Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/yW6FyxFyxn-CYpMYgNgtNFwD6M8.roa
File: yW6FyxFyxn-CYpMYgNgtNFwD6M8.roa (raw, json)
Hash identifier: 99KxzR1XQ6rEWongZIaE0Ox2xrjgt+gVYnpr1qBe30M=
Subject key identifier: C9:6E:85:CB:11:72:C6:7F:82:62:93:18:80:D8:2D:34:5C:03:E8:CF
Certificate issuer: /CN=32157d6b8c12c05b41bc41241d0615040af241e1
Certificate serial: 019252D1B809A65DF4F8024DBD899540395B
Authority key identifier: 32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/yW6FyxFyxn-CYpMYgNgtNFwD6M8.roa
Signing time: Thu 03 Oct 2024 14:38:48 +0000
ROA not before: Thu 03 Oct 2024 14:38:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2376
IP address blocks: 90.72.0.0/16 maxlen: 16
90.97.0.0/17 maxlen: 17
2a01:dfff::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:52:d1:b8:09:a6:5d:f4:f8:02:4d:bd:89:95:40:39:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32157d6b8c12c05b41bc41241d0615040af241e1
Validity
Not Before: Oct 3 14:38:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c96e85cb1172c67f8262931880d82d345c03e8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:49:45:ee:cf:8c:67:d4:3f:f9:10:0a:bc:a4:
07:1a:60:86:ca:0f:61:56:cd:74:09:b8:e3:0c:b7:
5c:ab:9c:ad:46:a4:c5:cd:2b:3e:0d:32:d2:15:f1:
2c:53:b1:da:bd:92:58:c7:f2:9a:c2:bd:d9:4b:18:
46:7d:69:9b:6e:38:fc:6f:83:71:54:2f:bd:9c:57:
37:05:fc:5a:7e:37:a8:3e:fb:2e:d0:61:a4:ea:cc:
10:73:9c:42:d6:21:f0:9a:b5:02:20:67:1c:10:e3:
09:bd:61:ac:48:54:96:09:bb:c9:2d:61:0b:7d:4e:
c9:b0:5a:37:ae:24:b9:79:b1:ed:9f:d5:6f:e8:ed:
2b:7c:23:5e:bd:a8:2f:9a:be:b9:bf:aa:d3:81:47:
31:33:89:a2:a5:01:5f:2a:73:50:7a:77:63:25:40:
90:aa:21:e2:dd:af:64:ff:15:7d:f8:2b:83:27:b8:
aa:a8:2e:09:36:08:8c:0c:d8:6c:32:5e:58:6d:7a:
3e:12:49:e0:23:b9:5f:ef:d8:cf:ca:8d:f5:f5:3e:
64:26:1f:44:8e:7d:79:5e:41:d3:23:c2:60:ff:36:
35:98:78:61:e8:6b:51:06:13:d8:51:2d:36:bf:f9:
c6:6c:28:f6:3a:8d:78:47:34:51:b9:e2:31:f2:fb:
7e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6E:85:CB:11:72:C6:7F:82:62:93:18:80:D8:2D:34:5C:03:E8:CF
X509v3 Authority Key Identifier:
keyid:32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/yW6FyxFyxn-CYpMYgNgtNFwD6M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.72.0.0/16
90.97.0.0/17
IPv6:
2a01:dfff::/32
Signature Algorithm: sha256WithRSAEncryption
13:5d:f8:c1:91:53:b9:9f:b4:72:a7:c2:b0:3a:c7:fd:72:2d:
9e:5b:3f:de:34:4e:b6:0e:05:0f:9e:83:e3:f3:2d:60:da:a2:
7e:52:0f:67:74:6c:6b:10:ef:75:e4:84:1b:96:1b:27:c5:26:
c9:b6:5d:68:67:8a:54:52:71:42:52:26:de:2d:03:f3:51:fc:
cd:03:fa:ed:94:a1:82:f6:f4:2c:91:74:34:17:db:37:6c:fd:
2a:6e:e8:c0:89:b3:01:0a:7d:ea:e8:89:fe:60:74:77:a9:09:
cb:be:a1:95:5e:d7:aa:a4:19:36:aa:60:7a:3d:d7:07:48:93:
66:a6:cb:eb:ed:4f:bb:0a:44:ef:ff:9e:b5:f1:ba:13:81:c5:
56:ca:9e:3b:f3:98:ad:13:36:53:33:ef:d5:87:69:d9:0a:b9:
ed:45:cd:13:9c:93:9e:13:72:46:f9:08:e1:be:f8:43:59:ef:
33:ee:87:b9:b2:49:e8:63:2b:ad:8a:2e:cb:1b:0c:77:9d:1f:
17:a2:61:78:0d:b5:e8:c6:d7:9b:26:77:70:72:cd:63:de:dd:
e6:ae:c6:ac:78:ce:cb:91:ba:60:42:af:3d:d5:14:db:2e:62:
d4:ef:e1:f1:01:ac:5d:8f:fc:80:c3:51:77:a6:cb:db:07:3b:
b9:6c:e9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:26:32 2024 by rpki-client on console-ams.rpki-client.org