Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/bYITncRzrF1-MGbmN2SLVKjd6eE.roa
File: bYITncRzrF1-MGbmN2SLVKjd6eE.roa (raw, json)
Hash identifier: P2t16EhP78v+hNtFMxEnBOio3s2ICW9ZMVx4FLHUe+w=
Subject key identifier: 6D:82:13:9D:C4:73:AC:5D:7E:30:66:E6:37:64:8B:54:A8:DD:E9:E1
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B892D0069BF2BCA35B24747DD8AC6
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/bYITncRzrF1-MGbmN2SLVKjd6eE.roa
Signing time: Mon 01 Jan 2024 18:31:28 +0000
ROA not before: Mon 01 Jan 2024 18:31:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 197790
IP address blocks: 78.9.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:89:2d:00:69:bf:2b:ca:35:b2:47:47:dd:8a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6d82139dc473ac5d7e3066e637648b54a8dde9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:91:75:ca:09:c9:21:32:13:8c:c8:30:b5:65:
32:88:4d:2c:2a:a8:73:6c:96:5e:b1:e3:f0:78:2f:
e7:33:77:1f:19:6b:ad:55:9a:68:47:b5:a8:7c:ca:
d6:22:18:b8:76:0c:ec:64:bc:ee:0c:85:cb:49:ad:
07:33:46:3e:c6:97:b5:39:a1:b5:02:0b:cc:7c:ec:
da:56:fe:fb:36:4c:c5:45:9b:0b:53:8a:6c:a8:50:
31:ea:fc:cf:96:97:8f:61:bb:ae:96:5d:77:3c:f0:
f1:db:d3:61:3f:b6:2f:b9:45:0c:32:17:df:65:d7:
0b:81:41:30:b2:8b:10:c3:a4:29:f4:18:09:19:33:
27:05:8e:25:6d:a6:09:5a:18:87:fc:6a:12:47:b3:
8a:4a:87:cc:b0:70:78:c3:58:61:ba:43:fc:1d:b9:
02:a5:50:0f:f4:7a:8d:e5:e4:1a:13:1f:00:c0:a4:
0c:9b:4d:f2:40:8e:df:cd:c1:30:82:0d:65:dc:d7:
dc:a8:37:78:d5:65:b0:f6:00:97:c9:a2:79:c2:b6:
06:80:ae:93:4a:ca:73:82:2c:80:86:5d:d7:74:9d:
d4:4c:ff:09:4f:f3:fe:e5:3c:35:f9:0d:b2:cc:23:
74:10:24:f9:c3:61:d8:30:27:34:2b:b7:40:cd:b5:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:82:13:9D:C4:73:AC:5D:7E:30:66:E6:37:64:8B:54:A8:DD:E9:E1
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/bYITncRzrF1-MGbmN2SLVKjd6eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.9.100.0/24
Signature Algorithm: sha256WithRSAEncryption
42:45:32:1c:c1:14:42:3c:09:6e:b8:f8:3c:07:02:dc:36:e4:
3f:2c:7e:af:2f:1f:af:af:74:78:ef:e0:24:41:3a:9e:22:ce:
11:50:44:ee:79:6a:0d:e8:0a:c6:2b:b9:56:5e:de:74:70:d0:
30:ee:9e:68:7e:5e:4e:f6:30:7f:f8:98:87:86:55:42:26:43:
1b:af:f9:ff:f8:f0:2a:13:dd:43:13:fc:ea:19:ef:60:63:c0:
01:f2:37:33:93:28:7a:e7:f2:7e:01:7d:83:3e:7b:bf:b0:20:
c2:aa:de:ca:1f:fb:5c:65:66:08:17:52:9c:d1:ba:47:7d:3e:
9e:a7:57:42:63:a0:51:b2:d1:c9:77:34:a2:49:e3:96:eb:fa:
e8:bf:87:c0:43:df:d5:c1:0c:15:2e:11:55:78:14:90:b2:2e:
ca:d5:ef:89:d7:80:8c:2e:df:d8:ff:c8:84:fe:e9:9d:ac:4d:
60:80:7b:08:82:d7:07:c1:be:45:59:c8:dc:c3:b9:24:89:33:
85:75:16:97:8f:6e:95:cd:f1:fa:57:77:04:c1:d4:06:9a:8a:
ed:72:34:4c:68:da:44:56:9d:77:56:ce:b4:39:4a:a1:b2:73:
01:76:4f:fd:d3:f1:4e:f0:ed:91:d0:27:20:75:8f:d1:e7:2b:
e6:66:88:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 00:56:59 2024 by rpki-client on console-fra.rpki-client.org