Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/Y0tXZzS3tiiQuox59ybDNmhxLdI.roa
File: Y0tXZzS3tiiQuox59ybDNmhxLdI.roa (raw, json)
Hash identifier: mAQAyr9yB4+a4jklErZU7KVn6ybjyWwueAQ1XLHns0o=
Subject key identifier: 63:4B:57:67:34:B7:B6:28:90:BA:8C:79:F7:26:C3:36:68:71:2D:D2
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 018EECF8685ECBCCBB5CDD4A2D7C392E44DE
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/Y0tXZzS3tiiQuox59ybDNmhxLdI.roa
Signing time: Wed 17 Apr 2024 16:51:26 +0000
ROA not before: Wed 17 Apr 2024 16:51:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 52209
IP address blocks: 2a09:a6c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:ec:f8:68:5e:cb:cc:bb:5c:dd:4a:2d:7c:39:2e:44:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Apr 17 16:51:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=634b576734b7b62890ba8c79f726c33668712dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5a:27:fe:7f:b8:5a:63:08:1b:1b:40:d0:c2:
07:1a:aa:40:90:e1:36:4c:2f:6b:6b:c3:b2:6d:4a:
32:90:1b:b0:28:9a:a2:ee:ec:f6:b9:6d:45:72:b1:
e9:78:05:59:28:c2:73:50:b8:29:d8:ae:4e:be:cf:
55:fa:b2:b0:c5:d4:1b:e9:b0:8f:12:4a:c2:a3:6b:
75:85:68:6f:b8:49:4c:f9:9c:5d:a6:88:b0:82:80:
5e:e7:85:a9:9d:e2:4c:6f:19:5e:8b:e2:f1:59:50:
8d:b3:6d:89:d7:2b:c2:93:ab:e7:67:aa:91:eb:02:
c9:4e:21:ee:5a:86:e2:4e:12:18:9e:e9:5f:80:ad:
50:95:c5:aa:66:41:76:bd:0c:df:45:86:f7:ce:42:
cd:70:5b:62:81:f9:a1:90:45:b0:e8:97:88:f5:d3:
0f:2b:19:fc:d5:86:06:35:a9:ab:ab:94:6a:b2:11:
a2:0a:63:39:af:f0:6d:f7:d7:c8:30:7c:5d:d5:80:
23:38:66:55:3c:0d:8f:b4:81:f8:fd:0f:3d:e4:e2:
cb:77:19:42:e9:90:9e:59:d9:2a:4e:38:7e:a7:00:
6a:86:ad:51:39:d9:19:5c:6f:12:16:6f:61:7d:20:
7c:6d:30:c8:72:3e:c0:58:82:15:9f:9b:50:95:93:
ee:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4B:57:67:34:B7:B6:28:90:BA:8C:79:F7:26:C3:36:68:71:2D:D2
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/Y0tXZzS3tiiQuox59ybDNmhxLdI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:a6c0::/29
Signature Algorithm: sha256WithRSAEncryption
4f:c3:c7:e5:ae:84:ad:e6:5f:8a:1c:2a:28:85:2b:f7:5c:03:
e0:75:49:91:0b:9e:a7:ca:3d:1c:67:8e:88:6e:8a:0f:38:82:
03:80:47:02:6a:e8:72:68:39:69:78:b7:ca:c4:97:cc:be:ab:
c7:6f:39:b6:89:01:ee:70:4a:ca:5b:f0:ae:5b:43:a3:63:4a:
40:92:d0:54:32:09:fd:3c:01:94:2d:4a:c1:e7:f1:00:fd:18:
89:e4:84:6c:82:34:25:c8:0c:a6:46:95:c6:06:3a:80:de:2a:
79:08:3c:7f:e5:a4:f0:3d:73:95:40:0b:69:43:2c:e1:c3:13:
71:05:95:8d:7f:f8:76:f9:aa:35:06:92:89:e1:96:3e:05:a6:
ae:a9:9e:a0:d0:d2:66:a2:23:0b:fa:0c:11:53:97:87:51:69:
80:69:ea:9f:07:6f:24:50:9f:6e:bb:d3:12:c0:a0:f3:58:be:
9d:0c:d0:bd:82:27:ac:1b:0f:49:de:ab:6f:a0:c2:8f:b5:9c:
fd:bf:1d:a4:bd:89:9d:67:08:84:e7:97:94:28:71:92:88:d0:
1c:e3:bb:b5:8b:f5:e7:47:b5:7e:55:76:35:14:e4:ca:e8:0f:
35:49:0b:1e:72:de:db:29:1a:2a:27:cc:76:db:62:3d:ef:24:
a7:6a:c8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 8 03:14:03 2024 by rpki-client on console-fra.rpki-client.org