Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/yy5qsCuo4yiMAJn_Uvt_Y0XRwKU.roa
File: yy5qsCuo4yiMAJn_Uvt_Y0XRwKU.roa (raw, json)
Hash identifier: VoBADLKiJ+ZyOMmnE5ffhReUUmMzjEtpURqfze+14vE=
Subject key identifier: CB:2E:6A:B0:2B:A8:E3:28:8C:00:99:FF:52:FB:7F:63:45:D1:C0:A5
Certificate issuer: /CN=69f0070af877d6b986b307b9bc04ef19c440433d
Certificate serial: 018CC50042064F580F2D3E4558E4D212D90A
Authority key identifier: 69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/yy5qsCuo4yiMAJn_Uvt_Y0XRwKU.roa
Signing time: Mon 01 Jan 2024 12:29:37 +0000
ROA not before: Mon 01 Jan 2024 12:29:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12693
IP address blocks: 185.127.208.0/22 maxlen: 22
2a06:cbc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:42:06:4f:58:0f:2d:3e:45:58:e4:d2:12:d9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f0070af877d6b986b307b9bc04ef19c440433d
Validity
Not Before: Jan 1 12:29:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cb2e6ab02ba8e3288c0099ff52fb7f6345d1c0a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:10:b8:5e:23:39:da:29:49:2a:34:3e:32:25:
10:85:80:42:e2:1f:bf:f9:fa:e1:47:63:1f:09:de:
97:86:b7:06:b9:5a:a9:3a:69:a9:bc:56:6f:dd:52:
7c:48:f9:9b:72:06:e3:3f:1c:a3:0d:b8:14:98:59:
33:b1:4b:f5:92:c6:d8:cd:57:20:ef:2a:3e:3c:25:
20:1a:54:ef:24:f1:4c:62:8d:17:92:8d:bc:90:f2:
09:96:b7:6b:3d:c8:2c:40:12:65:07:da:83:63:18:
b3:3e:a8:ad:a6:3a:1f:2e:f6:06:b7:2e:0c:b8:0e:
64:7f:63:c3:8b:4d:a8:e4:af:e0:47:4d:4d:d8:f6:
7e:ff:e8:4c:96:ca:9c:40:a9:3c:d1:c8:94:e0:c7:
b3:27:d2:6c:b5:80:2b:19:40:9f:4d:ae:7b:9f:5d:
47:cf:11:a5:63:c2:2c:48:82:36:14:bf:26:ed:ba:
c7:4b:df:31:98:4d:7d:8a:2a:9c:a1:9a:91:7d:4f:
8d:37:dc:11:b9:0b:62:49:0d:2f:6b:60:13:f3:08:
be:95:98:47:bf:55:61:bd:a6:41:6c:f5:93:9f:8c:
90:9f:84:8d:17:b6:3a:71:6e:c7:90:a1:4f:9d:18:
84:ae:15:e3:ad:45:3f:e0:05:2f:4b:6b:39:33:44:
e9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:2E:6A:B0:2B:A8:E3:28:8C:00:99:FF:52:FB:7F:63:45:D1:C0:A5
X509v3 Authority Key Identifier:
keyid:69:F0:07:0A:F8:77:D6:B9:86:B3:07:B9:BC:04:EF:19:C4:40:43:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afAHCvh31rmGswe5vATvGcRAQz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/yy5qsCuo4yiMAJn_Uvt_Y0XRwKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/ab9fa6-a906-4ac4-ac0c-6389220b26c6/1/afAHCvh31rmGswe5vATvGcRAQz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.208.0/22
IPv6:
2a06:cbc0::/29
Signature Algorithm: sha256WithRSAEncryption
76:3a:42:ed:1b:88:21:16:00:49:be:14:27:40:f1:56:1a:b3:
5b:ae:ae:60:ad:c0:95:6d:ae:66:fc:af:d9:f2:f4:de:9c:1a:
18:8b:21:46:44:cc:05:4b:12:1e:19:5d:c1:f3:4d:84:cb:c8:
59:7b:d2:44:44:5f:26:0d:34:34:8e:57:c7:e1:72:8d:5d:51:
83:6c:3d:37:79:44:12:04:87:f1:0f:60:b8:f5:a4:8a:6b:f1:
c5:9a:f8:37:88:45:75:d3:4c:a1:a3:ff:ab:0e:c8:64:41:3b:
8d:fa:ec:cc:a8:95:1b:8c:46:11:62:b7:f4:3e:ba:ee:8e:2d:
fa:2a:97:37:b2:d0:31:92:cf:f6:44:a9:ba:71:17:fd:f7:53:
4d:0a:e2:f7:e7:1a:05:fb:d7:b6:31:08:3b:0c:b9:c0:d5:94:
8e:2a:7f:76:e9:71:26:29:a6:6b:bf:26:1b:38:73:67:84:8e:
e9:8d:06:65:f7:d4:a3:52:59:ab:f9:e0:32:7a:f9:a5:5d:03:
b6:b3:83:68:6b:bd:e9:37:75:00:c4:5b:3c:f9:bc:5a:6c:21:
01:87:4e:d4:d6:3c:44:86:31:4a:06:d6:53:af:72:67:46:ce:
9c:63:ed:ab:79:33:5d:a5:a6:ab:f0:bf:4a:07:59:44:b8:c5:
9f:6b:1a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 20:36:24 2024 by rpki-client on console-ams.rpki-client.org