Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/YuMXvy_LCmr_ye1cim7RQj7lOKI.roa
File: YuMXvy_LCmr_ye1cim7RQj7lOKI.roa (raw, json)
Hash identifier: DVH4Y32ek8o9A73j4/n91w2wrdS5sz4XtEeISxuj8vs=
Subject key identifier: 62:E3:17:BF:2F:CB:0A:6A:FF:C9:ED:5C:8A:6E:D1:42:3E:E5:38:A2
Certificate issuer: /CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Certificate serial: 018E7C4D0139BA2340E8F49345094574F30F
Authority key identifier: B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/YuMXvy_LCmr_ye1cim7RQj7lOKI.roa
Signing time: Tue 26 Mar 2024 19:46:45 +0000
ROA not before: Tue 26 Mar 2024 19:46:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 14618
IP address blocks: 2a14:2ec0:62b4::/48 maxlen: 48
2a14:2ec0:854e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 02 May 2024 23:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:7c:4d:01:39:ba:23:40:e8:f4:93:45:09:45:74:f3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22640351ab21a0dc7aaa15fab5b110977714a3c
Validity
Not Before: Mar 26 19:46:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=62e317bf2fcb0a6affc9ed5c8a6ed1423ee538a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:79:dc:db:93:35:2c:0d:6a:4e:b0:68:0a:75:
bd:fa:dd:64:85:6b:0a:ba:e3:e4:2c:37:ff:74:0d:
af:1e:c5:e7:69:c0:0b:20:11:50:6b:28:7b:ed:27:
e8:14:d2:ae:5f:da:39:67:da:07:71:d7:b2:ef:98:
93:23:c8:f1:28:fd:09:bd:b0:25:43:9d:c0:27:3f:
88:14:2c:1b:19:7c:13:cf:9f:0b:76:2b:2c:69:c2:
61:ec:f0:e9:9f:80:6c:66:69:3d:5b:70:6f:3d:5d:
64:ed:e9:80:35:1a:ac:60:70:0c:5d:e5:3a:11:8e:
9c:a4:b9:3f:0f:01:ec:01:15:33:2e:e6:ad:60:aa:
7a:6a:1f:93:4b:bc:ce:7a:4d:0c:97:34:cf:e6:25:
81:84:8b:4f:d1:2e:00:94:68:99:2b:18:d8:06:17:
26:bf:3a:66:b5:74:4b:71:33:c1:b4:ca:92:f2:b3:
b0:41:33:7c:b2:6a:c5:34:6d:52:bf:f1:01:93:db:
d7:ce:9a:93:fd:0d:37:96:c3:0b:c4:36:88:c4:bc:
1e:ea:67:80:18:15:17:94:81:a5:53:1f:49:fd:6a:
08:76:ab:82:fc:e7:0e:2e:7f:1c:d0:02:9c:9c:8a:
e8:98:91:98:f9:b4:f1:e4:08:a2:d6:60:8e:e2:d2:
78:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E3:17:BF:2F:CB:0A:6A:FF:C9:ED:5C:8A:6E:D1:42:3E:E5:38:A2
X509v3 Authority Key Identifier:
keyid:B2:26:40:35:1A:B2:1A:0D:C7:AA:A1:5F:AB:5B:11:09:77:71:4A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/siZANRqyGg3HqqFfq1sRCXdxSjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/YuMXvy_LCmr_ye1cim7RQj7lOKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e38ff0-469b-41e5-bbed-179e6e4290c0/1/siZANRqyGg3HqqFfq1sRCXdxSjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:2ec0:62b4::/48
2a14:2ec0:854e::/48
Signature Algorithm: sha256WithRSAEncryption
a6:ee:19:0a:0b:a2:25:31:60:01:a0:c9:ce:4e:2c:8c:81:c8:
30:68:bf:95:0e:17:18:60:81:71:6c:58:05:40:78:a9:62:44:
04:2b:5e:bf:9c:eb:e9:69:f3:f8:d9:31:85:39:3e:44:ff:8c:
16:ba:79:c2:a2:87:9b:d9:7d:7f:ce:69:df:96:3e:eb:bf:e1:
ff:6b:74:d1:08:53:c1:c1:c0:74:7c:85:74:4f:25:55:03:32:
27:93:08:a5:e2:ac:74:c7:5f:44:60:96:ef:70:95:9a:84:d9:
ba:c7:00:9d:97:07:be:68:16:72:4c:5b:fd:31:e9:6f:1b:c1:
96:1a:a5:f6:1b:8b:5f:e8:ae:06:e4:29:ce:84:ce:1b:7c:2d:
9f:5b:34:e4:b2:4e:74:e8:e5:e8:7a:66:85:30:ae:02:e6:6f:
98:04:c6:a9:8c:70:1f:54:2b:06:fe:4b:c5:3f:9a:01:c7:77:
31:47:5e:b0:71:3b:55:4d:21:46:95:38:41:a0:9d:98:8a:ef:
ec:dc:f9:d1:8d:5f:2d:c5:65:12:9d:d0:de:35:1f:7f:e4:91:
b8:d9:d3:10:0a:ac:ae:69:76:9c:9e:b4:50:82:18:38:89:2b:
7a:81:11:ab:83:02:e4:04:56:5e:14:3a:d6:b3:74:e0:4b:ba:
a1:8f:80:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 07:40:53 2024 by rpki-client on console-fra.rpki-client.org