Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/Yxga_c1wwt_QMAzc6K2_B51qx_M.roa
File: Yxga_c1wwt_QMAzc6K2_B51qx_M.roa (raw, json)
Hash identifier: 3bjawzJiBh7XfUjJASSOEHx5wge32GmO90EjXk+a8fs=
Subject key identifier: 63:18:1A:FD:CD:70:C2:DF:D0:30:0C:DC:E8:AD:BF:07:9D:6A:C7:F3
Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Certificate serial: 018CC94DA459886777BD023EC68C678EDCDD
Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/Yxga_c1wwt_QMAzc6K2_B51qx_M.roa
Signing time: Tue 02 Jan 2024 08:32:37 +0000
ROA not before: Tue 02 Jan 2024 08:32:37 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207616
IP address blocks: 2a0f:ca83::/40 maxlen: 48
2a0f:ca85::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft
rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 07:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4d:a4:59:88:67:77:bd:02:3e:c6:8c:67:8e:dc:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1
Validity
Not Before: Jan 2 08:32:37 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63181afdcd70c2dfd0300cdce8adbf079d6ac7f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e8:5f:6d:68:ec:6f:19:53:06:44:19:55:80:
20:d3:9a:14:e9:5b:50:28:d6:ca:1d:3e:2a:8a:6b:
43:25:2a:a3:30:5b:6f:fa:22:60:20:dd:16:e8:76:
9c:70:5d:3b:36:a1:c7:47:2a:d0:3e:25:13:94:a5:
9c:f9:81:70:b5:ad:68:36:ac:df:62:ef:8e:6c:26:
b5:9f:96:e2:21:09:c4:05:fc:85:3d:47:5f:2c:5c:
b1:44:cc:ab:7a:24:0e:85:96:7c:84:21:f3:2d:b9:
e6:7f:26:46:43:a2:80:89:8d:80:9d:89:c0:2a:b4:
ef:c5:11:b8:b5:cd:6a:34:49:5b:70:c9:1a:73:59:
4f:df:fc:bb:8e:83:74:37:8c:57:48:29:d5:29:cf:
44:e2:30:a2:51:e1:0d:71:32:7a:77:36:05:96:44:
c8:07:fa:ca:7e:5f:52:a4:de:44:8c:d7:fd:d2:2e:
50:7b:d6:21:9e:48:72:df:17:49:ad:c1:0f:57:bc:
17:ac:5c:cb:0c:f4:c0:96:5f:a7:98:ee:a6:c8:fa:
88:83:18:a4:b8:91:02:0c:0a:2e:e8:06:a2:5a:72:
d1:fe:15:f3:48:a9:72:5f:00:de:af:4c:df:91:17:
ea:41:a5:f7:fe:5f:bb:1f:c3:a5:4b:49:4b:6c:fe:
05:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:18:1A:FD:CD:70:C2:DF:D0:30:0C:DC:E8:AD:BF:07:9D:6A:C7:F3
X509v3 Authority Key Identifier:
keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/Yxga_c1wwt_QMAzc6K2_B51qx_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:ca83::/40
2a0f:ca85::/48
Signature Algorithm: sha256WithRSAEncryption
10:b2:7a:90:e1:f5:cb:c7:65:89:25:23:c8:43:b9:46:71:9a:
1e:4d:b8:7f:04:2f:d5:8a:4d:dd:35:96:20:63:8f:e5:82:1f:
06:1f:37:14:7f:8b:a1:cd:e6:42:ff:df:c1:e7:62:34:87:4e:
88:54:30:98:ca:99:fe:2e:6b:62:8f:fd:55:a0:6c:f2:07:d5:
66:7e:98:f8:6a:a6:d4:44:c4:1d:d8:3c:cb:5e:45:e3:8d:75:
84:3e:4f:81:fb:f9:19:a3:30:a6:8c:71:22:ce:ed:3b:06:ee:
25:93:46:26:b9:57:b8:51:6a:f0:0d:d6:f0:25:15:08:be:f5:
77:a5:25:50:87:b6:34:a3:82:d1:62:bd:bf:af:e7:30:f6:37:
69:e2:54:ca:f2:0d:33:63:fe:13:6a:07:2b:5b:5e:11:e1:47:
50:49:42:01:c7:7f:52:8d:28:49:ec:21:06:c6:a2:a2:67:39:
2f:e1:a0:01:8f:4f:aa:c1:6f:20:ee:b4:75:0e:60:ac:29:57:
fa:b9:32:95:26:97:bb:5d:11:c6:e9:c4:f5:4a:ce:48:fa:10:
36:21:e0:06:12:32:d7:c9:8e:1c:7f:b1:0b:2b:54:24:3e:44:
81:4e:37:4a:f2:b0:2e:48:9c:44:21:90:f7:7c:67:45:12:49:
ec:f7:4f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 18:05:58 2024 by rpki-client on console-ams.rpki-client.org