Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SYY_sHUuiUgFdHqvMyofQ2j59fw.roa
File: SYY_sHUuiUgFdHqvMyofQ2j59fw.roa (raw, json)
Hash identifier: jCDA688YFaNKaRPS8wjgrfL9gQmasZ/mZ2aT0Vv+c1U=
Subject key identifier: 49:86:3F:B0:75:2E:89:48:05:74:7A:AF:33:2A:1F:43:68:F9:F5:FC
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 018F0785EE9737F1A17C7A21718FDE004F39
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SYY_sHUuiUgFdHqvMyofQ2j59fw.roa
Signing time: Mon 22 Apr 2024 20:36:08 +0000
ROA not before: Mon 22 Apr 2024 20:36:08 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215589
IP address blocks: 2a12:bec0:508::/48 maxlen: 48
2a12:bec0:509::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Jun 2024 09:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:07:85:ee:97:37:f1:a1:7c:7a:21:71:8f:de:00:4f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Apr 22 20:36:08 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=49863fb0752e894805747aaf332a1f4368f9f5fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:28:0f:c1:70:0a:08:9e:93:cf:97:cf:b3:9b:
7a:80:57:b3:27:e4:7e:f6:1c:bf:04:aa:98:cd:2a:
6f:69:8d:b5:23:ef:31:61:bd:7e:f3:dc:c9:78:71:
fb:b8:7e:8f:d9:e2:fd:06:d5:35:89:23:5e:fd:38:
be:73:a8:6c:c3:a6:7a:64:3e:8e:01:c1:c2:4d:e3:
43:9a:6b:c3:5b:ce:16:9e:6e:18:e8:8c:63:4e:16:
34:30:3f:b5:d5:99:a8:b8:4d:5e:4b:32:4d:82:a7:
93:7e:f4:b0:39:37:5a:eb:11:6f:3a:21:e3:22:91:
02:72:27:a1:da:c7:20:9a:ca:fc:f4:aa:16:b5:2b:
c7:6c:3b:6d:7a:61:25:67:bb:97:b1:b5:f7:be:48:
6f:44:8b:fb:04:b5:36:b8:f3:81:fd:a0:d8:d9:6c:
43:7c:f4:83:1d:e8:d7:f3:a7:07:b0:a8:15:ce:b3:
df:57:fa:a6:5c:df:d8:eb:03:31:06:20:2d:76:49:
40:7d:09:c3:ee:44:ba:fa:54:c5:88:54:16:7a:b5:
40:22:b2:47:e9:0a:17:75:32:c5:b7:99:7a:e9:d6:
b1:58:0f:62:1f:d1:ed:df:b0:3a:3a:4a:c4:2b:b9:
64:1c:2c:46:02:dd:59:a4:9f:3d:56:3f:dc:d7:7a:
da:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:86:3F:B0:75:2E:89:48:05:74:7A:AF:33:2A:1F:43:68:F9:F5:FC
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/SYY_sHUuiUgFdHqvMyofQ2j59fw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec0:508::/47
Signature Algorithm: sha256WithRSAEncryption
c2:36:14:fb:88:b2:1a:83:c9:16:1b:6e:6c:d4:e3:89:b4:e7:
8b:ce:67:e2:eb:ae:27:72:fa:13:af:81:82:be:a4:a3:18:99:
33:bd:38:11:3a:37:01:d0:bf:6a:82:f8:62:1c:8d:c8:46:ee:
8f:4f:3d:ea:82:9a:2e:74:5f:1e:5b:df:f6:ac:3c:d0:0f:4d:
09:07:8d:35:a7:f3:e2:a3:55:14:45:3e:cb:1d:aa:18:1b:f7:
c8:40:79:ff:05:bf:04:79:27:c8:18:22:0a:e4:af:47:42:5e:
a1:e2:c5:ad:f1:db:3d:c6:e8:78:d1:71:24:15:7e:72:10:db:
6f:ee:75:e3:51:f0:f4:23:ca:0b:48:48:4a:0b:39:8e:f9:7a:
72:5f:32:8e:31:7b:b1:41:8d:45:0c:ce:ae:a2:21:9a:08:ca:
f4:4c:76:29:d7:4f:36:f8:72:d0:ad:66:e5:48:4c:0b:8d:fa:
57:53:b9:9a:26:90:ef:ae:53:91:23:f1:ae:f4:9e:58:85:ea:
d7:e6:59:2f:d8:b0:63:c5:a9:ad:85:78:f5:bd:41:b9:c6:24:
4c:8b:99:ac:77:f9:57:e2:6d:aa:df:ca:d2:3d:38:d3:79:f1:
15:29:e3:7d:39:6a:ba:bd:8a:00:79:df:96:14:1b:57:ce:11:
54:e4:2a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 15:12:33 2024 by rpki-client on console-fra.rpki-client.org