Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/yQzwikfxpYcPeLPS1ABdHjgetkQ.roa
File: yQzwikfxpYcPeLPS1ABdHjgetkQ.roa (raw, json)
Hash identifier: WujvACMNdD+Q0irYgii9Bbsy/FmXOGZ/40KJOW9WZ/k=
Subject key identifier: C9:0C:F0:8A:47:F1:A5:87:0F:78:B3:D2:D4:00:5D:1E:38:1E:B6:44
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 01910E992AA303C61694318CB21B8D1AE206
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/yQzwikfxpYcPeLPS1ABdHjgetkQ.roa
Signing time: Thu 01 Aug 2024 15:40:04 +0000
ROA not before: Thu 01 Aug 2024 15:40:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 205312
IP address blocks: 195.208.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.mft
rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Sep 2024 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0e:99:2a:a3:03:c6:16:94:31:8c:b2:1b:8d:1a:e2:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Aug 1 15:40:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c90cf08a47f1a5870f78b3d2d4005d1e381eb644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:26:48:58:75:20:0f:6e:2e:c2:be:17:7b:43:
99:e9:1a:3a:65:21:0a:c2:78:e0:22:16:93:7f:f1:
0f:0b:a1:fc:da:a4:52:7a:a5:c5:69:fa:83:6b:c7:
88:29:94:70:f3:88:43:5c:97:af:ef:f6:06:80:7b:
78:68:71:cf:3c:0d:17:57:50:a7:c9:f8:f2:4d:9d:
02:1c:7a:d2:6a:91:0e:00:f6:9f:17:f0:cb:50:08:
4e:b2:41:67:98:d3:94:ae:05:20:f3:74:87:60:af:
25:2e:fa:ea:0c:95:f4:93:5b:43:44:be:16:a9:8f:
bf:bb:be:55:9c:77:d1:4d:1b:b7:ff:e0:22:6a:2e:
31:cc:25:9b:92:b4:4d:71:be:46:c4:56:08:dc:97:
f4:f6:b3:fd:28:c5:3c:e4:11:e0:11:9d:7b:b5:d0:
7f:92:77:40:8c:3a:5e:11:95:ad:44:9d:70:7f:fa:
83:5e:fd:6f:01:23:db:8e:fb:df:69:b5:8f:58:b3:
7b:ac:d5:28:72:5e:ee:fc:06:2c:e8:41:20:86:65:
52:54:82:9a:71:03:a5:cb:87:f7:52:cc:98:57:be:
cb:70:70:f7:6b:db:ba:03:ba:e4:fa:db:0c:08:56:
a8:60:b2:02:e7:ae:67:22:87:93:b8:36:2c:c8:37:
00:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0C:F0:8A:47:F1:A5:87:0F:78:B3:D2:D4:00:5D:1E:38:1E:B6:44
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/yQzwikfxpYcPeLPS1ABdHjgetkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.208.78.0/23
Signature Algorithm: sha256WithRSAEncryption
37:3a:42:6b:75:b1:12:aa:7b:ce:6f:49:8b:ba:a4:7b:4a:e4:
f3:cb:ee:a4:86:aa:fa:51:c8:69:30:f9:d2:1d:cb:1f:da:83:
f0:5b:ab:df:91:9a:1b:4a:1f:94:81:e2:83:63:30:f1:b4:35:
ae:bc:b1:6e:5d:ca:4e:5b:f6:04:47:1e:1c:74:da:3b:9b:e9:
09:f6:2c:66:fb:c1:28:88:aa:a6:48:af:c8:0c:ee:17:2a:4c:
f4:89:a5:45:ce:49:53:da:5c:95:f1:09:e1:4f:3e:ba:0c:27:
d1:45:df:a2:83:f1:64:25:b6:ad:24:87:43:53:95:d4:0c:ec:
75:12:34:c0:7d:a0:94:ed:20:ae:ce:ed:bb:a2:01:99:76:57:
e6:ae:0b:9f:81:51:52:43:c9:53:a9:b0:f2:68:6a:9b:a6:a2:
33:bc:65:ca:37:a7:4d:ef:0b:38:d6:ba:fd:27:e9:ae:07:27:
e0:ea:35:b3:ae:b7:09:e9:b5:80:92:08:a1:93:71:e5:20:45:
52:d7:b5:78:74:c7:c4:03:75:99:0c:82:b3:f9:c3:99:77:4b:
a7:c1:c3:b4:bb:5f:18:f6:18:87:eb:be:e6:55:00:72:fe:cf:
5b:3b:f8:a6:90:24:3a:ac:45:09:56:38:ee:37:ce:44:c0:e8:
b6:83:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 13:12:08 2024 by rpki-client on console-fra.rpki-client.org