Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v6ur_YBF9-21t9rKBdbchR9ecQI.roa
File: v6ur_YBF9-21t9rKBdbchR9ecQI.roa (raw, json)
Hash identifier: mwoWwjo7RwxstocaZL10iYIbvmdo0TYMeItn9dKLXZA=
Subject key identifier: BF:AB:AB:FD:80:45:F7:ED:B5:B7:DA:CA:05:D6:DC:85:1F:5E:71:02
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018CC5014C5F6A35A65E212AC1D9B5527985
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v6ur_YBF9-21t9rKBdbchR9ecQI.roa
Signing time: Mon 01 Jan 2024 12:30:45 +0000
ROA not before: Mon 01 Jan 2024 12:30:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209043
IP address blocks: 84.32.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 May 2024 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:4c:5f:6a:35:a6:5e:21:2a:c1:d9:b5:52:79:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Jan 1 12:30:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bfababfd8045f7edb5b7daca05d6dc851f5e7102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:50:e8:65:a1:db:97:6b:bd:9d:0c:0b:dd:
d1:ec:40:be:e4:73:5a:96:24:8f:cf:61:c7:8c:9e:
89:44:39:7b:7c:04:e9:d9:f2:28:09:8f:8f:b0:52:
c6:61:60:65:53:a7:c6:80:14:63:da:79:63:c0:20:
9e:d7:d0:f4:8b:6d:1d:1e:55:6b:9c:24:9d:a8:56:
c1:fc:e2:df:66:33:2e:4f:5f:b7:4d:16:d2:c6:46:
9b:1e:97:3e:79:30:bb:a7:75:f3:df:b5:78:ac:27:
5d:e8:0f:d7:5a:62:33:8d:8f:bb:46:fc:51:d5:ed:
91:13:65:8c:a7:5b:63:0e:1a:ca:56:ca:0d:56:54:
9b:ca:04:4c:ab:8e:5b:2b:f4:66:7e:df:50:a1:66:
4b:26:78:29:b3:58:09:ee:90:b7:a8:e1:1b:d5:28:
af:9e:36:ec:26:ea:64:29:b3:4e:0d:54:18:3c:91:
df:7f:d2:07:3b:50:1b:0b:34:31:d5:6b:5d:6f:26:
9a:e4:fb:65:5b:54:31:23:38:e6:e3:8d:3f:90:24:
28:c1:19:70:fa:37:29:7b:ed:b7:0e:d9:32:9f:50:
ae:21:e0:e3:d5:76:69:6f:52:ad:a8:dc:09:c3:c3:
05:cf:b8:37:1e:04:08:24:8b:50:8c:3c:d3:bc:6c:
32:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AB:AB:FD:80:45:F7:ED:B5:B7:DA:CA:05:D6:DC:85:1F:5E:71:02
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/v6ur_YBF9-21t9rKBdbchR9ecQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.78.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:66:6e:6d:16:45:ed:29:a9:ae:01:70:96:67:38:6e:a3:9f:
d6:70:56:e8:b5:9a:ef:aa:77:e9:e3:68:9d:77:35:09:3e:b7:
dd:8c:3c:da:df:b0:c4:2c:e2:e6:9b:e7:17:47:a0:03:49:6a:
e7:51:55:2c:f9:82:2d:73:df:c4:ac:df:5c:2a:e7:75:f0:7b:
a4:e0:9a:96:23:c4:46:c9:04:92:5d:37:5c:d0:5d:5f:11:95:
26:9a:fd:84:8c:59:dc:13:e0:08:7b:b4:cd:f6:6f:2b:af:a6:
29:00:fc:ff:a3:31:aa:79:43:5a:b9:f2:ac:51:0c:f4:5e:c3:
d5:cd:87:3a:0f:ca:e6:a3:e5:5d:f3:f0:1a:8c:7a:74:d4:f1:
4b:70:a7:1a:c0:e4:ee:6f:65:32:39:8f:82:37:55:8b:f8:1a:
17:a5:40:c3:d0:ee:6c:f2:9a:9d:7c:88:d8:25:0e:9e:c1:ae:
e8:04:2b:33:dc:ce:f5:23:90:58:66:a3:72:df:52:e1:3f:7c:
71:6c:60:64:4b:23:28:dd:bb:45:72:7a:cf:d3:44:c6:34:c8:
5b:0a:22:14:b9:13:d2:3f:35:99:25:68:a5:65:22:f8:50:0b:
5f:fa:fb:ff:60:06:26:46:15:3d:e3:a8:a5:09:52:4a:cb:76:
9b:1f:c1:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 21:44:40 2024 by rpki-client on console-ams.rpki-client.org