Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/yANqt1vbJx4fO1o4DJviJBzVPOI.roa
File: yANqt1vbJx4fO1o4DJviJBzVPOI.roa (raw, json)
Hash identifier: 2Xev9RCG8rjU8ys64o/4wJdh5oGGKC+HWWtM19qUAqM=
Subject key identifier: C8:03:6A:B7:5B:DB:27:1E:1F:3B:5A:38:0C:9B:E2:24:1C:D5:3C:E2
Certificate issuer: /CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Certificate serial: 0191D4B34067FA12CBF786F001E4D5C4721D
Authority key identifier: 63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/yANqt1vbJx4fO1o4DJviJBzVPOI.roa
Signing time: Mon 09 Sep 2024 02:53:22 +0000
ROA not before: Mon 09 Sep 2024 02:53:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60445
IP address blocks: 2a12:f8c3:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d4:b3:40:67:fa:12:cb:f7:86:f0:01:e4:d5:c4:72:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63392e929317ae6bde08a5a3b98a2b701ddb893a
Validity
Not Before: Sep 9 02:53:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8036ab75bdb271e1f3b5a380c9be2241cd53ce2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:70:16:ae:bb:d7:d1:c7:b8:a4:46:1e:22:55:
c1:15:0f:9a:72:8b:12:15:6a:9f:40:1e:f9:cd:4b:
b8:33:0b:1a:21:8b:12:a3:63:16:31:13:36:79:e0:
88:85:d6:3b:b6:6e:37:6d:f9:a8:85:9d:c7:e2:a2:
fc:18:23:8a:bd:a7:2f:1a:7a:5f:85:de:ea:dd:d4:
09:d4:ef:ad:73:3c:a0:9e:9f:32:88:0a:cb:d8:06:
5a:08:21:3d:f2:9f:ef:10:0e:4a:15:2b:83:1c:57:
6e:91:69:c4:9e:ed:89:5f:a9:3e:7d:ee:f4:4f:19:
78:6f:be:bf:87:64:56:10:d2:8b:60:06:95:be:e1:
40:6a:3a:63:bb:9a:80:5a:91:58:2a:c7:8b:ca:2f:
19:8e:79:cd:1d:6a:e6:cb:49:9f:67:fc:49:e1:a8:
73:ef:d6:ec:6d:76:cd:01:20:c2:73:d7:85:7c:37:
cc:e5:92:3c:ed:13:df:dd:df:53:3a:5f:ee:f1:90:
83:de:a7:a4:3c:0c:fa:f3:8e:bf:18:1b:7a:41:78:
06:e5:36:38:b6:f6:76:17:84:19:87:ad:f3:b1:f0:
73:a7:91:17:03:67:ea:e9:6b:00:9c:6f:e2:90:bb:
2f:40:df:fe:40:eb:6a:4e:7c:83:1f:83:06:f2:6f:
37:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:03:6A:B7:5B:DB:27:1E:1F:3B:5A:38:0C:9B:E2:24:1C:D5:3C:E2
X509v3 Authority Key Identifier:
keyid:63:39:2E:92:93:17:AE:6B:DE:08:A5:A3:B9:8A:2B:70:1D:DB:89:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YzkukpMXrmveCKWjuYorcB3biTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/yANqt1vbJx4fO1o4DJviJBzVPOI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/fe702e-c26b-4429-99c1-87250f5a07cc/1/YzkukpMXrmveCKWjuYorcB3biTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:f8c3:2000::/36
Signature Algorithm: sha256WithRSAEncryption
61:b2:37:ab:db:b0:88:03:89:2c:8e:ea:8f:86:06:45:92:f8:
26:7d:a4:00:d5:9a:0a:c7:e9:04:f1:1c:ba:43:a5:12:9a:60:
ae:8e:c3:6d:42:c5:61:94:2f:f2:5d:56:34:b7:d3:3a:23:bf:
30:8e:1a:20:f6:b6:c5:c1:32:44:50:f1:ea:4a:88:e9:66:53:
6b:76:dd:d1:9e:fc:88:91:45:f4:85:96:e7:e1:92:f1:e8:3f:
f4:72:97:b0:44:b9:56:33:ba:80:a6:2b:c6:19:35:93:4f:db:
1c:11:23:d9:a3:22:11:66:32:8d:98:ec:b4:e4:5a:88:93:52:
77:14:bb:c3:e2:53:67:93:f6:3e:59:d4:ee:e1:24:c5:11:cb:
ea:55:06:9d:60:34:33:62:fe:58:09:e9:d9:c2:1e:de:9c:3e:
c8:0e:7c:8d:00:5c:9a:6e:dc:d8:32:05:97:e6:7a:35:b5:1e:
b8:37:c3:fd:49:7f:d9:6c:ab:03:a7:3c:08:84:d0:92:45:35:
b4:61:a4:df:51:bd:a7:a8:1f:87:94:f9:79:ad:4a:9e:2b:7e:
45:db:50:47:12:fc:90:41:85:13:c3:ff:e1:c0:61:58:11:56:
9a:30:fd:b2:c2:4f:a2:13:cd:95:b8:41:94:80:5d:47:a6:50:
dd:bf:b1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:23:17 2024 by rpki-client on console-ams.rpki-client.org