Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/bRy9p1AA3vND0uI0nZIv9kAUwRA.roa
File: bRy9p1AA3vND0uI0nZIv9kAUwRA.roa (raw, json)
Hash identifier: 6NZwiciL3Vf/PYOcdtXyFCvBOSzqJbVXuDL17r7gRCs=
Subject key identifier: 6D:1C:BD:A7:50:00:DE:F3:43:D2:E2:34:9D:92:2F:F6:40:14:C1:10
Certificate issuer: /CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Certificate serial: 018CC5DBEA7735A7C53C5D1A659ACE2FB561
Authority key identifier: CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/bRy9p1AA3vND0uI0nZIv9kAUwRA.roa
Signing time: Mon 01 Jan 2024 16:29:32 +0000
ROA not before: Mon 01 Jan 2024 16:29:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12180
IP address blocks: 217.17.144.0/20 maxlen: 20
81.91.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:db:ea:77:35:a7:c5:3c:5d:1a:65:9a:ce:2f:b5:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cafaf6fa25b8d2acb1b44dcdd55437aba2226e9e
Validity
Not Before: Jan 1 16:29:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d1cbda75000def343d2e2349d922ff64014c110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:f5:b6:65:43:c6:d6:e3:8c:53:5f:7f:7c:
3a:85:64:d5:6c:82:7c:81:6a:48:8a:b7:28:4f:f7:
09:65:80:22:ec:cd:05:e5:41:c6:77:b3:9a:bf:c3:
af:f7:f9:b5:07:7f:a7:25:6b:8a:e7:ab:6b:35:7a:
6b:df:7d:a0:1e:a3:82:2b:92:9f:02:da:7d:fb:d9:
c9:c2:bc:a3:38:18:26:f0:11:7f:9b:b1:15:65:22:
94:01:c1:ae:ba:eb:7c:6e:72:cf:af:e0:24:04:b5:
80:b4:b3:18:08:aa:30:69:fa:6a:ae:1d:1c:fe:35:
c8:47:98:d7:b6:6a:0a:f1:47:81:76:07:f1:71:64:
d9:3c:e9:fa:57:dc:0c:53:e9:55:d3:73:3b:7b:f3:
1d:f5:6c:f6:c9:28:34:54:87:1a:bd:18:46:93:3b:
33:89:50:f1:14:c9:de:90:f2:10:63:80:46:fd:3a:
bf:3b:f7:90:d6:2e:9e:da:43:dd:19:81:ad:06:d9:
67:2d:74:5b:1b:84:60:d9:98:e0:2a:d3:33:18:ac:
3a:00:6c:e5:b5:29:ef:31:73:2e:51:de:9e:5c:db:
e5:44:cd:b4:98:e0:8d:02:44:9d:20:d4:85:0c:d7:
c0:1b:10:e4:e5:7d:39:ce:53:5c:b8:38:ca:f3:d1:
56:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1C:BD:A7:50:00:DE:F3:43:D2:E2:34:9D:92:2F:F6:40:14:C1:10
X509v3 Authority Key Identifier:
keyid:CA:FA:F6:FA:25:B8:D2:AC:B1:B4:4D:CD:D5:54:37:AB:A2:22:6E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yvr2-iW40qyxtE3N1VQ3q6Iibp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/bRy9p1AA3vND0uI0nZIv9kAUwRA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9c6507-9d7f-42c7-9d12-0e35001778a5/1/yvr2-iW40qyxtE3N1VQ3q6Iibp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.91.112.0/20
217.17.144.0/20
Signature Algorithm: sha256WithRSAEncryption
95:d6:03:e1:05:47:38:2b:0e:10:94:b3:aa:1f:e7:83:c0:54:
b4:ad:09:f7:b7:96:6c:ef:77:74:d3:61:26:a1:52:54:1f:cd:
eb:de:e2:c2:dc:4a:02:07:fa:95:0a:ba:e7:88:f4:2a:a1:c4:
15:17:80:30:0d:43:10:a6:67:72:8c:f2:aa:92:0d:45:ab:35:
60:07:3b:bf:63:d2:7b:c5:72:46:9b:9a:6f:4e:83:ed:84:f4:
d5:ea:23:77:40:46:bf:df:fe:fe:14:ac:61:22:69:53:7b:54:
09:4f:69:b9:76:25:d1:ab:98:5e:05:f9:97:64:f6:32:00:9f:
df:0c:77:90:70:e3:b5:6c:85:fd:dd:ec:eb:54:45:ef:5a:0b:
23:98:8a:8a:51:a7:b2:5a:e1:92:87:75:f2:d8:fe:b1:8d:52:
13:9c:1a:f4:b4:7d:3f:88:4c:70:e8:82:1f:4a:e1:89:1c:88:
73:ff:65:26:53:9c:d6:50:73:96:aa:20:69:49:fd:ed:b5:ca:
64:91:f2:86:cd:10:92:83:2c:ed:ca:96:ba:75:c3:ce:30:78:
a2:49:98:2f:18:1b:5a:79:5c:7a:5c:eb:4e:2d:16:06:52:b3:
b9:ba:b0:21:6b:5a:aa:3c:f0:b0:51:04:3f:88:3e:a9:8a:3a:
4f:89:65:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:40:17 2024 by rpki-client on console-ams.rpki-client.org