Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/YHkgKLBbJvwPTPNXnEAz0Dyk42w.roa
File: YHkgKLBbJvwPTPNXnEAz0Dyk42w.roa (raw, json)
Hash identifier: hKNNcitrpMgg9zt79BPiSaUHm23+/zp3MoOiDzD+jis=
Subject key identifier: 60:79:20:28:B0:5B:26:FC:0F:4C:F3:57:9C:40:33:D0:3C:A4:E3:6C
Certificate issuer: /CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Certificate serial: 018CC4932C71A6DCE5662CBC4B8B821ECA3C
Authority key identifier: 6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/YHkgKLBbJvwPTPNXnEAz0Dyk42w.roa
Signing time: Mon 01 Jan 2024 10:30:28 +0000
ROA not before: Mon 01 Jan 2024 10:30:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197942
IP address blocks: 171.32.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 14:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:2c:71:a6:dc:e5:66:2c:bc:4b:8b:82:1e:ca:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffe7b21b62183d5e3d4ae1b93ff00909282c912
Validity
Not Before: Jan 1 10:30:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60792028b05b26fc0f4cf3579c4033d03ca4e36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c8:13:0d:12:c8:a6:a2:bb:19:5b:49:64:6f:
6a:72:a6:1a:b2:b8:e3:a1:d2:66:b6:1e:66:d1:30:
1c:8f:04:de:12:c6:5e:43:4f:5a:fe:aa:77:98:b0:
7f:d5:d3:58:12:8b:c1:25:c4:3e:6f:e8:00:f0:ea:
88:9a:b3:d3:ed:47:f6:b6:59:c5:64:0a:9b:14:cb:
5e:6c:e0:2a:9c:7d:24:5f:5e:a6:e2:fd:1a:69:1e:
c3:19:21:03:8b:b9:f2:87:d6:63:eb:a8:bf:83:d9:
4f:38:78:c6:18:34:a8:47:41:6a:7f:8e:40:64:5b:
5b:81:af:89:8c:0b:7f:2f:20:4b:21:f0:d4:0d:63:
a6:fe:08:1d:7d:f3:50:12:64:96:89:21:86:51:17:
c4:09:9a:78:03:f3:8b:92:18:fd:5e:e3:15:94:56:
b0:db:42:65:3f:44:60:ec:ed:63:29:2f:f2:23:a8:
b9:6b:eb:cc:eb:09:24:86:43:7e:73:af:c4:12:12:
cf:1d:ad:20:c4:6e:0e:fa:e7:b5:a4:d9:3b:b9:ca:
1c:e4:11:0a:32:c9:cb:1a:df:95:c4:b5:94:25:62:
36:9d:6b:be:c5:d2:28:57:ac:ad:b2:e4:b1:82:73:
7d:a8:cc:f6:a0:7c:89:fa:a2:46:c3:ca:f4:3e:8a:
74:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:79:20:28:B0:5B:26:FC:0F:4C:F3:57:9C:40:33:D0:3C:A4:E3:6C
X509v3 Authority Key Identifier:
keyid:6F:FE:7B:21:B6:21:83:D5:E3:D4:AE:1B:93:FF:00:90:92:82:C9:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_57IbYhg9Xj1K4bk_8AkJKCyRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/YHkgKLBbJvwPTPNXnEAz0Dyk42w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/aa06b6-e766-4ad9-aa7a-a4bbb1bc98c6/1/b_57IbYhg9Xj1K4bk_8AkJKCyRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.32.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6e:be:17:cf:00:0d:87:5f:0b:29:b1:f7:34:83:d8:8e:be:e8:
0d:86:e5:01:74:12:95:85:78:9c:43:27:37:d1:2f:ff:9d:c9:
60:1b:60:c1:ad:1c:fc:93:96:1f:42:0c:60:5b:b8:99:8d:51:
7d:d0:f4:40:7c:57:21:bb:f2:e2:cb:21:ff:55:65:1f:e5:ec:
32:95:51:2b:28:bd:78:24:e4:ec:bf:4b:93:d8:7c:47:db:4a:
31:8d:50:79:89:22:c4:c9:00:8b:c5:c4:a6:fb:90:32:ea:38:
cd:20:0a:3c:d7:15:32:f0:d0:56:91:1b:7b:a5:5b:9e:07:06:
9a:51:de:09:60:25:52:52:bb:e0:b6:f3:3a:1c:29:90:e0:dc:
63:2b:1c:47:0b:cc:88:11:14:81:7a:ea:6a:7a:a9:17:89:60:
80:46:80:d5:e4:93:aa:41:a2:75:38:47:59:14:56:1d:8f:86:
55:15:3f:6a:f1:e9:f2:68:fa:06:44:48:68:0c:ca:0f:c4:b9:
1d:95:7b:53:8b:dc:db:a9:21:dd:35:90:5c:87:61:74:68:7c:
2b:44:8b:1b:06:84:8c:d6:61:97:d3:57:14:f0:9f:aa:38:59:
8e:9d:a3:41:81:2c:64:ef:fa:2f:e0:a8:b5:31:4c:3e:0c:6e:
35:25:1d:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 23:34:35 2024 by rpki-client on console-ams.rpki-client.org