Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pyhQetJ5N1OMvdJR6GkGSMoO8o8.roa
File: pyhQetJ5N1OMvdJR6GkGSMoO8o8.roa (raw, json)
Hash identifier: 8YR8rqRqzMzVpau46MKlP/t64zc68+B4sL2+s4xINfc=
Subject key identifier: A7:28:50:7A:D2:79:37:53:8C:BD:D2:51:E8:69:06:48:CA:0E:F2:8F
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 018CC64B8CCE9802790456A820D41D296FD2
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pyhQetJ5N1OMvdJR6GkGSMoO8o8.roa
Signing time: Mon 01 Jan 2024 18:31:29 +0000
ROA not before: Mon 01 Jan 2024 18:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199538
IP address blocks: 193.192.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 23 Jun 2024 21:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:8c:ce:98:02:79:04:56:a8:20:d4:1d:29:6f:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 18:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a728507ad27937538cbdd251e8690648ca0ef28f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:4e:a0:b5:3b:ba:07:9b:9b:a2:d8:07:87:dc:
36:1a:36:1b:0d:5c:be:f7:40:84:c9:76:92:4c:c4:
99:29:7f:f3:0c:1a:15:82:8a:fb:03:e9:37:01:a3:
bf:e8:67:3d:b0:87:f0:0f:f1:4a:54:b1:6e:4d:8e:
00:80:6c:87:c9:ad:90:75:53:6e:b7:46:c8:5a:7f:
23:f7:4e:74:e5:be:b6:e1:9d:f7:30:ee:12:0b:d0:
3f:c0:ce:16:85:4c:f0:79:33:a2:8a:1d:52:22:7e:
6f:17:c1:59:b3:86:03:c0:a5:7b:e2:6c:1a:70:41:
95:5a:3d:b9:93:fe:4c:ec:78:3f:f0:95:d7:5a:91:
39:93:c7:ab:6e:ce:cd:81:da:2b:e9:74:a6:50:7f:
1d:ec:05:72:3e:65:43:60:7e:54:19:5a:42:14:a6:
42:61:6f:84:bd:37:05:2d:17:0c:d2:18:8e:38:4c:
4c:57:c4:2e:87:32:26:cc:28:92:18:58:48:4d:92:
63:3e:81:2c:27:5b:29:a3:1d:50:54:55:fd:33:f4:
8e:70:23:d7:31:cb:df:61:3b:af:76:87:2c:22:39:
82:17:83:86:52:fe:ad:21:5f:53:8b:b9:90:c3:ab:
38:95:ff:99:19:ac:88:38:88:16:59:7b:82:e7:08:
93:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:28:50:7A:D2:79:37:53:8C:BD:D2:51:E8:69:06:48:CA:0E:F2:8F
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/pyhQetJ5N1OMvdJR6GkGSMoO8o8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.192.184.0/24
Signature Algorithm: sha256WithRSAEncryption
76:26:91:4d:57:25:d6:b0:80:97:6e:44:14:84:84:81:91:00:
c3:42:c2:04:d1:ec:1a:3a:93:20:3e:04:70:38:f6:3b:bb:fd:
91:cf:a2:f8:1f:39:43:75:39:10:3a:50:c3:e0:ca:1e:6f:d6:
12:58:3c:58:ae:61:ab:27:05:33:14:f2:aa:a8:3f:63:02:0d:
2b:61:2a:50:35:88:29:a4:67:81:9c:ec:ea:b8:21:d9:cf:f4:
e6:e0:77:58:81:63:85:b6:8a:7b:b7:c3:13:60:c2:3a:79:23:
20:49:5a:7c:0e:af:9c:c7:4b:96:14:a1:e5:ad:f6:8c:0c:19:
1b:a2:16:a9:8c:f1:59:a9:80:c9:21:98:94:ea:4a:29:00:e8:
60:91:97:c3:97:5a:d3:8a:83:bf:92:79:fe:28:5f:fa:a8:97:
d7:d9:d1:73:1b:4a:be:6b:ce:ac:44:c4:1e:07:2b:df:f9:8e:
0c:e4:57:67:a5:02:28:2a:94:e3:86:7d:94:de:f2:07:8a:13:
86:02:8b:5b:14:f0:b9:bf:de:83:58:ca:d2:9b:63:e0:ea:68:
d5:63:30:0e:7e:13:2a:5e:66:e0:8d:0b:64:0f:24:08:1e:47:
57:84:04:84:2d:3c:b3:a0:15:03:c7:be:6d:e7:48:a4:fc:c8:
4c:f2:52:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:26:06 2024 by rpki-client on console-ams.rpki-client.org