Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/YyxNyhqW2Yl2CEK8mTbvu1FOeB8.roa
File: YyxNyhqW2Yl2CEK8mTbvu1FOeB8.roa (raw, json)
Hash identifier: CJ2CEFaGW41APIXuWH/1LYc9CtlFTZ0r0/L59mCG95M=
Subject key identifier: 63:2C:4D:CA:1A:96:D9:89:76:08:42:BC:99:36:EF:BB:51:4E:78:1F
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 0191C1409C6C2649CD07A5C5DAE532E13776
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/YyxNyhqW2Yl2CEK8mTbvu1FOeB8.roa
Signing time: Thu 05 Sep 2024 08:15:22 +0000
ROA not before: Thu 05 Sep 2024 08:15:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31104
IP address blocks: 62.129.2.0/23 maxlen: 23
185.100.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.mft
rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c1:40:9c:6c:26:49:cd:07:a5:c5:da:e5:32:e1:37:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Sep 5 08:15:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=632c4dca1a96d989760842bc9936efbb514e781f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:e3:0e:2b:3e:f0:1d:22:2e:d2:26:f1:cf:
23:18:52:9f:ba:fe:90:2c:66:46:1e:be:a4:cb:c4:
37:2b:19:86:d1:7d:bc:f0:73:89:00:48:8d:26:4c:
e5:4d:01:af:3c:9f:bd:ce:ff:14:57:05:56:4e:1c:
b2:67:b8:5c:9c:a2:41:c8:ca:e0:08:35:c9:46:02:
4c:64:79:17:8f:5d:4c:85:31:ca:9a:89:60:7d:e4:
bc:ef:61:a7:8b:da:01:ac:eb:63:46:18:a0:c2:14:
1e:33:d4:64:27:8f:48:f7:ea:5a:20:fc:43:b1:07:
36:2d:d1:9e:c7:0e:da:e8:ab:f2:59:17:e9:a9:fd:
c8:94:ee:10:0e:28:d0:fd:5f:b1:0d:58:a2:4e:c0:
86:15:a7:7e:07:a0:5c:30:43:4b:fc:83:7d:1e:bd:
6f:10:0a:d5:c7:fb:ea:f7:ab:50:96:6c:62:94:6e:
0d:5d:24:b5:80:99:01:15:7a:6d:74:35:6d:d0:1e:
6a:4d:f7:41:60:e7:cd:ff:19:07:c4:e5:bf:d4:cb:
89:25:aa:91:d7:29:b9:80:ec:78:18:9b:d3:69:78:
a3:05:78:67:58:6f:85:7a:ba:3d:ea:09:73:60:a0:
22:27:29:16:c3:5e:c2:71:4e:c1:1c:d7:76:52:34:
ce:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2C:4D:CA:1A:96:D9:89:76:08:42:BC:99:36:EF:BB:51:4E:78:1F
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/YyxNyhqW2Yl2CEK8mTbvu1FOeB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.129.2.0/23
185.100.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:71:21:9b:7a:6d:0c:18:aa:eb:34:68:a4:56:f6:03:16:f9:
e0:1f:93:da:9d:2d:d7:24:fd:09:35:0f:05:9d:83:37:39:aa:
96:65:03:08:28:d3:d4:7d:28:3e:9c:71:83:e9:d1:8a:a4:60:
3d:72:26:59:1c:1b:eb:3d:77:9b:c6:55:fb:d6:7e:a1:fb:19:
15:4b:44:3c:4a:be:9d:cb:d4:9a:a1:83:7b:2c:c3:2f:d4:a6:
b1:69:81:3f:a0:56:4b:c0:76:0b:12:aa:e0:2a:9b:c9:32:fd:
80:df:19:1d:c1:6f:9e:fe:1f:ee:18:40:02:75:25:c0:37:98:
6b:b0:bf:6c:29:44:18:e5:c6:74:d7:fe:03:4a:85:a5:7c:c9:
0d:f5:aa:be:3e:88:d3:2b:70:76:db:e1:1f:fd:ad:04:8f:b0:
3d:cc:cf:9d:b0:a6:82:99:b2:1d:36:dd:a3:80:cc:80:99:cd:
0a:12:fc:a4:ad:d6:0e:ed:fa:49:00:74:60:9d:72:40:8b:44:
62:1f:d3:7d:78:5c:31:7f:1f:ea:9a:5e:72:c3:b4:da:1c:cb:
c0:56:9b:8e:40:81:27:a4:d9:90:cf:e2:1a:55:a0:c7:76:cb:
43:17:f1:70:f1:c1:8e:35:7f:a1:70:26:71:e4:3e:6d:2e:79:
e6:15:7e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:11:36 2024 by rpki-client on console-ams.rpki-client.org