Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/YLyFWsA-yxSEEuFjhjBAImCI6Ew.roa
File: YLyFWsA-yxSEEuFjhjBAImCI6Ew.roa (raw, json)
Hash identifier: fuhWTleuvg35iDQF9YZj88wtUDJZ87CgwsJA8Ttk0LM=
Subject key identifier: 60:BC:85:5A:C0:3E:CB:14:84:12:E1:63:86:30:40:22:60:88:E8:4C
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 01917F6B95123E91E8AD8A35B1D25EE0FEA8
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/YLyFWsA-yxSEEuFjhjBAImCI6Ew.roa
Signing time: Fri 23 Aug 2024 13:27:22 +0000
ROA not before: Fri 23 Aug 2024 13:27:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214339
IP address blocks: 2a07:6d40:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:7f:6b:95:12:3e:91:e8:ad:8a:35:b1:d2:5e:e0:fe:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Aug 23 13:27:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60bc855ac03ecb148412e163863040226088e84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:46:ac:04:77:1f:5b:63:3d:f7:e3:b8:60:0e:
48:d2:12:e5:5f:d1:6c:e7:69:6d:ce:7a:16:55:fe:
e9:d5:3f:dc:dd:c3:d9:85:c7:89:4e:39:85:b4:a4:
3e:2c:cc:c3:d2:08:cd:78:e5:f2:3c:84:be:7f:20:
cc:5a:23:ca:c7:3d:2e:92:3b:8d:93:20:65:e0:ca:
90:e9:48:b9:ab:e2:f3:af:70:9c:34:67:85:43:f7:
32:6c:2c:0c:d9:e3:46:a9:74:f5:ce:df:08:ab:63:
c0:12:d1:2b:50:72:92:57:1a:44:ce:08:91:8b:f9:
1d:e7:cb:fd:8b:f6:35:e5:f7:40:3e:4d:85:91:0a:
a5:fc:e7:aa:61:2a:c2:59:0c:3a:e2:cb:cc:8f:be:
7f:05:45:25:31:50:2f:0a:de:c5:03:26:62:66:5c:
91:02:8b:53:b1:a4:6d:0e:1f:ac:98:b2:b1:9e:87:
b6:fb:8f:d0:a6:ff:63:20:60:8c:77:25:fc:c7:21:
6f:2e:c8:6c:18:33:49:81:5a:9e:a4:af:ce:ff:a8:
20:38:a3:a3:40:53:db:5d:51:5d:8d:07:bc:73:6b:
e2:66:1c:3c:a9:dc:65:15:67:f8:e7:b9:7a:36:5d:
a8:33:34:9a:f9:a4:91:a0:34:00:19:8d:90:17:a8:
2c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:BC:85:5A:C0:3E:CB:14:84:12:E1:63:86:30:40:22:60:88:E8:4C
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/YLyFWsA-yxSEEuFjhjBAImCI6Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:6d40:2::/48
Signature Algorithm: sha256WithRSAEncryption
8d:bd:3f:87:6d:a7:87:cc:06:a5:da:70:11:47:92:8d:de:10:
98:35:2e:eb:e6:6e:b2:41:4f:b8:bd:3f:12:e4:73:ed:f2:2c:
6d:cc:3b:ac:03:db:75:b3:1c:e9:65:32:6b:27:7c:d3:17:0b:
21:f6:9b:a3:0b:86:81:a7:79:dc:e1:f9:10:72:1f:d5:ea:6c:
de:a8:7c:bd:ed:f8:ca:d9:81:b1:23:68:ed:06:c0:36:ea:75:
2b:1a:35:08:80:75:96:25:c3:5e:3a:0f:ef:32:55:d7:32:c6:
3c:e8:f5:dc:99:d4:f2:14:41:0d:bb:02:19:61:da:cd:30:83:
69:8e:c6:0b:0e:e7:03:2a:6e:11:65:39:15:9f:7b:89:0c:50:
30:67:2d:4e:9d:f9:db:f5:ac:5e:87:fa:b2:59:00:16:57:62:
30:2a:80:b7:a0:bd:a9:3d:98:23:1d:66:fe:05:52:5b:59:4e:
90:61:89:ae:1e:9c:e1:b8:ba:ac:a5:c9:25:2e:f9:1d:30:42:
5b:f7:51:0d:d9:37:1c:22:ce:79:5f:7d:ed:57:20:89:af:3e:
31:a1:d4:7a:83:f5:f5:06:c7:e9:e0:e6:c2:fe:81:9f:2b:d3:
22:d6:26:90:e5:7d:5a:1c:ba:c0:cd:cb:dc:36:91:ab:42:ea:
52:40:6d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:59:49 2024 by rpki-client on console-fra.rpki-client.org