Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/OY1xnvRUe2F6zgLvMIv4a33I4Mc.roa
File: OY1xnvRUe2F6zgLvMIv4a33I4Mc.roa (raw, json)
Hash identifier: 6nyDXB5KOfAHCWHg4IC2zVw+7pK16zUE2YjJHz5KwOk=
Subject key identifier: 39:8D:71:9E:F4:54:7B:61:7A:CE:02:EF:30:8B:F8:6B:7D:C8:E0:C7
Certificate issuer: /CN=62efff88bf665ec86a9e356b79d06ba5940c383c
Certificate serial: 018FCA730931F7BBF63F1FEE5468DF4A7F21
Authority key identifier: 62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/OY1xnvRUe2F6zgLvMIv4a33I4Mc.roa
Signing time: Thu 30 May 2024 17:01:27 +0000
ROA not before: Thu 30 May 2024 17:01:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48678
IP address blocks: 213.254.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/Yu__iL9mXshqnjVredBrpZQMODw.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/Yu__iL9mXshqnjVredBrpZQMODw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Sep 2024 15:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ca:73:09:31:f7:bb:f6:3f:1f:ee:54:68:df:4a:7f:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62efff88bf665ec86a9e356b79d06ba5940c383c
Validity
Not Before: May 30 17:01:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=398d719ef4547b617ace02ef308bf86b7dc8e0c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:53:26:c5:3d:a7:c1:17:bd:5c:9d:a9:e6:
f8:2b:4b:29:ad:ec:70:44:35:fc:b1:b7:a6:11:10:
4f:9d:e0:c0:d0:02:94:a4:d2:b4:b9:34:dc:aa:e6:
96:3c:f3:26:d2:f5:9c:be:1d:38:62:7d:87:e5:db:
88:6c:64:64:9d:6e:5a:69:75:ff:fa:6f:99:00:d6:
0b:86:55:7d:15:f8:bf:b4:b8:ec:80:30:5c:f8:4c:
5d:0a:9f:03:c0:f2:32:c7:41:17:38:8c:c5:86:36:
0c:d3:da:64:5f:96:0f:85:06:ea:11:5f:00:29:6a:
8b:69:6e:2f:5e:0f:fc:a0:31:3f:b2:47:db:94:6f:
44:f1:e2:10:3f:d5:07:0e:4d:f7:7a:61:1e:00:26:
d3:b3:fc:17:7d:95:1c:05:79:7a:22:c0:23:16:08:
43:3c:d0:a7:43:f7:34:55:48:37:a2:eb:21:0c:68:
4d:1b:04:e1:25:a7:f1:35:05:a9:a9:ed:89:33:19:
0f:04:9a:0e:32:10:03:68:f1:f6:09:b6:2f:4b:b7:
8b:20:43:d3:05:ca:13:61:9b:ea:07:30:4e:67:45:
40:af:47:c8:7b:cc:47:b6:64:f6:3d:e1:d2:9b:8f:
5c:59:d4:14:a9:a9:15:8e:e3:8b:39:92:c2:77:01:
e7:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:8D:71:9E:F4:54:7B:61:7A:CE:02:EF:30:8B:F8:6B:7D:C8:E0:C7
X509v3 Authority Key Identifier:
keyid:62:EF:FF:88:BF:66:5E:C8:6A:9E:35:6B:79:D0:6B:A5:94:0C:38:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yu__iL9mXshqnjVredBrpZQMODw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/OY1xnvRUe2F6zgLvMIv4a33I4Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3123b0-93e3-465d-80e4-040407a290d9/1/Yu__iL9mXshqnjVredBrpZQMODw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.254.170.0/24
Signature Algorithm: sha256WithRSAEncryption
60:e5:87:fa:f9:53:fe:12:5a:33:f9:c8:cf:c1:b9:60:62:f1:
de:52:36:4a:53:ed:9f:22:ce:5c:26:ba:7c:9b:eb:f4:c0:3a:
9b:8d:97:e7:e9:7a:61:52:de:a3:72:b7:f3:11:9f:10:71:7c:
91:fa:f8:80:1a:b0:73:9a:e4:b6:ed:d4:1f:c8:81:f8:8a:4f:
13:93:6a:d2:da:1d:73:33:0f:fb:7a:39:a2:7f:79:41:b5:ac:
5a:d8:79:64:d9:99:d1:e5:86:00:a0:d1:47:3a:e4:e4:67:41:
2e:02:d9:c5:b3:06:25:18:13:90:74:8d:71:ef:d5:c8:26:21:
93:51:4a:e2:b8:22:49:c2:c6:cc:4a:ff:a4:d8:19:7f:45:bd:
0b:db:9d:a5:a7:dd:19:9e:f4:d7:28:df:7c:99:f7:1b:47:df:
c3:00:c0:bd:97:5b:4d:94:aa:12:89:34:8b:9b:74:e0:4f:28:
bf:10:83:53:86:33:96:91:18:85:ce:cf:c3:cd:93:89:12:66:
49:76:98:9f:c9:df:fd:31:73:06:3d:7f:38:f9:a8:d6:83:05:
a2:55:8e:f8:f2:1f:eb:dc:c4:fb:3f:63:13:3d:48:84:6c:d5:
d2:1f:2b:db:e7:28:0a:a1:3d:3e:0d:b8:76:71:7d:1c:5b:e6:
d2:39:c0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 18 23:38:05 2024 by rpki-client on console-ams.rpki-client.org