09:01:21 +0000
ROA not before: Mon 19 Feb 2024 09:01:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200078
IP address blocks: 2a13:a5c3:f200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 17:16:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:c0:99:32:eb:9e:f0:af:e7:3d:36:69:bd:34:c9:46:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdd6ee010b990a33735756b4fe2f3d3c2671dd9d
Validity
Not Before: Feb 19 09:01:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=518c3c6a82af066737600db81400c945d612dd86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2a:2f:d6:90:c3:3e:e8:0a:43:6d:e4:04:d9:
2c:1c:9d:32:65:6c:76:d8:b0:47:37:8c:a1:42:bc:
39:4b:1a:c1:b6:70:c3:78:12:0b:e7:f9:97:0b:c6:
a7:df:2c:01:c8:98:d9:3e:ea:f3:4a:b2:16:bd:18:
8c:5d:93:63:39:1c:fd:47:ce:13:87:6c:8f:5a:43:
11:05:59:29:32:c8:7a:23:fe:fd:38:3b:dd:28:13:
c7:c9:16:79:a3:d4:e4:00:09:0f:31:a6:56:ac:2f:
1d:a2:0a:d7:a7:c3:13:b5:e9:c7:1f:b4:16:44:83:
52:28:dd:a9:d5:7b:97:e2:49:56:10:ad:36:89:1e:
b7:bb:57:a8:b9:a0:89:f5:a3:a4:ff:65:f8:c8:dc:
63:55:33:2a:5f:ad:87:0a:e0:6d:2f:04:bf:82:98:
0b:c2:20:58:dd:ef:14:0e:25:31:fa:52:47:71:09:
63:bd:ef:d5:fe:79:53:b3:23:6f:ea:9d:fa:79:5a:
8e:c4:cc:53:d0:f2:ca:d5:e3:84:44:ac:98:57:ba:
a5:fe:9f:27:19:ec:2a:ce:a2:75:f5:84:0a:2b:34:
77:20:cc:7c:7e:21:6e:d0:73:3e:16:07:17:c0:91:
3c:32:f4:15:ca:5d:fb:be:f5:c2:d5:27:83:b1:60:
40:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:8C:3C:6A:82:AF:06:67:37:60:0D:B8:14:00:C9:45:D6:12:DD:86
X509v3 Authority Key Identifier:
keyid:FD:D6:EE:01:0B:99:0A:33:73:57:56:B4:FE:2F:3D:3C:26:71:DD:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_dbuAQuZCjNzV1a0_i89PCZx3Z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/UYw8aoKvBmc3YA24FADJRdYS3YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2d1a35-ff8a-46b4-8c47-63c721cf1f56/1/_dbuAQuZCjNzV1a0_i89PCZx3Z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a5c3:f200::/40
Signature Algorithm: sha256WithRSAEncryption
31:3c:bf:63:f2:cb:9f:4b:cb:78:ab:21:1c:df:9e:17:27:07:
62:e5:04:75:3f:f9:ff:2b:62:f0:e6:07:a3:80:1d:f1:cd:11:
9a:83:2a:e8:d0:f4:34:35:02:58:a0:92:13:7a:87:3b:9f:bb:
f2:8c:b7:1e:fb:c7:53:45:b7:7a:ec:56:a8:1f:4c:7b:66:e2:
40:7b:4f:9e:80:31:68:9b:08:e4:cd:e8:6f:a2:b5:51:2c:4b:
5d:40:f1:bc:bc:70:4b:30:35:64:28:94:d0:d7:c7:a3:bf:43:
79:08:5f:c1:11:56:da:d1:ac:f5:60:71:94:f1:ef:0c:63:a9:
84:dc:68:4b:32:7e:c6:9c:e4:13:2e:6e:49:3b:cf:4e:8a:81:
ca:92:50:d6:13:cf:89:e5:c9:50:ad:7b:4c:a3:33:1d:83:dc:
fe:77:0f:d4:73:3a:8d:9a:15:35:04:4a:09:d7:18:f5:63:65:
a9:92:9e:b6:4d:b9:08:d9:99:dd:fb:d9:88:4e:40:72:ab:22:
38:74:01:2a:fd:6a:a1:0f:19:c6:d8:25:8d:c9:3a:81:8e:5a:
4e:4d:28:e6:ee:ee:53:86:9b:65:59:b5:1d:55:c6:46:f3:31:
fb:44:9c:c7:af:66:04:0d:52:46:c3:e9:2c:f5:af:da:07:15:
aa:0c:a9:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:12:46 2024 by rpki-client on console-fra.rpki-client.org