Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/ylMmY43oeghKjj3RKHuH7j6LXbM.roa
File: ylMmY43oeghKjj3RKHuH7j6LXbM.roa (raw, json)
Hash identifier: ok1VDnrCvMLd8kk8Q7X1JEWU/JE1UvnncexK6sK0Qgk=
Subject key identifier: CA:53:26:63:8D:E8:7A:08:4A:8E:3D:D1:28:7B:87:EE:3E:8B:5D:B3
Certificate issuer: /CN=62927b36b138f086358938e3acfda4638e56a792
Certificate serial: 018CC2DB1CBCF7A14300E81D6C749BBEEB06
Authority key identifier: 62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/ylMmY43oeghKjj3RKHuH7j6LXbM.roa
Signing time: Mon 01 Jan 2024 02:29:48 +0000
ROA not before: Mon 01 Jan 2024 02:29:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 2a10:20c7:ff00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 03 May 2024 16:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:db:1c:bc:f7:a1:43:00:e8:1d:6c:74:9b:be:eb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62927b36b138f086358938e3acfda4638e56a792
Validity
Not Before: Jan 1 02:29:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca5326638de87a084a8e3dd1287b87ee3e8b5db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:10:e0:1e:86:42:cc:b8:e9:cd:d3:0f:27:6d:
d3:81:a8:62:24:23:f6:8e:cd:99:a4:04:1e:5b:13:
55:cb:77:48:06:75:2c:a3:5a:d6:de:ea:4f:e4:9e:
c4:f1:ef:4f:a5:44:8d:41:3a:32:64:6a:88:ae:aa:
b6:4d:66:61:f1:88:03:bf:cc:40:c3:82:dd:5b:3e:
a2:f2:9a:0b:e6:da:97:47:1c:52:c1:9a:7e:59:e5:
1e:59:cc:e3:a4:cd:c5:22:8d:74:4c:57:7f:42:c8:
4f:9a:52:af:26:36:a8:f9:24:d6:3e:a2:ef:f6:63:
12:a7:e7:78:80:6c:6e:c3:6b:52:84:ba:3b:77:f5:
0c:16:43:c9:13:37:8e:2c:d2:c3:02:b6:d9:15:74:
11:84:ad:71:1b:99:6f:b1:30:41:ab:59:b5:6c:00:
22:90:03:e3:8a:b4:c8:06:7c:9a:a2:9f:37:6b:b0:
12:b8:74:75:c0:23:62:1f:8e:db:4c:f7:db:25:4e:
2f:02:b9:c4:a8:40:85:bd:9e:32:71:de:cf:3b:0e:
f6:79:c3:a2:04:50:f8:83:8d:fe:b2:16:41:28:a2:
62:8d:44:25:55:1a:84:78:82:3a:bc:0f:f5:b4:a2:
c4:b4:86:e6:61:84:22:e5:c7:30:b8:3e:5f:e1:8c:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:53:26:63:8D:E8:7A:08:4A:8E:3D:D1:28:7B:87:EE:3E:8B:5D:B3
X509v3 Authority Key Identifier:
keyid:62:92:7B:36:B1:38:F0:86:35:89:38:E3:AC:FD:A4:63:8E:56:A7:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YpJ7NrE48IY1iTjjrP2kY45Wp5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/ylMmY43oeghKjj3RKHuH7j6LXbM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8d241f-71ea-4a1b-96ea-a99c7ee5c284/1/YpJ7NrE48IY1iTjjrP2kY45Wp5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:20c7:ff00::/40
Signature Algorithm: sha256WithRSAEncryption
4c:7b:1b:32:80:98:97:66:33:9d:79:7d:a1:0d:1a:57:91:33:
0a:53:32:4c:3f:ac:0c:08:dd:f9:73:2c:eb:3d:9e:13:08:de:
47:8e:fe:99:49:e3:05:a4:92:fa:a6:80:5b:8b:72:a6:cc:d0:
cd:5f:cd:68:29:85:78:e8:bc:42:24:0f:2d:94:6f:4a:a7:f3:
40:44:cf:8a:10:de:ac:aa:30:31:3e:e9:d0:24:ef:5c:e1:ea:
55:af:f8:03:1d:3a:03:23:5a:61:fa:64:9c:b6:09:35:bf:6b:
23:1f:09:d6:a7:1b:db:ff:16:e8:c0:cb:db:7f:0b:4e:ee:8c:
14:01:1a:c8:8e:8a:35:05:33:98:26:08:c6:57:1c:b0:28:a0:
70:d1:65:1b:8a:e8:92:5a:b0:2a:64:44:bf:78:1a:a8:bc:4b:
bb:9f:be:76:7c:89:7d:46:de:f1:d7:15:b2:97:48:76:9e:fa:
60:b3:80:73:d3:f3:31:4c:b6:62:0c:8c:b4:b5:10:0a:48:41:
80:db:78:46:6d:80:0c:4e:9e:17:fa:00:43:76:89:2f:38:4b:
43:21:ab:a4:b1:09:e9:0b:ba:ce:0b:4e:50:60:40:33:b3:70:
f4:b8:f2:52:c1:f0:bb:de:33:33:c3:ea:bc:b3:c5:da:2a:22:
32:41:d9:e4
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYzC2xy896FDAOgdbHSbvusGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyOTI3YjM2YjEzOGYwODYzNTg5MzhlM2FjZmRhNDYzOGU1
NmE3OTIwHhcNMjQwMTAxMDIyOTQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTUzMjY2MzhkZTg3YTA4NGE4ZTNkZDEyODdiODdlZTNlOGI1ZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hDgHoZCzLjpzdMPJ23TgahiJCP2
js2ZpAQeWxNVy3dIBnUso1rW3upP5J7E8e9PpUSNQToyZGqIrqq2TWZh8YgDv8xA
w4LdWz6i8poL5tqXRxxSwZp+WeUeWczjpM3FIo10TFd/QshPmlKvJjao+STWPqLv
9mMSp+d4gGxuw2tShLo7d/UMFkPJEzeOLNLDArbZFXQRhK1xG5lvsTBBq1m1bAAi
kAPjirTIBnyaop83a7ASuHR1wCNiH47bTPfbJU4vArnEqECFvZ4ycd7POw72ecOi
BFD4g43+shZBKKJijUQlVRqEeII6vA/1tKLEtIbmYYQi5ccwuD5f4Yzv2QIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFMpTJmON6HoISo490Sh7h+4+i12zMB8GA1UdIwQY
MBaAFGKSezaxOPCGNYk446z9pGOOVqeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEt
YTk5YzdlZTVjMjg0LzEveWxNbVk0M29lZ2hLamozUktIdUg3ajZMWGJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZDI0MWYtNzFlYS00YTFiLTk2ZWEtYTk5YzdlZTVjMjg0
LzEvWXBKN05yRTQ4SVkxaVRqanJQMmtZNDVXcDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAKhAgx/8w
DQYJKoZIhvcNAQELBQADggEBAEx7GzKAmJdmM515faENGleRMwpTMkw/rAwI3flz
LOs9nhMI3keO/plJ4wWkkvqmgFuLcqbM0M1fzWgphXjovEIkDy2Ub0qn80BEz4oQ
3qyqMDE+6dAk71zh6lWv+AMdOgMjWmH6ZJy2CTW/ayMfCdanG9v/FujAy9t/C07u
jBQBGsiOijUFM5gmCMZXHLAooHDRZRuK6JJasCpkRL94Gqi8S7ufvnZ8iX1G3vHX
FbKXSHae+mCzgHPT8zFMtmIMjLS1EApIQYDbeEZtgAxOnhf6AEN2iS84S0Mhq6Sx
CekLus4LTlBgQDOzcPS48lLB8LveMzPD6ryzxdoqIjJB2eQ=
-----END CERTIFICATE-----
Generated at Thu May 2 21:17:22 2024 by rpki-client on console-ams.rpki-client.org