Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/by0UOno_Q6jR8ZDPrInUVJJb9rU.roa
File: by0UOno_Q6jR8ZDPrInUVJJb9rU.roa (raw, json)
Hash identifier: VpjjA4j1cYOeyFlo4m/Ty9wwE31eZds5SxSxGGmrJhg=
Subject key identifier: 6F:2D:14:3A:7A:3F:43:A8:D1:F1:90:CF:AC:89:D4:54:92:5B:F6:B5
Certificate issuer: /CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Certificate serial: 019031692C6AE61F3992932B9A52F23C6072
Authority key identifier: 60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/by0UOno_Q6jR8ZDPrInUVJJb9rU.roa
Signing time: Wed 19 Jun 2024 16:51:34 +0000
ROA not before: Wed 19 Jun 2024 16:51:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216054
IP address blocks: 81.30.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:31:69:2c:6a:e6:1f:39:92:93:2b:9a:52:f2:3c:60:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60e773dbfb75957f0cc5c863fcce76ca58a39308
Validity
Not Before: Jun 19 16:51:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6f2d143a7a3f43a8d1f190cfac89d454925bf6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e1:94:db:61:55:97:5c:7c:24:23:f1:4d:44:
f9:a6:89:d9:d8:8b:cd:52:f2:3b:1f:7a:b9:00:bb:
52:7d:44:dd:85:73:a2:3f:67:74:f3:b3:07:f1:5f:
a0:8b:e1:16:7f:06:e9:d0:bb:d0:f7:55:92:1e:02:
ff:26:b9:17:37:b8:07:ae:2e:75:d2:25:9a:5b:ad:
ec:22:2b:df:c8:bb:94:ec:b5:22:02:e8:fc:5c:88:
0f:71:88:9c:43:67:75:ae:aa:05:4b:ff:e8:f5:ef:
c2:36:a4:61:0e:83:d9:e6:e2:6b:f6:f6:1f:6a:3c:
89:70:47:2c:04:ba:29:1f:c0:7e:09:05:16:2a:3c:
4c:43:dc:66:9b:7e:3f:fe:91:85:2f:8c:f5:a7:ec:
69:de:0a:56:6a:32:f5:e5:f8:16:e1:d7:1e:bb:71:
e5:ce:69:67:7f:8c:25:66:ea:53:f4:a4:1c:d5:16:
d2:82:6a:1c:2c:ba:86:ed:59:f6:26:35:6a:28:05:
66:51:cb:a0:81:4c:d8:64:26:a2:8b:0b:7b:69:3d:
85:95:c8:d5:c8:92:15:9b:36:19:60:d0:45:51:a9:
91:29:03:4d:14:e2:96:82:3e:3c:1d:b8:7a:49:e4:
19:fb:37:b9:2d:17:3c:46:86:d8:3b:13:7a:78:a0:
a3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:2D:14:3A:7A:3F:43:A8:D1:F1:90:CF:AC:89:D4:54:92:5B:F6:B5
X509v3 Authority Key Identifier:
keyid:60:E7:73:DB:FB:75:95:7F:0C:C5:C8:63:FC:CE:76:CA:58:A3:93:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOdz2_t1lX8Mxchj_M52ylijkwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/by0UOno_Q6jR8ZDPrInUVJJb9rU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/c99d6f-82ee-4768-805b-476d7e62cef6/1/YOdz2_t1lX8Mxchj_M52ylijkwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.30.98.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:06:43:cf:fa:b0:65:06:e6:ef:37:7c:3f:d1:d6:9c:94:c1:
4c:00:81:d7:23:36:f8:b7:44:5e:b8:0f:1b:0e:02:8f:d3:64:
16:9b:c5:2b:b0:18:c0:00:39:78:f2:5d:c4:7c:29:a2:ca:2c:
fb:27:0d:45:6a:4e:a3:be:55:37:31:1e:d5:f9:d2:3c:8b:0c:
3b:7b:c2:c8:52:dd:b7:3d:a0:ed:5f:f4:91:df:4e:c9:d4:8a:
ac:82:35:bb:0a:b0:a3:05:3b:fc:19:85:91:7d:11:dd:17:e4:
42:06:3d:ea:4e:2b:0a:d2:95:12:26:c0:c9:6f:f2:c6:cc:2d:
58:cc:7d:c8:3e:ec:43:36:d2:1c:1b:69:76:9f:47:8b:a2:40:
77:4d:4c:5e:c4:08:18:e9:c1:f9:ca:2f:a9:67:41:86:72:38:
cb:2d:d5:06:9b:7d:75:ef:0b:e8:2c:36:f7:49:e7:42:f3:8c:
86:45:40:d9:0a:a4:17:55:ca:fc:b2:6a:9f:49:31:16:03:52:
2d:29:f0:b9:a1:a7:ef:28:80:6d:76:5f:19:1a:ce:f0:4c:8e:
6b:23:df:8a:88:14:37:2d:db:bc:f4:78:99:5f:55:dc:67:e5:
cd:6f:09:85:5d:05:62:a8:64:3d:79:a5:91:4f:03:eb:e9:0b:
bf:f0:74:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 14:43:51 2024 by rpki-client on console-ams.rpki-client.org