Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/yGi1UbLbQVaZUKLdUOX-0mymjjU.roa
File: yGi1UbLbQVaZUKLdUOX-0mymjjU.roa (raw, json)
Hash identifier: 8gHuiiDtIcR+MfE7AGxiV5xBLOkE22/GhgPwMqQ0d7E=
Subject key identifier: C8:68:B5:51:B2:DB:41:56:99:50:A2:DD:50:E5:FE:D2:6C:A6:8E:35
Certificate issuer: /CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Certificate serial: 018F52BB48E2AB3CF162447BE7BEF661F2A0
Authority key identifier: 99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/yGi1UbLbQVaZUKLdUOX-0mymjjU.roa
Signing time: Tue 07 May 2024 11:05:56 +0000
ROA not before: Tue 07 May 2024 11:05:56 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51741
IP address blocks: 2a07:5900::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:52:bb:48:e2:ab:3c:f1:62:44:7b:e7:be:f6:61:f2:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99b8fd292c8a1b896b8752344a3da92378f2ae5a
Validity
Not Before: May 7 11:05:56 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c868b551b2db41569950a2dd50e5fed26ca68e35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f9:aa:49:69:96:14:82:d7:8e:a3:69:a7:54:
2a:d6:78:ef:06:d6:ee:09:b0:32:66:f4:cd:4e:4f:
63:0b:dd:da:9c:86:86:64:26:10:f2:84:8f:e1:a1:
d3:9d:36:4f:c2:a2:de:8e:11:5a:2f:97:2a:a9:5b:
77:9b:f8:69:08:e4:5a:23:70:f5:54:bb:74:52:d9:
e9:f5:80:4e:6f:cf:55:21:6d:32:e8:a0:e8:66:89:
78:91:ee:f7:99:37:be:8b:cd:07:5e:f4:1a:23:2d:
16:a4:7d:8f:86:56:b0:07:0f:c1:1c:69:1b:61:6a:
e7:1d:5c:38:fc:8f:10:5b:ce:26:b2:37:e4:d4:23:
c3:1d:77:cb:71:f5:90:ee:af:d4:72:65:54:8c:61:
fd:09:30:18:23:9f:fb:32:d1:6d:eb:fa:54:dd:f4:
52:b8:92:ec:97:e3:6f:50:14:f7:fb:a5:a8:17:eb:
75:1a:9d:a9:c4:82:4b:0e:64:cf:90:90:31:b3:6a:
fd:29:b3:05:6c:7b:95:4f:ec:bc:a8:f4:a1:b2:b7:
5c:b8:fc:ef:c1:49:95:ea:5b:a8:b9:a1:38:be:1e:
d1:f8:21:ca:c6:01:77:a3:6f:07:70:e8:c2:09:e8:
c5:06:19:1a:f8:3c:47:6e:42:14:a6:01:ce:de:cc:
2e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:68:B5:51:B2:DB:41:56:99:50:A2:DD:50:E5:FE:D2:6C:A6:8E:35
X509v3 Authority Key Identifier:
keyid:99:B8:FD:29:2C:8A:1B:89:6B:87:52:34:4A:3D:A9:23:78:F2:AE:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/yGi1UbLbQVaZUKLdUOX-0mymjjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a28ca6-af2f-40cd-b549-7eead1461a54/1/mbj9KSyKG4lrh1I0Sj2pI3jyrlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a07:5900::/29
Signature Algorithm: sha256WithRSAEncryption
4a:35:9d:2a:58:15:df:cb:d9:21:bf:d1:8a:0f:5d:9e:f4:50:
4a:ea:e5:a3:ed:1b:51:c4:3c:36:75:bd:96:9b:45:c9:58:b5:
cb:57:0e:f0:b3:a5:17:aa:b7:d9:a5:3e:f3:fa:8a:9a:07:43:
60:b5:b9:80:d9:8a:7b:3e:b1:79:2c:f6:4b:cb:3c:f0:46:f5:
48:31:22:4f:d4:a5:3a:29:1d:aa:4a:23:06:6e:fc:53:88:31:
22:dc:ce:3c:ac:15:3c:f9:95:46:dc:59:99:29:f6:00:d4:d5:
7e:00:ff:35:5b:c8:43:af:98:1a:b9:1e:a5:3e:43:37:a2:c1:
84:24:a3:54:24:0a:65:a7:1c:e8:dc:00:38:8c:32:54:4c:e3:
e4:e8:3c:85:18:1e:7c:f4:a6:da:52:13:4e:97:5b:67:b9:07:
3e:05:77:eb:96:0c:e7:0b:ac:87:4c:ca:92:85:04:0a:9f:63:
c1:71:1c:37:b2:34:b0:af:7d:43:1e:a1:5e:49:96:ba:9f:05:
8b:ac:cf:55:01:b8:a6:53:fb:3e:a2:02:57:6b:a5:8b:1c:e2:
c0:84:91:19:f9:85:a7:40:2f:e0:fb:f9:35:21:21:1b:ec:81:
b7:90:9d:47:2d:e1:94:54:dd:3c:0f:0a:8c:21:f7:3f:a4:90:
11:c9:da:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:41 2024 by rpki-client on console-fra.rpki-client.org