Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Y0-Ojv4t7xfkTLBh_U0dEjGrHDw.roa
File: Y0-Ojv4t7xfkTLBh_U0dEjGrHDw.roa (raw, json)
Hash identifier: x5ub2b7/VlmkcZB3rYv1Ov85mmphtwJL6tpmLVbskh4=
Subject key identifier: 63:4F:8E:8E:FE:2D:EF:17:E4:4C:B0:61:FD:4D:1D:12:31:AB:1C:3C
Certificate issuer: /CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Certificate serial: 018CC26D22464E5739EF26C6726A3F6707F5
Authority key identifier: 93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Y0-Ojv4t7xfkTLBh_U0dEjGrHDw.roa
Signing time: Mon 01 Jan 2024 00:29:41 +0000
ROA not before: Mon 01 Jan 2024 00:29:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 38136
IP address blocks: 2a0e:aa07:e011::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 14:41:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:22:46:4e:57:39:ef:26:c6:72:6a:3f:67:07:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9361b5cd696825b74fccba7d97c3d0a2724ef3aa
Validity
Not Before: Jan 1 00:29:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=634f8e8efe2def17e44cb061fd4d1d1231ab1c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:89:61:35:89:85:4f:34:6e:dd:b6:3c:d3:
f9:81:1f:0c:4f:4e:39:91:93:fe:f8:a5:b7:56:ec:
f9:a2:47:28:44:e5:b8:24:eb:66:01:75:bc:34:28:
27:a0:2a:ad:0d:ff:2c:70:51:1f:d5:eb:89:47:f8:
0d:b2:8f:59:1c:2e:21:b8:e0:36:ed:2b:7e:72:6e:
0d:81:eb:b9:78:ca:45:7d:b8:07:d3:ef:05:5e:d5:
b4:cb:ab:fa:7e:6f:16:76:a8:3e:d0:6f:ae:b1:46:
95:08:14:7d:2c:e9:3c:4d:59:b7:d1:dc:63:65:60:
6a:f4:78:87:52:53:6a:81:55:39:48:ca:02:91:bb:
52:1e:4c:e4:e7:ea:36:eb:e6:c8:bc:54:30:33:22:
a4:8e:2a:5a:5a:1d:da:ab:ed:23:25:a8:4e:70:5f:
77:a2:3b:de:7f:62:d2:cf:48:12:c2:da:25:4c:a9:
9d:ac:d2:0c:d3:c5:87:7b:97:d2:2e:fb:46:38:6e:
ea:e5:0a:76:b4:9d:c8:61:60:13:28:7e:24:37:91:
f1:50:22:05:72:fc:e7:41:3f:3b:69:4a:04:b3:c7:
1c:f9:3c:4b:1d:ca:e4:91:ff:26:77:88:d0:f3:29:
d9:2e:d7:0e:b5:3c:58:23:cc:e2:cf:65:80:ec:0b:
79:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:4F:8E:8E:FE:2D:EF:17:E4:4C:B0:61:FD:4D:1D:12:31:AB:1C:3C
X509v3 Authority Key Identifier:
keyid:93:61:B5:CD:69:68:25:B7:4F:CC:BA:7D:97:C3:D0:A2:72:4E:F3:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2G1zWloJbdPzLp9l8PQonJO86o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/Y0-Ojv4t7xfkTLBh_U0dEjGrHDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/72bf2f-8e34-48a2-849a-a541d1bcee19/1/k2G1zWloJbdPzLp9l8PQonJO86o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:aa07:e011::/48
Signature Algorithm: sha256WithRSAEncryption
af:7e:5a:53:48:d9:6f:7c:2d:a3:9b:a5:cf:bb:cb:48:5f:48:
1d:7b:69:eb:34:2a:6e:37:42:95:eb:cc:94:87:47:98:d0:c3:
73:93:13:86:22:48:ae:d5:5f:2b:e8:de:80:a7:50:dc:c2:fa:
dc:a4:a3:de:b8:c6:d7:35:c7:e0:ac:25:d6:37:7f:9d:9d:0a:
b2:c5:b0:4b:01:d8:64:52:bb:24:eb:2b:5d:a6:9d:31:e3:e0:
99:9f:63:6e:84:9d:27:20:4b:a9:a9:29:69:6a:5a:dd:2f:ac:
f3:0a:63:3f:5f:94:b0:52:bd:2c:9f:c2:27:91:a0:5f:89:60:
01:f8:00:06:0d:05:80:f1:d4:2c:1c:10:d4:7e:31:ee:e9:8d:
05:59:47:70:30:2c:95:db:d6:5b:44:73:7f:8c:f7:9d:50:2d:
00:83:0e:23:0d:24:90:7e:34:f8:1b:61:e0:fc:d2:e4:5a:77:
bd:4e:51:8b:9f:5a:3a:0c:67:dd:37:bf:d0:08:0b:15:29:cc:
11:11:80:99:46:6a:7e:f4:68:2e:61:e0:9a:72:32:43:8a:b7:
a4:6c:4b:a8:16:15:cb:c3:0c:2b:08:04:d0:f4:72:6c:de:c0:
d4:62:c7:16:67:95:7b:32:f9:62:ac:7d:86:2d:0c:07:4d:fa:
de:37:8d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 20:51:56 2024 by rpki-client on console-fra.rpki-client.org