Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/ny2y6e6a0AStSdzyIVZyzfutHJs.roa
File: ny2y6e6a0AStSdzyIVZyzfutHJs.roa (raw, json)
Hash identifier: jSuLH8mDoEhBjMZSk+vBpu8aDbqlHtwI8qV8S9whA4o=
Subject key identifier: 9F:2D:B2:E9:EE:9A:D0:04:AD:49:DC:F2:21:56:72:CD:FB:AD:1C:9B
Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3
Certificate serial: 0191136310C233D655A9644AFCB5A3BB5405
Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/ny2y6e6a0AStSdzyIVZyzfutHJs.roa
Signing time: Fri 02 Aug 2024 13:59:04 +0000
ROA not before: Fri 02 Aug 2024 13:59:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212396
IP address blocks: 2a03:ee40:753::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 15:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:13:63:10:c2:33:d6:55:a9:64:4a:fc:b5:a3:bb:54:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3
Validity
Not Before: Aug 2 13:59:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9f2db2e9ee9ad004ad49dcf2215672cdfbad1c9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9a:25:44:02:ec:6f:02:4d:bd:9a:e9:e8:04:
3f:3c:b0:b5:9d:f2:b9:37:53:48:cf:26:7c:91:5c:
6a:1f:ca:f0:24:4f:e3:04:da:0f:6a:74:3f:2b:a0:
5e:fa:bb:fb:fd:ce:ff:9c:09:e4:29:f1:b3:9d:91:
25:fe:e8:1a:b5:ba:78:00:4d:0a:ad:ba:fa:38:e5:
79:a0:6a:40:fb:fc:b8:91:a8:cd:ae:c8:b3:4c:ac:
76:92:e6:9d:2c:76:61:2d:04:f2:65:8c:fd:27:78:
94:c3:13:e8:ca:ca:e7:93:ce:f9:38:8c:5f:fd:a3:
08:2b:21:92:9d:a5:bb:44:c6:b7:83:1e:bc:6b:ec:
e4:2f:b9:a8:73:65:3c:62:80:5b:0d:ca:0b:e2:59:
cb:3b:53:4d:96:e3:51:06:7f:e3:fb:f0:69:ac:63:
a7:db:b4:1b:fa:d4:7f:a4:61:63:42:4f:c1:ce:51:
0e:bf:69:a6:47:f7:c1:03:c9:a9:db:1d:52:2b:c2:
76:2b:bc:11:a8:38:5b:3e:9f:9a:66:bd:73:70:4c:
55:33:5e:e3:54:01:cf:23:fd:6c:d6:26:ed:60:0f:
eb:2b:16:4b:ff:e9:31:ff:ce:4c:b3:e2:31:3d:83:
86:34:87:e7:54:8f:36:ab:a9:22:20:e2:d7:70:4b:
a2:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2D:B2:E9:EE:9A:D0:04:AD:49:DC:F2:21:56:72:CD:FB:AD:1C:9B
X509v3 Authority Key Identifier:
keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/ny2y6e6a0AStSdzyIVZyzfutHJs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:ee40:753::/48
Signature Algorithm: sha256WithRSAEncryption
15:7a:75:c2:77:a7:38:5c:d8:49:3b:9f:3d:8d:cc:07:fe:4c:
80:86:e8:6e:a3:58:bb:fc:96:d5:31:44:5b:96:80:35:29:05:
07:4c:3d:e3:f2:3b:12:20:0d:5d:6f:8c:c5:e0:de:16:6b:2c:
01:e1:94:bf:69:2c:dd:a8:ac:2d:23:ac:6e:d4:87:3d:56:4e:
b3:34:ef:1f:59:39:19:59:ae:d6:fb:d9:3c:5f:43:be:d8:a7:
44:1e:d2:39:ba:be:d9:05:8c:c1:a9:be:d9:3f:cf:06:e1:ed:
ba:80:d8:8b:66:30:8b:24:d3:34:e4:41:f0:ce:22:ae:04:99:
3d:77:5e:43:38:9f:f5:99:81:4f:ea:dc:5e:32:3f:cd:3b:1e:
53:bc:f4:55:84:6e:95:71:94:86:cc:a8:24:1e:b2:90:07:c0:
b3:fb:e2:aa:91:1b:57:59:d2:16:a8:c8:3c:8a:dd:3a:3a:c1:
b0:84:26:63:b6:19:f4:b9:b0:49:2a:73:bb:8c:ae:e9:79:09:
48:d4:d1:fe:f5:eb:53:ca:7b:07:39:3c:f4:3c:68:7f:cd:02:
87:80:bf:db:66:f1:de:de:f5:fc:a3:00:8b:7d:b5:f2:2e:ea:
37:53:7d:45:3b:e2:6c:6f:91:c0:ef:99:a5:98:e5:88:96:e8:
86:a3:d5:ee
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZETYxDCM9ZVqWRK/LWju1QFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5
MjFlYzMwHhcNMjQwODAyMTM1OTA0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjJkYjJlOWVlOWFkMDA0YWQ0OWRjZjIyMTU2NzJjZGZiYWQxYzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JolRALsbwJNvZrp6AQ/PLC1nfK5
N1NIzyZ8kVxqH8rwJE/jBNoPanQ/K6Be+rv7/c7/nAnkKfGznZEl/ugatbp4AE0K
rbr6OOV5oGpA+/y4kajNrsizTKx2kuadLHZhLQTyZYz9J3iUwxPoysrnk875OIxf
/aMIKyGSnaW7RMa3gx68a+zkL7moc2U8YoBbDcoL4lnLO1NNluNRBn/j+/BprGOn
27Qb+tR/pGFjQk/BzlEOv2mmR/fBA8mp2x1SK8J2K7wRqDhbPp+aZr1zcExVM17j
VAHPI/1s1ibtYA/rKxZL/+kx/85Ms+IxPYOGNIfnVI82q6kiIOLXcEuiNwIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFJ8tsunumtAErUnc8iFWcs37rRybMB8GA1UdIwQY
MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt
YmJhODYwYjI2YzAyLzEvbnkyeTZlNmEwQVN0U2R6eUlWWnl6ZnV0SEpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy
LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgPuQAdT
MA0GCSqGSIb3DQEBCwUAA4IBAQAVenXCd6c4XNhJO589jcwH/kyAhuhuo1i7/JbV
MURbloA1KQUHTD3j8jsSIA1db4zF4N4WaywB4ZS/aSzdqKwtI6xu1Ic9Vk6zNO8f
WTkZWa7W+9k8X0O+2KdEHtI5ur7ZBYzBqb7ZP88G4e26gNiLZjCLJNM05EHwziKu
BJk9d15DOJ/1mYFP6txeMj/NOx5TvPRVhG6VcZSGzKgkHrKQB8Cz++KqkRtXWdIW
qMg8it06OsGwhCZjthn0ubBJKnO7jK7peQlI1NH+9etTynsHOTz0PGh/zQKHgL/b
ZvHe3vX8owCLfbXyLuo3U31FO+Jsb5HA75mlmOWIluiGo9Xu
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:44:37 2024 by rpki-client on console-ams.rpki-client.org