Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/2ybCPXsz02iEbie_biw6dAHZuKE.roa
File: 2ybCPXsz02iEbie_biw6dAHZuKE.roa (raw, json)
Hash identifier: UuKVTCIRtGKxCZ2kXT+HWRul+W9O3/LBFD6UDhYITW4=
Subject key identifier: DB:26:C2:3D:7B:33:D3:68:84:6E:27:BF:6E:2C:3A:74:01:D9:B8:A1
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018D87E2AB11038798E1EE0E278A87E3D93A
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/2ybCPXsz02iEbie_biw6dAHZuKE.roa
Signing time: Thu 08 Feb 2024 08:43:15 +0000
ROA not before: Thu 08 Feb 2024 08:43:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8075
IP address blocks: 2a0f:7803:fc50::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:87:e2:ab:11:03:87:98:e1:ee:0e:27:8a:87:e3:d9:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Feb 8 08:43:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=db26c23d7b33d368846e27bf6e2c3a7401d9b8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4d:29:41:5c:8d:fa:6e:b4:55:4b:38:ef:96:
1a:2d:b3:b3:ee:2c:1e:3c:cd:fc:f1:d4:e9:65:62:
b1:f3:48:cd:c0:3b:1f:d4:04:07:1b:54:09:69:5c:
3b:1a:04:93:80:d9:70:a2:12:37:ac:93:f4:a0:10:
30:6f:20:dc:10:9c:79:df:b4:84:7c:74:ba:72:1b:
fa:d2:80:0d:72:a4:f5:6c:53:d4:51:e8:99:10:9c:
b2:b4:f6:72:46:eb:bb:3d:29:3f:4b:a8:86:5a:86:
4f:27:6f:b8:12:bd:d3:0c:ec:e3:da:c9:cb:e4:16:
30:ee:cf:32:1a:88:b0:ba:8f:4c:9a:a0:16:e2:c0:
4c:aa:56:ca:8c:25:62:0e:f2:42:42:e1:c4:44:09:
da:97:9c:91:1c:65:5c:96:ac:4e:da:4f:32:a1:63:
2b:23:6c:b0:5d:3c:6d:9d:7b:c0:17:29:04:54:0a:
34:a2:08:21:be:ce:46:10:fa:5e:ba:f3:3a:73:43:
df:e0:e8:e7:63:94:15:85:50:66:d6:2f:9e:96:8a:
a8:7e:69:0f:d4:d0:70:44:fa:e9:1a:8e:ac:7b:22:
ab:0d:3d:44:d7:fc:b9:18:d6:e7:a5:22:34:c8:78:
13:94:f3:a2:c9:37:57:c3:8a:5b:49:60:43:ca:86:
41:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:26:C2:3D:7B:33:D3:68:84:6E:27:BF:6E:2C:3A:74:01:D9:B8:A1
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/2ybCPXsz02iEbie_biw6dAHZuKE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fc50::/48
Signature Algorithm: sha256WithRSAEncryption
46:4c:9a:5c:e6:fd:8d:7d:1a:fa:86:bb:c6:b7:71:e6:cd:3f:
5c:54:a9:25:06:80:9e:8b:bd:40:a9:ea:1e:86:8b:cc:4d:cb:
90:d1:30:d1:28:5c:2b:9a:50:fb:1f:ca:77:36:9e:ef:8f:3a:
21:47:01:f2:29:c9:17:32:e2:08:b0:c5:63:6b:76:f0:6a:35:
4b:01:d5:74:e0:74:a2:89:25:51:67:ad:5d:8a:81:a7:8d:29:
cf:7e:c4:0c:33:a4:b2:3f:c2:f8:71:03:9e:62:4e:66:8b:e5:
4b:2d:31:0e:7b:58:49:d8:0f:ca:d6:8e:66:3d:f0:5a:89:57:
dd:33:3f:e9:7f:b6:ac:bd:e1:70:64:7e:fd:80:ad:57:60:12:
ea:22:46:a5:55:36:b7:77:01:e3:0c:e6:5b:8f:0a:b2:f2:8f:
85:9d:87:58:68:de:d8:ed:7c:44:37:ee:dd:2d:d8:02:f6:f3:
a5:af:66:95:a8:b9:66:d1:b5:08:58:0a:65:f2:27:d0:55:e0:
b3:75:cd:f3:41:aa:a2:83:94:3c:fa:4d:43:c9:68:40:4a:b0:
2b:4c:e5:63:52:64:25:61:9a:ec:4a:59:d1:e1:a5:b8:a1:90:
7b:53:26:5a:8a:cd:e1:a3:c2:a1:29:2f:60:43:59:e2:55:57:
c4:6d:4a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:32:12 2024 by rpki-client on console-ams.rpki-client.org