Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/YUNL7anXYDAmlYh-Xu99tAX0FoY.roa
File: YUNL7anXYDAmlYh-Xu99tAX0FoY.roa (raw, json)
Hash identifier: mfrWYdJwkcNjO8LFsMvinfLEZ8w47UDLBrTKTLkyCFs=
Subject key identifier: 61:43:4B:ED:A9:D7:60:30:26:95:88:7E:5E:EF:7D:B4:05:F4:16:86
Certificate issuer: /CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Certificate serial: 018CC72722A9C901E1CC7562C8D751FF4F12
Authority key identifier: 33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/YUNL7anXYDAmlYh-Xu99tAX0FoY.roa
Signing time: Mon 01 Jan 2024 22:31:19 +0000
ROA not before: Mon 01 Jan 2024 22:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39345
IP address blocks: 195.178.102.0/23 maxlen: 23
2001:678:164::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.mft
rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 10:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:22:a9:c9:01:e1:cc:75:62:c8:d7:51:ff:4f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3372f5d118abd1291ae248e6c69d64a99a9aef06
Validity
Not Before: Jan 1 22:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=61434beda9d760302695887e5eef7db405f41686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bb:a6:c9:09:40:3d:fc:0a:ac:cb:2f:c7:9b:
f1:19:1c:ff:cf:68:ab:fb:71:b3:59:ae:0d:e2:8b:
54:f0:bf:7a:ea:a8:4b:94:df:b3:32:5f:93:8f:75:
ed:2f:44:85:0b:1a:77:47:82:7b:68:45:4b:cb:07:
9c:e2:b7:ac:46:98:a8:b4:34:43:c8:bf:fe:28:0c:
f1:fb:90:e3:5f:d3:33:9c:d0:6a:22:9d:db:eb:5e:
2d:f3:d1:47:fd:83:7d:96:af:63:9c:81:7d:a3:a1:
a8:40:48:4e:cd:a0:41:e2:c0:18:ec:fc:59:8a:4d:
f0:3d:c7:84:8c:df:9a:70:32:57:97:4a:1d:c5:06:
7f:3c:50:9c:3d:09:57:78:2c:de:df:70:76:de:3b:
01:60:84:fe:1b:9d:51:41:5e:cc:b6:de:4b:60:78:
5b:35:e4:29:f7:f7:e8:53:a7:9b:5a:49:e6:e5:65:
11:58:5b:c7:a0:b1:1b:9e:5d:2c:de:2c:d3:1f:d3:
ff:45:84:71:9a:43:93:ae:f7:58:1a:07:1e:17:92:
c6:0a:0f:99:07:4c:45:11:6d:cf:33:9a:5f:c3:e4:
94:89:2b:5c:c3:e4:37:1e:99:c2:97:9a:b6:18:9e:
81:87:a4:a5:4d:a6:86:0c:63:fb:ba:c5:cb:3f:39:
33:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:43:4B:ED:A9:D7:60:30:26:95:88:7E:5E:EF:7D:B4:05:F4:16:86
X509v3 Authority Key Identifier:
keyid:33:72:F5:D1:18:AB:D1:29:1A:E2:48:E6:C6:9D:64:A9:9A:9A:EF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M3L10Rir0Ska4kjmxp1kqZqa7wY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/YUNL7anXYDAmlYh-Xu99tAX0FoY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a2ddad-7d4d-41cb-a693-d2d9241ec5db/1/M3L10Rir0Ska4kjmxp1kqZqa7wY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.178.102.0/23
IPv6:
2001:678:164::/48
Signature Algorithm: sha256WithRSAEncryption
8d:3f:79:6a:b5:e0:c6:30:7d:98:27:74:c1:42:5c:1e:75:9f:
0d:e3:44:ac:98:b3:a5:4c:3e:aa:cf:41:23:9a:63:da:88:c0:
d2:d9:8a:75:29:33:cb:5e:1e:ac:e8:3e:03:54:46:e4:e0:e4:
d5:58:cd:e9:be:a9:31:e4:9a:f3:2a:aa:f0:dc:bc:17:08:6a:
07:ad:54:f8:4f:8d:ae:7c:dc:bc:99:be:a0:79:ca:98:9e:2d:
8d:8f:8e:44:8e:2c:5f:07:13:7c:ae:34:a1:fe:d2:53:41:b0:
64:62:28:b8:84:7d:7f:47:0b:7f:b8:fb:e4:b0:f5:33:a6:9f:
c5:a5:e3:f5:00:ab:be:d0:4b:e3:7e:81:e9:fb:76:60:bf:46:
b0:57:3a:0e:91:46:9a:b6:0f:a9:58:c7:05:2f:5f:f5:aa:05:
e7:a1:90:32:11:1e:68:c2:c6:e2:4b:2f:80:aa:78:97:cf:99:
58:31:f9:d7:e4:da:b9:bf:85:67:f1:b3:ce:f4:04:f1:21:41:
30:fb:db:80:00:e4:9c:19:4f:12:36:9d:4b:13:f5:03:59:0d:
bb:7e:c4:ac:7e:72:4e:b7:5d:12:67:a9:a1:1d:4e:92:3f:a7:
bd:4a:44:c4:68:76:6e:8b:c5:36:6e:dd:42:bc:dd:58:65:45:
1f:56:09:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 17:38:27 2024 by rpki-client on console-ams.rpki-client.org