Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-YTBCwKyloaJC6HRznavnu0eZOg.roa
File: 1-YTBCwKyloaJC6HRznavnu0eZOg.roa (raw, json)
Hash identifier: WptpscXTqdUfokYcPr1K6CVXKQanL1noOwNYOORoTVA=
Subject key identifier: F9:84:C1:0B:02:B2:96:86:89:0B:A1:D1:CE:76:AF:9E:ED:1E:64:E8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CF3CD8F4F6C4F9EBE8530B6C4F845F352
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-YTBCwKyloaJC6HRznavnu0eZOg.roa
Signing time: Wed 10 Jan 2024 14:36:24 +0000
ROA not before: Wed 10 Jan 2024 14:36:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207466
IP address blocks: 2a0e:b107:770::/44 maxlen: 48
2a0e:b107:772::/48 maxlen: 48
2a0e:b107:771::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 26 Apr 2024 14:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f3:cd:8f:4f:6c:4f:9e:be:85:30:b6:c4:f8:45:f3:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 10 14:36:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f984c10b02b29686890ba1d1ce76af9eed1e64e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:07:b9:84:96:5b:37:1a:71:55:6a:d9:f4:f2:
00:7d:32:52:04:4a:92:3d:7c:96:4d:3d:d3:78:1f:
3d:e4:27:64:c6:d4:99:76:63:47:3a:70:bd:b5:d8:
bb:7a:9b:d0:46:dd:63:28:d6:b8:b4:85:a5:17:e1:
16:7e:81:3b:81:2c:9a:fa:39:4e:36:7a:2d:35:c6:
98:bb:9b:2b:eb:e9:b1:5e:f5:2d:b7:a8:a4:2c:48:
6e:f9:48:dd:b2:0d:1f:48:4b:fc:57:8b:0c:f2:10:
22:98:54:a2:af:8a:f4:5d:f9:77:3a:0a:79:cd:ee:
41:61:d6:99:83:34:9b:14:1d:81:ec:30:2f:1c:28:
11:53:ca:8a:8c:f8:4a:da:f3:29:0b:c7:f9:83:48:
ea:be:7e:55:91:2e:58:1e:0e:8e:a7:0d:c3:b1:b1:
9c:21:3a:bd:8d:db:0f:64:bf:de:8b:5d:fc:e0:ee:
b6:93:79:e4:dd:b8:44:48:e1:aa:82:c6:1e:c0:9b:
3d:36:da:07:19:36:c3:4a:59:fb:5b:ee:bb:63:ad:
f1:de:50:3f:37:a3:e4:2e:97:97:32:5e:56:ec:15:
04:07:aa:b2:81:70:83:9f:2d:08:be:b5:c7:45:ce:
23:fe:f9:49:4f:22:5b:0d:99:eb:36:76:d5:70:27:
89:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:84:C1:0B:02:B2:96:86:89:0B:A1:D1:CE:76:AF:9E:ED:1E:64:E8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/1-YTBCwKyloaJC6HRznavnu0eZOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:770::/44
Signature Algorithm: sha256WithRSAEncryption
9f:82:c4:b3:2c:87:37:ee:e7:05:23:4e:90:40:45:5a:93:95:
ef:3a:2d:b6:79:16:c3:dc:20:9e:21:26:32:2f:4c:c4:38:73:
4e:a4:7f:6f:48:19:40:d0:c0:17:c5:95:19:49:6d:1b:63:ab:
c5:90:72:ad:e3:94:06:f1:a0:a0:2e:75:29:9b:24:5e:d5:89:
36:31:80:92:8d:a6:35:5f:8a:24:e2:78:a4:b4:ca:13:24:34:
fa:f7:ce:fe:a3:97:a5:30:7c:fc:bd:be:d8:96:78:7e:4f:a4:
43:2d:13:f6:d3:d3:1c:01:5c:19:36:b5:09:fd:22:9a:48:7e:
8a:e2:6b:96:4c:ab:4a:27:65:9e:95:6f:0f:80:a4:84:6c:d1:
2b:5b:10:0a:6e:06:39:e0:8b:00:a0:e3:b9:cc:9d:f6:99:59:
06:89:86:8b:20:46:ac:f0:a2:56:5f:2f:70:10:6f:ec:7c:8a:
26:0b:3a:44:e2:ef:9b:9f:f7:2c:7f:23:7b:6f:8c:81:74:36:
a1:27:34:ce:92:8d:7e:c0:58:2c:5f:1b:9b:38:65:f8:7e:42:
06:a7:e1:0b:91:37:ec:d3:57:92:24:d2:1d:ca:c5:e9:ec:8b:
d1:b7:2f:4d:0f:01:1f:71:c5:60:aa:77:ef:4e:8b:aa:08:9d:
4f:38:5f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:03:03 2024 by rpki-client on console-fra.rpki-client.org