Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/YwiPzyJ2tsXc36YaO8hC29cxXNI.roa
File: YwiPzyJ2tsXc36YaO8hC29cxXNI.roa (raw, json)
Hash identifier: cON1r0kXKEx76u0XBcre81ghfpRBb3OMUvpkXe2pwkg=
Subject key identifier: 63:08:8F:CF:22:76:B6:C5:DC:DF:A6:1A:3B:C8:42:DB:D7:31:5C:D2
Certificate issuer: /CN=d3ac50e045822823176e47832dec8f211b74f013
Certificate serial: 019305C4275CC92252B97D668A521DE5B6A7
Authority key identifier: D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/YwiPzyJ2tsXc36YaO8hC29cxXNI.roa
Signing time: Thu 07 Nov 2024 08:36:01 +0000
ROA not before: Thu 07 Nov 2024 08:36:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 213931
IP address blocks: 86.106.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Nov 2024 23:23:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:c4:27:5c:c9:22:52:b9:7d:66:8a:52:1d:e5:b6:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3ac50e045822823176e47832dec8f211b74f013
Validity
Not Before: Nov 7 08:36:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63088fcf2276b6c5dcdfa61a3bc842dbd7315cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:51:9c:97:a7:fc:f0:d8:a6:98:0c:60:2b:7a:
e8:ab:88:eb:ba:5c:a6:d7:76:78:c8:cc:7e:26:02:
33:3d:d1:c0:8b:f6:5b:6c:49:99:a3:32:54:c4:4a:
63:2b:7a:ae:08:c5:34:97:f1:cf:2c:48:88:cf:fc:
36:a8:79:4e:cf:55:4f:99:50:9a:22:f7:a9:7b:00:
2c:b8:78:a4:3e:18:42:c4:58:52:81:6c:6c:fa:2d:
71:12:63:fa:94:4b:fc:36:5f:72:1b:cc:c0:e7:0f:
dc:0b:29:ff:5b:ee:2a:09:4b:95:fe:7e:c7:2e:43:
da:74:a0:c0:c5:3b:8c:c1:35:21:b2:f0:ce:91:e4:
6a:42:31:3a:a9:aa:d7:13:db:f2:db:6c:2c:78:b8:
9c:2e:d5:ac:75:df:3c:ee:62:97:78:bf:d5:6b:4c:
64:ad:98:6c:64:1d:f3:67:2c:c0:0c:bf:41:33:e9:
7a:4e:13:76:5b:b2:02:a9:e8:fb:0e:0f:89:42:63:
c7:84:ca:ee:ec:72:65:bd:fb:10:01:b3:89:0b:2d:
08:d8:7b:b6:8b:cc:ee:ae:e0:24:1b:02:db:d9:18:
d2:da:f4:1f:2d:24:82:14:c1:e8:7d:b3:15:ca:ac:
d1:70:e2:ad:f5:86:79:30:ff:cc:ba:87:a5:06:a2:
f2:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:08:8F:CF:22:76:B6:C5:DC:DF:A6:1A:3B:C8:42:DB:D7:31:5C:D2
X509v3 Authority Key Identifier:
keyid:D3:AC:50:E0:45:82:28:23:17:6E:47:83:2D:EC:8F:21:1B:74:F0:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/06xQ4EWCKCMXbkeDLeyPIRt08BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/YwiPzyJ2tsXc36YaO8hC29cxXNI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f96c9c-772d-4b05-a89e-548d302ccedb/1/06xQ4EWCKCMXbkeDLeyPIRt08BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.106.26.0/24
Signature Algorithm: sha256WithRSAEncryption
01:57:ce:4b:9e:53:5e:04:ab:10:74:c5:bb:b1:ca:b9:93:97:
4a:b2:cc:82:0b:d7:20:cc:85:09:80:cf:ef:0b:e4:ce:9a:6d:
35:2e:cf:5a:97:b5:60:53:4a:78:e6:b7:33:56:47:6b:6f:51:
df:a2:4b:df:20:f5:bc:0f:21:8e:25:12:b7:45:14:df:86:d9:
7b:bd:21:5d:9f:84:10:3e:67:e3:21:a5:41:0f:a3:2a:0b:61:
03:30:d0:0f:67:8e:6b:b6:c9:e0:6c:01:c5:90:2e:96:6f:62:
c1:94:4e:44:3c:7b:f2:7d:4f:2e:3e:83:60:8e:b2:31:e8:02:
44:11:93:3a:5f:4d:ad:a3:09:0f:37:41:98:b6:3f:c8:26:62:
1b:22:7d:24:1c:44:3d:e4:a8:00:6d:37:58:69:07:f2:78:71:
5b:5b:9e:95:64:c2:a6:6c:cb:39:25:de:2c:85:a6:99:3b:3b:
0c:05:1f:bb:dc:2e:bc:3b:66:97:3e:12:62:51:37:aa:de:c3:
6d:59:f3:a2:2b:e0:f9:0e:12:bb:e7:ac:2c:92:83:5d:c4:9c:
c2:0c:d9:e8:eb:22:ef:1e:ce:b1:99:86:41:ac:2b:ae:57:fb:
30:4b:7d:02:37:85:c5:ba:ad:d0:c4:89:f5:75:b5:e9:1d:bc:
d7:de:ce:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 05:16:17 2024 by rpki-client on console-fra.rpki-client.org