Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/YttsS37YQPuR2CIPOiyxKeUS1nE.roa
File: YttsS37YQPuR2CIPOiyxKeUS1nE.roa (raw, json)
Hash identifier: C11X+Mdgid9kb0w3F4Sh8rqhEsW+WHO1H540j+O0XCw=
Subject key identifier: 62:DB:6C:4B:7E:D8:40:FB:91:D8:22:0F:3A:2C:B1:29:E5:12:D6:71
Certificate issuer: /CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Certificate serial: 0192E3F95671A58EA969B45B45134E438B2D
Authority key identifier: 31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/YttsS37YQPuR2CIPOiyxKeUS1nE.roa
Signing time: Thu 31 Oct 2024 19:07:01 +0000
ROA not before: Thu 31 Oct 2024 19:07:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209641
IP address blocks: 2a0e:4587::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 12:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e3:f9:56:71:a5:8e:a9:69:b4:5b:45:13:4e:43:8b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=310b05251378994cfa8088d23b6eeed4e9e6ab08
Validity
Not Before: Oct 31 19:07:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62db6c4b7ed840fb91d8220f3a2cb129e512d671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:be:26:63:c3:93:9b:07:90:76:86:c2:16:8a:
05:a5:e3:85:df:d7:db:43:74:ac:f9:cc:05:8c:79:
93:9f:15:8d:05:b6:03:bb:c0:04:e5:dd:cf:67:c1:
f5:62:42:ca:65:94:4d:bd:a7:28:93:68:3a:e1:e8:
71:82:ab:6e:3d:f8:06:93:73:17:6a:df:c8:44:7a:
06:9c:a4:da:e2:63:fe:4c:47:9d:3b:eb:56:75:64:
ee:c0:d9:a1:f0:f8:1b:59:73:35:43:68:50:35:f3:
ab:a6:89:38:5e:ca:f3:3d:6d:94:ec:e7:5f:45:ee:
e3:a2:0f:1b:7d:db:95:75:06:30:8a:cc:c1:1f:8a:
fb:db:42:a1:13:d1:e6:65:f7:88:91:f4:74:15:22:
8b:35:85:60:f1:ec:cd:67:86:9d:9a:26:6d:b3:72:
94:c3:ae:32:11:a6:5a:f4:39:55:ab:e6:97:53:d2:
90:e2:47:5e:50:69:c3:86:e3:52:65:f2:ec:19:bc:
40:a4:0d:47:c9:e4:3a:ee:ae:3f:8d:63:60:b3:dd:
a9:67:a3:17:c4:bb:24:3a:8d:a5:40:b4:89:d2:fc:
3c:6f:83:29:da:ee:f8:1c:87:c2:50:1f:fb:f4:48:
f0:fa:59:fe:f9:32:fe:ce:3b:dc:d3:7f:e0:05:fe:
c9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DB:6C:4B:7E:D8:40:FB:91:D8:22:0F:3A:2C:B1:29:E5:12:D6:71
X509v3 Authority Key Identifier:
keyid:31:0B:05:25:13:78:99:4C:FA:80:88:D2:3B:6E:EE:D4:E9:E6:AB:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MQsFJRN4mUz6gIjSO27u1Onmqwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/YttsS37YQPuR2CIPOiyxKeUS1nE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/771486-bee3-424a-b341-7cfdf2df6632/1/MQsFJRN4mUz6gIjSO27u1Onmqwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4587::/32
Signature Algorithm: sha256WithRSAEncryption
26:73:a6:78:fa:7f:b8:46:de:33:3e:cf:e7:70:1f:0e:ea:3d:
1d:cc:1e:9d:a9:e5:f3:c1:83:a0:d7:14:e3:04:29:ea:12:81:
9c:bd:27:0b:20:55:08:0f:83:bd:dd:be:ca:f0:3d:01:1f:b6:
8f:02:12:e2:96:ea:4b:5e:98:43:9a:7c:8c:92:c4:f8:fd:51:
f9:94:12:70:a4:a6:e6:37:cc:e5:26:e1:fd:83:c9:1d:58:cf:
8d:d9:3c:2b:a5:1a:d7:f7:5b:7e:3e:8f:3c:e2:40:56:59:5b:
37:9e:03:4d:95:4a:52:1c:1a:a4:4e:84:de:33:2e:9d:09:9c:
66:c7:12:53:f4:e4:1d:8f:9d:a4:88:82:6a:f0:33:77:10:67:
4a:1a:de:ba:5d:85:7d:50:8a:81:5b:7b:cf:ab:39:5a:9e:8a:
62:85:1b:57:83:1d:30:59:b5:70:fd:02:37:fb:0f:3a:d7:05:
ca:b6:25:dc:b5:8a:a3:e7:1b:f1:02:2a:57:cb:55:d2:c0:6c:
86:c4:b9:31:1b:3d:e1:3d:28:68:eb:7e:c0:7a:66:6c:d7:56:
06:a3:13:13:28:47:9c:b9:76:b3:bb:ad:4a:57:d6:97:df:7d:
47:8f:75:2f:32:f9:91:c9:e1:0f:b1:f0:4f:e1:55:bb:36:05:
e7:13:5b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:21:18 2024 by rpki-client on console-fra.rpki-client.org