Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YImr_qGM0bKFXTwf934LcYDqYWY.roa
File: YImr_qGM0bKFXTwf934LcYDqYWY.roa (raw, json)
Hash identifier: eOBza92vjW1gOOufEfFG9g6xQqGsNkx4NMFLyrZj6UE=
Subject key identifier: 60:89:AB:FE:A1:8C:D1:B2:85:5D:3C:1F:F7:7E:0B:71:80:EA:61:66
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018CF06727607A263CBDC38D1AF73520AEDC
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YImr_qGM0bKFXTwf934LcYDqYWY.roa
Signing time: Tue 09 Jan 2024 22:45:41 +0000
ROA not before: Tue 09 Jan 2024 22:45:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1294067294
IP address blocks: 2a0e:b107:13d2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f0:67:27:60:7a:26:3c:bd:c3:8d:1a:f7:35:20:ae:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 9 22:45:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6089abfea18cd1b2855d3c1ff77e0b7180ea6166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:6f:e6:4b:ff:36:42:f5:a1:00:b1:ba:6b:6c:
d3:35:cb:66:99:63:84:06:84:a5:ae:58:25:8f:63:
62:52:93:75:22:b4:45:c8:cf:99:11:37:25:e6:91:
e3:41:f6:be:5a:e4:16:18:db:74:48:31:8e:32:e4:
9b:cb:2a:48:76:78:d2:0d:a8:93:6a:93:79:6e:ec:
f0:f3:64:1f:30:a8:83:f5:b9:65:a8:6a:b3:49:ba:
2f:69:24:e3:d4:6f:8a:31:9b:4a:8b:29:9f:80:b4:
76:ca:cd:0b:31:5a:92:fd:e4:ee:ad:2c:b7:13:42:
7f:82:36:56:25:64:95:0c:b0:08:72:03:45:5d:10:
ef:a2:09:46:99:60:b7:16:61:4d:57:79:98:12:2b:
88:35:3f:35:47:d2:bf:bd:ee:db:21:a0:fc:9a:2e:
88:93:3c:b6:92:d2:38:ad:48:51:a6:51:80:9f:9f:
e3:03:ab:00:f6:4d:51:75:76:11:85:60:08:51:c9:
63:e4:20:34:73:74:74:e0:4b:a7:8a:8e:5b:7f:64:
36:5b:63:4f:20:75:7b:69:fa:84:ee:aa:e0:52:00:
0e:94:12:5f:5c:c4:ab:94:71:d1:0b:07:ab:ac:14:
3f:af:dc:66:fd:9a:b9:dc:cf:4b:ec:ec:a2:a8:fc:
99:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:89:AB:FE:A1:8C:D1:B2:85:5D:3C:1F:F7:7E:0B:71:80:EA:61:66
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YImr_qGM0bKFXTwf934LcYDqYWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:13d2::/48
Signature Algorithm: sha256WithRSAEncryption
93:d8:3e:09:28:0b:56:b3:27:f3:4a:88:1e:4e:94:f2:7c:f2:
93:ca:68:b9:63:47:4a:be:a4:ec:f8:ac:ce:52:7b:b4:ff:e1:
6f:dd:6d:6d:f3:01:50:c0:e5:06:15:2a:ae:24:ed:37:75:e1:
b0:a7:45:ab:be:4d:42:47:0c:08:e4:01:5e:0d:9e:66:63:1f:
16:ee:68:de:17:5d:27:d4:fb:c9:aa:6f:20:6f:f9:29:e0:45:
68:e6:28:bc:47:f3:f2:59:05:92:91:ed:fe:70:3b:cf:68:96:
50:57:d7:1e:25:9f:93:91:db:b5:0e:a4:d0:f0:cb:5a:8e:ac:
9c:29:1c:fc:7e:ec:b5:a7:f3:74:53:8c:e4:da:c1:2e:20:a4:
93:d3:a4:ff:06:b6:8b:af:ff:55:c4:c9:29:cd:4e:f5:57:94:
78:00:f7:b4:a8:01:b4:8c:a5:27:af:b5:6b:ea:53:94:dc:bc:
83:8b:ed:b9:9f:d6:ab:96:44:fa:92:0d:ad:de:c3:4d:05:3d:
ea:60:e0:c8:69:37:63:eb:3d:f7:7a:0d:4e:d4:c4:df:21:2d:
e5:2b:b6:d1:e5:db:6d:e5:4b:2a:8a:34:62:11:d2:a3:3b:e1:
1a:c2:bb:2b:21:a8:6a:33:c1:05:6f:d8:45:82:56:cd:d2:28:
ab:47:f9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:57 2024 by rpki-client on console-ams.rpki-client.org