Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yPKOWJ9P--rvJxDKf0dzOsHMguA.roa
File: yPKOWJ9P--rvJxDKf0dzOsHMguA.roa (raw, json)
Hash identifier: 1NfS6OljEDxNwRUdLki/Hb/q1c+NFPjktG88+U3ADtI=
Subject key identifier: C8:F2:8E:58:9F:4F:FB:EA:EF:27:10:CA:7F:47:73:3A:C1:CC:82:E0
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018DA435BF772234A470F7EAF25EFDFF7AB5
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yPKOWJ9P--rvJxDKf0dzOsHMguA.roa
Signing time: Tue 13 Feb 2024 20:43:22 +0000
ROA not before: Tue 13 Feb 2024 20:43:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215734
IP address blocks: 2a06:de00:de10::/48 maxlen: 48
2a06:de00:de11::/48 maxlen: 48
2a06:de00:de12::/48 maxlen: 48
2a06:de00:de15::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 Nov 2024 09:57:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a4:35:bf:77:22:34:a4:70:f7:ea:f2:5e:fd:ff:7a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 13 20:43:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8f28e589f4ffbeaef2710ca7f47733ac1cc82e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:86:47:1a:18:1f:af:e3:36:76:b0:1f:d1:02:
49:30:d1:28:1c:31:f0:b8:fd:ef:24:73:2a:72:6c:
fc:07:96:b4:08:c7:04:be:49:82:c2:65:a3:7e:5b:
1b:fc:d1:ae:8f:9b:70:06:60:d4:44:6f:0e:94:b6:
a8:54:a8:54:80:bf:24:11:54:b5:2b:94:d3:0b:8b:
15:ca:35:32:21:81:82:93:d9:e9:a4:98:de:8f:f2:
ac:af:27:4a:da:2d:29:14:1d:db:f2:6d:ea:8f:f6:
5b:fa:14:dc:29:02:95:3d:07:1f:f1:8d:b9:9c:eb:
43:08:b6:a0:35:7a:5f:66:2f:5f:36:41:62:96:95:
7b:e0:85:19:f9:ff:e1:ed:fc:46:25:ea:d0:23:02:
2c:53:fa:d9:75:55:65:11:90:21:23:77:34:ee:d7:
54:53:64:b8:03:0d:46:cc:4f:c7:11:ef:8a:ce:11:
42:8b:48:b9:46:2e:f9:d7:ec:db:c1:61:94:6e:8f:
d8:a4:ec:30:a4:ea:82:e3:a5:8c:fc:ca:05:2c:76:
09:fc:42:b8:4b:7f:7a:1b:7e:f9:1b:d0:fb:b7:ab:
0b:a5:d7:69:4d:32:79:42:3d:06:88:3a:09:a7:6e:
db:9c:91:d5:e1:a5:2c:8b:56:f1:bd:83:29:b6:79:
7b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:F2:8E:58:9F:4F:FB:EA:EF:27:10:CA:7F:47:73:3A:C1:CC:82:E0
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/yPKOWJ9P--rvJxDKf0dzOsHMguA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de00:de10::-2a06:de00:de12:ffff:ffff:ffff:ffff:ffff
2a06:de00:de15::/48
Signature Algorithm: sha256WithRSAEncryption
6c:6d:3e:02:63:74:45:db:9b:f8:95:e1:9e:fa:97:95:71:9b:
17:f2:d9:3d:af:c0:ad:ee:4e:b0:bb:08:fa:5c:b7:bd:eb:2b:
09:77:e4:95:23:16:57:09:b9:42:2d:7c:b4:11:09:3f:6a:e5:
3f:bd:36:c0:fa:95:37:77:e0:9e:93:de:13:cd:e4:ff:1f:7e:
2e:a8:11:4f:de:59:14:c5:f4:c9:3c:a9:f2:7c:16:6f:cf:e8:
41:b3:c3:68:f2:93:a6:9b:c4:4f:2f:ea:35:b2:2e:46:72:c2:
93:6b:5a:0c:ed:2c:77:5f:ca:5f:9b:6e:fe:21:2c:c9:f5:9b:
ed:59:c6:b5:81:90:67:93:a8:2d:a0:14:7d:58:79:4e:a7:62:
b0:bf:63:f2:d0:dd:d2:77:67:46:29:23:d3:25:01:c6:6c:f4:
b5:14:e4:29:8b:ab:60:13:eb:8e:dc:c1:d9:92:72:e8:80:58:
c5:0c:7d:9a:ea:ba:98:26:a4:55:53:b7:3e:46:56:66:a8:e8:
69:6d:b1:79:90:15:99:ef:c1:7f:1a:9e:ec:3b:a7:24:3d:3c:
74:9c:56:0f:b9:cd:c8:ba:3d:12:c9:c6:d7:4c:34:f2:53:63:
c8:2a:66:6c:18:14:b0:b6:ec:30:13:b2:b2:c8:6d:ef:85:fd:
ad:2c:9f:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 19:07:59 2024 by rpki-client on console-ams.rpki-client.org