Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YMbOwzPtJ4UujdgUvicT0v1tSUg.roa
File: YMbOwzPtJ4UujdgUvicT0v1tSUg.roa (raw, json)
Hash identifier: bTy/wZSmH4y731QVCHT6aw9Vf7/RP5igG6g0A11Zges=
Subject key identifier: 60:C6:CE:C3:33:ED:27:85:2E:8D:D8:14:BE:27:13:D2:FD:6D:49:48
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01902827CB609B19BABE4A5139D297D8BC0F
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YMbOwzPtJ4UujdgUvicT0v1tSUg.roa
Signing time: Mon 17 Jun 2024 21:43:34 +0000
ROA not before: Mon 17 Jun 2024 21:43:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215536
IP address blocks: 2a0e:b107:12d6::/48 maxlen: 48
2a0e:b107:12d8::/48 maxlen: 48
2a0e:b107:12db::/48 maxlen: 48
2a0e:b107:12dd::/48 maxlen: 48
2a0e:b107:12df::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:28:27:cb:60:9b:19:ba:be:4a:51:39:d2:97:d8:bc:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 17 21:43:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60c6cec333ed27852e8dd814be2713d2fd6d4948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:73:8d:69:34:95:90:3e:f6:9a:c2:60:31:32:
7f:36:81:1e:63:fb:45:9b:74:b0:92:e1:1c:83:37:
1c:29:af:69:ca:66:09:ab:24:1c:35:f2:35:f7:d5:
49:41:06:a5:7d:c6:52:ae:5a:fb:4c:d0:25:3d:98:
1a:c2:39:54:55:b7:24:42:96:1d:54:2e:73:3a:eb:
a3:60:7f:81:8a:b4:cb:fc:e2:77:5b:42:f0:01:b8:
7e:76:04:66:c9:46:ac:37:13:6f:9b:81:d3:86:c8:
8b:0c:3b:7b:9e:88:10:87:9b:27:23:01:6e:a1:c4:
5e:3c:af:db:ee:a3:e8:26:31:4f:20:cf:3d:2a:40:
f3:3e:95:43:6b:6c:f2:93:6d:f0:60:98:52:9f:92:
15:a0:2c:04:b0:1d:db:c5:8e:75:fc:b6:1f:e9:59:
1e:88:ca:84:31:17:08:12:d3:6f:b0:2a:56:dd:ce:
20:e2:17:42:de:ab:8a:7c:c1:b0:f2:9f:c5:dd:0c:
70:cb:11:b9:c1:34:1f:d5:d9:bb:c5:8d:99:b0:0d:
8b:1f:a9:b1:57:80:e0:b7:be:9b:96:0b:f4:cc:1f:
43:7b:b8:03:05:19:8c:f4:b0:23:8f:cf:17:4a:b3:
a0:b4:3e:e0:5c:de:70:8e:0f:ae:b1:2b:fb:f9:65:
95:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C6:CE:C3:33:ED:27:85:2E:8D:D8:14:BE:27:13:D2:FD:6D:49:48
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/YMbOwzPtJ4UujdgUvicT0v1tSUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:b107:12d6::/48
2a0e:b107:12d8::/48
2a0e:b107:12db::/48
2a0e:b107:12dd::/48
2a0e:b107:12df::/48
Signature Algorithm: sha256WithRSAEncryption
af:7a:5c:9d:5f:48:25:fa:44:f6:ee:6b:ba:ab:76:7b:49:ef:
91:86:ab:60:1e:77:b5:e3:12:97:bd:fe:e2:82:e8:e8:9d:47:
b1:42:8c:9f:37:f9:f2:7a:b3:40:7e:0a:24:4a:89:4a:29:73:
2c:d0:2b:f1:c9:cc:fc:15:9c:7d:d8:3e:e0:49:73:5d:7c:f8:
03:fb:66:7b:6a:7b:e2:62:3d:2f:0e:67:38:c9:3d:0c:4d:3b:
f1:63:16:01:73:be:66:2b:5b:3a:44:71:25:7e:4c:19:1d:8b:
49:e0:fb:36:ee:7e:14:b3:62:14:b6:04:56:6a:7a:66:d4:1e:
70:ca:39:56:79:85:f6:7c:82:31:37:84:49:73:35:8a:93:e2:
1d:c0:e4:29:be:36:15:ee:19:55:7e:d0:4f:cf:a6:e3:6a:c0:
d8:42:7b:b3:5a:06:2d:9c:de:99:5d:8e:3e:a4:93:f4:e7:db:
49:a9:0f:0c:5d:6e:27:28:71:1e:d1:e7:0b:3b:ca:78:05:01:
86:2d:93:f4:66:ee:20:2f:26:ee:51:78:c4:ac:aa:21:be:df:
44:9d:18:ed:ab:4f:02:a1:d3:2f:f5:0e:97:1d:d3:f1:33:18:
ae:35:71:6f:be:10:aa:32:b4:4f:b7:f2:51:c0:d1:b5:0f:cd:
8f:3b:4e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:57 2024 by rpki-client on console-ams.rpki-client.org