Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/ynzfeNrLTxp6f426C-w-ucH4hMs.roa
File: ynzfeNrLTxp6f426C-w-ucH4hMs.roa (raw, json)
Hash identifier: W+8cI0EPRGQJRELg5mrHzk00+ZQDPzVcvLumdp+Swso=
Subject key identifier: CA:7C:DF:78:DA:CB:4F:1A:7A:7F:8D:BA:0B:EC:3E:B9:C1:F8:84:CB
Certificate issuer: /CN=76a75826e991225a429ff8a1e7ffdc80466420df
Certificate serial: 018CC8013529CD36FDEE50665F723B162AFC
Authority key identifier: 76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/ynzfeNrLTxp6f426C-w-ucH4hMs.roa
Signing time: Tue 02 Jan 2024 02:29:31 +0000
ROA not before: Tue 02 Jan 2024 02:29:31 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12643
IP address blocks: 192.44.32.0/22 maxlen: 22
192.67.200.0/21 maxlen: 21
153.96.244.0/22 maxlen: 22
129.233.208.0/23 maxlen: 23
2a03:db80:3410::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:35:29:cd:36:fd:ee:50:66:5f:72:3b:16:2a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a75826e991225a429ff8a1e7ffdc80466420df
Validity
Not Before: Jan 2 02:29:31 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca7cdf78dacb4f1a7a7f8dba0bec3eb9c1f884cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b8:c9:42:80:9a:a6:62:b2:b0:15:78:cd:9f:
85:34:72:5b:6a:35:18:68:1a:83:70:83:3c:94:78:
69:63:14:cc:34:b7:a5:d6:de:7c:8c:50:5d:61:f3:
5b:e4:f1:ae:3d:8b:17:5a:5a:b9:2d:3d:e8:b6:c3:
94:35:1a:34:35:12:e7:94:0a:3a:c3:44:60:4d:f4:
4f:78:ed:6a:0f:52:8a:da:50:de:e9:4d:0a:82:25:
22:d2:8a:94:0d:94:3f:8c:fb:f3:bf:d0:df:f7:b6:
ee:7e:ac:10:3e:88:0c:e5:26:ed:a2:a6:d0:db:9c:
58:e0:69:3d:70:b3:cc:25:c9:58:e0:61:ef:a3:bc:
1f:d5:0e:26:5d:7e:93:5d:cf:2f:ea:eb:38:7b:c8:
0d:3a:29:d8:1a:b1:86:fc:38:0f:89:bc:b6:34:eb:
76:0f:a2:be:ad:5b:e9:b9:0d:cc:ac:2c:c1:4c:8a:
e0:78:96:1a:bd:4f:6a:3a:c4:c2:3a:2c:7f:87:ec:
f3:b7:06:99:df:79:cf:ea:dc:9a:a9:72:1f:36:e5:
28:31:c2:04:9c:9a:52:f8:7c:ac:70:d9:13:43:4a:
75:84:11:74:3c:6b:fa:4f:38:70:0e:60:48:aa:22:
7f:fd:2a:7b:4c:88:ac:a3:53:81:d0:c7:50:67:9a:
ad:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7C:DF:78:DA:CB:4F:1A:7A:7F:8D:BA:0B:EC:3E:B9:C1:F8:84:CB
X509v3 Authority Key Identifier:
keyid:76:A7:58:26:E9:91:22:5A:42:9F:F8:A1:E7:FF:DC:80:46:64:20:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqdYJumRIlpCn_ih5__cgEZkIN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/ynzfeNrLTxp6f426C-w-ucH4hMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/1d33ca-8d1c-49c0-be97-ad8fbeaa8dd9/1/dqdYJumRIlpCn_ih5__cgEZkIN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
129.233.208.0/23
153.96.244.0/22
192.44.32.0/22
192.67.200.0/21
IPv6:
2a03:db80:3410::/48
Signature Algorithm: sha256WithRSAEncryption
60:7a:c8:0e:ea:63:95:ff:a4:b5:40:a6:6d:b0:41:5a:73:77:
72:0d:9f:e3:b0:fb:ec:1a:f0:fe:2b:6a:70:53:26:4c:da:a5:
17:64:d5:72:5f:9b:bc:51:0b:ae:6d:8b:58:bf:c4:7f:a4:da:
65:3e:70:5f:b0:94:a3:34:11:72:14:60:c3:aa:2f:a2:ab:59:
8a:db:d9:94:b0:f6:13:18:7c:e6:05:9a:0a:9f:f1:47:a9:e6:
0f:79:38:d4:e0:19:7d:fa:41:8f:f2:2a:c3:bf:fa:d0:65:41:
96:ad:3d:85:61:d0:16:52:1a:81:70:92:cd:bc:43:eb:7a:0f:
9d:7b:41:fe:94:6f:c4:55:60:23:7b:3a:95:19:f8:d6:bb:27:
72:61:2e:07:83:24:62:88:66:c0:1d:6c:8c:d7:6a:bf:3c:65:
47:66:bc:17:84:c9:fc:cc:a5:d4:5d:1c:bb:3d:6c:c9:bf:98:
65:a5:0c:62:17:f8:fb:88:81:b6:ab:59:26:64:c5:04:c7:db:
9f:c4:37:f5:7e:01:1e:33:70:59:4a:78:51:64:00:86:76:3e:
55:3a:34:21:24:3b:d4:08:c6:59:ee:11:7e:a1:d0:8f:3a:7d:
55:9b:d0:82:9b:22:97:5d:b2:83:4c:ab:2d:ce:85:fb:a8:d1:
40:f2:28:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:47:15 2024 by rpki-client on console-ams.rpki-client.org