Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/y9lBd5XAXJx5eKtvnJmKmn7wGMQ.roa
File: y9lBd5XAXJx5eKtvnJmKmn7wGMQ.roa (raw, json)
Hash identifier: z6ah7mFjT6AkKtXO+CMd0pNNCRGSk3SQIZW347vwp80=
Subject key identifier: CB:D9:41:77:95:C0:5C:9C:79:78:AB:6F:9C:99:8A:9A:7E:F0:18:C4
Certificate issuer: /CN=cfcead390625edba1408108df57cea47160d70e5
Certificate serial: 018CC4246315694B77F8873E296BD3D37F01
Authority key identifier: CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/y9lBd5XAXJx5eKtvnJmKmn7wGMQ.roa
Signing time: Mon 01 Jan 2024 08:29:28 +0000
ROA not before: Mon 01 Jan 2024 08:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197860
IP address blocks: 2a0f:7803:fed0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.mft
rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:24:63:15:69:4b:77:f8:87:3e:29:6b:d3:d3:7f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfcead390625edba1408108df57cea47160d70e5
Validity
Not Before: Jan 1 08:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cbd9417795c05c9c7978ab6f9c998a9a7ef018c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:7d:be:9d:23:14:46:50:23:1a:a4:3d:dd:
a5:16:b1:37:9e:80:f2:1e:c4:37:85:6b:fb:7f:63:
6b:0f:6b:71:dd:80:88:94:65:06:87:4e:f4:24:50:
87:f9:fb:73:7f:13:64:57:b4:61:82:e9:dd:20:39:
c6:ca:25:f8:4d:58:a8:06:d7:df:08:45:1e:2f:ff:
06:24:cf:2f:1d:a3:d2:e4:b9:2f:a4:1f:75:ef:43:
79:f2:25:36:21:83:16:10:20:80:8d:ec:4c:73:e5:
bc:6c:8b:bb:4d:55:f6:5b:e8:5f:e3:08:10:3a:38:
09:9b:fb:69:bc:f6:3f:ff:85:60:5b:80:9e:d6:8a:
4b:6d:6c:ba:46:af:9d:71:36:39:c2:4a:24:02:f9:
db:d9:83:f1:bc:57:20:53:71:51:29:f8:40:db:d5:
19:e4:28:35:25:2a:cd:1f:9d:ae:fe:ac:8c:5e:73:
58:43:c6:8b:a8:56:3d:60:c6:e4:dd:cf:11:14:39:
ad:49:b6:7e:a0:22:3f:f1:1b:71:5d:f0:21:3a:f1:
ea:36:16:2f:92:1e:d6:2f:24:8a:eb:a3:43:f5:f8:
e8:a7:70:4b:d2:49:fd:18:ca:a7:b5:3e:48:04:68:
59:54:e0:6e:78:a7:f4:cc:3b:ee:b4:7f:34:3f:de:
5c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:D9:41:77:95:C0:5C:9C:79:78:AB:6F:9C:99:8A:9A:7E:F0:18:C4
X509v3 Authority Key Identifier:
keyid:CF:CE:AD:39:06:25:ED:BA:14:08:10:8D:F5:7C:EA:47:16:0D:70:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z86tOQYl7boUCBCN9XzqRxYNcOU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/y9lBd5XAXJx5eKtvnJmKmn7wGMQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/c4647a-6042-4fe8-a276-f5b6a718f4b5/1/z86tOQYl7boUCBCN9XzqRxYNcOU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0f:7803:fed0::/44
Signature Algorithm: sha256WithRSAEncryption
b1:60:b4:06:64:cb:9a:be:e1:01:68:d9:52:c4:9c:82:6a:ca:
69:b6:15:a7:b1:5f:c8:69:26:07:18:28:00:7a:5f:52:0d:92:
df:25:aa:f3:6a:c9:1d:7e:c1:d3:24:ac:91:cc:d5:0f:18:74:
0e:02:c5:6f:33:c4:2c:e6:86:ab:88:da:28:61:f4:c4:b8:d4:
3e:0f:61:8d:65:76:9f:67:04:90:01:51:3d:c5:a8:8e:2f:25:
b1:0a:0d:79:77:02:d6:68:10:04:20:05:19:a2:bb:88:f5:c2:
26:44:54:60:79:aa:b7:6a:b4:d2:69:93:32:be:c5:32:94:03:
92:1c:f2:38:ae:63:15:db:65:3d:53:71:a9:d3:2f:51:3e:3b:
30:72:84:54:85:59:4f:3a:8e:43:d9:56:87:4b:3d:cc:8c:70:
83:18:1c:f0:f6:2d:16:82:1e:fb:a8:bf:ba:00:ce:21:e8:b9:
51:b7:ac:1f:d3:7e:a0:b5:9d:62:60:1e:50:24:5b:f3:d1:be:
c5:58:49:c1:63:71:cb:36:f8:a2:16:6b:30:fa:1d:50:30:7a:
98:c4:c3:b3:8c:09:27:8d:f0:f4:20:af:4e:e5:e8:2d:ea:0c:
ab:de:b2:70:7f:18:05:1f:03:c1:3f:77:55:c3:ec:c0:a2:a2:
36:9f:99:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:36:40 2024 by rpki-client on console-fra.rpki-client.org