Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/yKulhFqe-uYbvM1e18F_9FiqXWY.roa
File: yKulhFqe-uYbvM1e18F_9FiqXWY.roa (raw, json)
Hash identifier: Q4/Cw4tpkHN/4+5GLUbyRe2b5Rj65N9BN79so0mhhQg=
Subject key identifier: C8:AB:A5:84:5A:9E:FA:E6:1B:BC:CD:5E:D7:C1:7F:F4:58:AA:5D:66
Certificate issuer: /CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Certificate serial: 0192E3F118D1DCD8DBB6D2FE8EFB43076F2E
Authority key identifier: 69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/yKulhFqe-uYbvM1e18F_9FiqXWY.roa
Signing time: Thu 31 Oct 2024 18:58:01 +0000
ROA not before: Thu 31 Oct 2024 18:58:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214430
IP address blocks: 2a01:e281:a100::/40 maxlen: 48
2a01:e281:ae00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 06:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e3:f1:18:d1:dc:d8:db:b6:d2:fe:8e:fb:43:07:6f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69dbe1e7d9e87d68701a4035a76c51bfecd88d81
Validity
Not Before: Oct 31 18:58:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8aba5845a9efae61bbccd5ed7c17ff458aa5d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:95:32:98:62:54:7b:38:d1:56:42:c6:8d:57:
42:19:b1:ca:71:55:22:34:c8:02:e6:2e:a2:34:05:
88:3f:fe:32:92:ff:0c:ed:3f:e8:94:08:ec:fc:d5:
00:de:60:52:47:a0:45:11:15:ed:a6:04:8d:06:3c:
1f:6a:7b:7d:c7:7c:21:15:d9:66:86:51:cd:cd:96:
aa:e5:05:3e:69:39:af:2d:87:8a:2a:cf:4c:4d:10:
9b:aa:23:37:2e:7c:96:92:8e:43:ec:7e:3f:db:ce:
fd:40:61:7b:7f:12:9c:59:5c:32:14:9b:96:82:b6:
ad:12:e2:7f:9b:e0:16:0f:4c:43:14:47:d3:86:17:
bc:1f:bd:1f:31:99:35:38:18:c6:c0:5c:da:bb:90:
ee:56:f2:78:6a:a4:40:0b:24:31:f8:59:36:61:42:
e4:07:40:9d:f8:dc:76:3b:f9:be:76:d6:3e:4e:23:
7f:d8:b1:a4:a7:7e:df:ae:dd:ae:08:32:ec:86:e4:
02:89:6b:d5:78:6d:d0:c3:82:9d:b9:4b:4a:cf:be:
44:55:23:f9:4f:b3:72:a1:30:30:59:c1:59:50:98:
60:19:8a:ae:32:55:cc:3b:36:da:7e:9c:f6:66:ee:
72:81:ff:de:16:85:49:ea:5c:6f:13:81:6b:05:9f:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AB:A5:84:5A:9E:FA:E6:1B:BC:CD:5E:D7:C1:7F:F4:58:AA:5D:66
X509v3 Authority Key Identifier:
keyid:69:DB:E1:E7:D9:E8:7D:68:70:1A:40:35:A7:6C:51:BF:EC:D8:8D:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/advh59nofWhwGkA1p2xRv-zYjYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/yKulhFqe-uYbvM1e18F_9FiqXWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/727015-e14e-4d41-b05b-8d94553b75e1/1/advh59nofWhwGkA1p2xRv-zYjYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:e281:a100::/40
2a01:e281:ae00::/40
Signature Algorithm: sha256WithRSAEncryption
15:33:dd:57:c1:7a:64:74:fb:9a:f9:6a:c0:d5:e1:e0:fe:b1:
33:5c:e4:47:56:2d:2a:2a:c7:19:19:7f:63:df:61:14:28:60:
3f:dd:90:76:b7:f6:89:24:4b:26:c3:b4:e6:43:5c:9c:74:e1:
64:e4:8b:65:20:55:00:eb:93:95:88:8d:e5:eb:ee:b4:a8:69:
09:61:7e:ef:11:f5:8b:05:e0:69:dd:f9:27:e2:88:9d:d9:28:
c5:3d:ad:73:27:15:bf:31:91:ec:b5:e8:69:9d:40:cd:3e:0b:
b3:3a:63:e0:8f:59:5f:16:12:38:da:35:21:d4:c0:ad:e6:29:
26:b3:94:57:e7:6c:f9:d4:79:c1:33:88:0d:83:f1:2d:cc:4f:
22:78:37:97:38:ca:de:ca:0f:6b:ef:76:7e:27:1a:8a:11:78:
0f:98:a5:3d:0b:a9:e5:2d:0f:f3:54:17:af:a0:81:fa:36:0e:
74:c3:92:d3:ef:6b:7e:45:7f:97:28:72:e0:e2:67:52:f0:c0:
88:14:ff:94:8b:3f:5a:9b:40:62:9b:8f:7b:84:a4:b0:cb:30:
f0:ae:5f:bb:18:6e:a9:a5:f2:0e:29:0b:1e:82:6d:01:53:27:
e9:81:03:6b:1e:d0:0c:b0:f0:2d:f7:55:d7:e3:a3:89:97:57:
f7:df:24:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:44:45 2024 by rpki-client on console-fra.rpki-client.org