Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/Y6HKDCtmBuK-kk8uYn5aeockMdc.roa
File: Y6HKDCtmBuK-kk8uYn5aeockMdc.roa (raw, json)
Hash identifier: fWu97cW7VyYrBSI1r4SDkYh45x2JR71i5IhwQ7tOYCE=
Subject key identifier: 63:A1:CA:0C:2B:66:06:E2:BE:92:4F:2E:62:7E:5A:7A:87:24:31:D7
Certificate issuer: /CN=013c74132597162cdb2dd63760abd9971e30bf63
Certificate serial: 018CC94DBD636FE737FD0F2696BF979E49AB
Authority key identifier: 01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/Y6HKDCtmBuK-kk8uYn5aeockMdc.roa
Signing time: Tue 02 Jan 2024 08:32:44 +0000
ROA not before: Tue 02 Jan 2024 08:32:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212805
IP address blocks: 185.19.203.0/24 maxlen: 24
2a12:4740::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 May 2024 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:bd:63:6f:e7:37:fd:0f:26:96:bf:97:9e:49:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=013c74132597162cdb2dd63760abd9971e30bf63
Validity
Not Before: Jan 2 08:32:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63a1ca0c2b6606e2be924f2e627e5a7a872431d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b0:d0:c0:29:3e:d1:6f:ed:c0:43:36:04:eb:
13:bf:0d:ef:3c:0c:17:bf:df:45:99:b6:3a:02:ad:
55:6b:b9:0c:63:42:49:34:85:d3:20:3d:36:09:86:
a9:cd:8f:2c:2c:d1:66:2b:92:b5:82:b2:2f:86:e0:
ad:a2:31:e0:ca:c6:b0:52:a9:3f:1a:73:11:92:7f:
c7:e9:86:60:c8:5e:ef:6d:46:ee:c5:23:7b:66:ca:
b3:ba:70:18:85:d1:6a:ab:e0:95:06:1f:c5:73:f6:
9e:92:57:08:be:d5:c9:5a:ba:fe:f1:5d:be:be:a9:
ed:d7:6a:a2:47:c6:78:6e:02:cb:8d:d2:1c:0a:1b:
17:d2:7c:c7:80:de:6c:db:1c:61:0c:67:60:6b:3d:
dc:d0:c1:2c:2c:b4:ad:e6:64:38:52:6e:f7:fa:7f:
31:c3:7f:f0:8f:fe:fe:1e:f4:c7:aa:26:6d:da:9b:
1c:81:af:b1:7a:d2:09:a5:3c:5e:a4:88:6d:75:b1:
11:d1:23:97:de:74:16:05:65:c8:d7:01:8a:b2:d4:
25:e2:20:29:6e:87:91:b5:61:d4:97:64:68:7c:9d:
fe:75:a0:7d:ca:08:cf:9c:5f:3b:01:48:79:3e:27:
08:92:83:7c:9d:4f:2a:a0:e8:01:27:99:5c:e3:6d:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:A1:CA:0C:2B:66:06:E2:BE:92:4F:2E:62:7E:5A:7A:87:24:31:D7
X509v3 Authority Key Identifier:
keyid:01:3C:74:13:25:97:16:2C:DB:2D:D6:37:60:AB:D9:97:1E:30:BF:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATx0EyWXFizbLdY3YKvZlx4wv2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/Y6HKDCtmBuK-kk8uYn5aeockMdc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca6c80-03a1-4a4c-91cf-068b77e903a0/1/ATx0EyWXFizbLdY3YKvZlx4wv2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.19.203.0/24
IPv6:
2a12:4740::/29
Signature Algorithm: sha256WithRSAEncryption
2c:f2:b3:06:e2:60:d9:af:16:23:16:e4:a1:e4:2e:79:6d:7b:
cb:de:f7:39:8a:ac:1d:8a:11:c9:63:3e:60:32:34:d3:ab:75:
26:a8:96:1a:af:74:e8:cc:75:d5:47:34:f3:92:d4:d3:a1:44:
c4:e3:cf:e0:08:8a:48:47:5f:57:3b:26:42:80:1b:5d:be:de:
72:44:a4:9c:5e:ec:2b:39:d8:6e:d4:7b:1a:13:39:4e:16:74:
a4:e4:0d:93:a9:94:57:0a:0f:b7:c5:c6:73:9c:20:16:ed:ea:
25:b8:6b:03:b1:f5:cd:94:c8:6d:63:36:1b:f3:8b:f2:ad:1e:
27:f6:ad:c9:02:2a:0d:dd:6a:2b:2e:f2:cf:b2:4d:39:1d:d5:
24:6e:22:e9:f9:10:11:41:6b:41:8e:38:8f:91:10:2e:a4:a4:
cd:46:76:39:9a:f2:57:a7:5e:2b:5f:00:09:7a:2f:93:73:18:
13:a3:56:e0:51:1f:16:72:ba:30:ab:de:58:e2:fe:75:de:ff:
70:72:dc:79:a8:08:e2:9e:a5:71:0e:75:5e:a1:0f:a6:e7:2a:
64:67:f7:be:65:fa:db:d0:52:44:b3:32:06:cc:aa:f4:84:a7:
91:99:75:5e:1a:86:ae:32:81:1e:9b:94:44:ac:d8:24:4f:c1:
ef:42:a5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 04:13:18 2024 by rpki-client on console-ams.rpki-client.org