Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/_Y-6NYDWXt3hu2Vbn9g95xYk-ms.roa
File: _Y-6NYDWXt3hu2Vbn9g95xYk-ms.roa (raw, json)
Hash identifier: xjMDvPclj28Z9mosZn4Y1MPuaz3JE423GzMAs/b/kBQ=
Subject key identifier: FD:8F:BA:35:80:D6:5E:DD:E1:BB:65:5B:9F:D8:3D:E7:16:24:FA:6B
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 018CC64B651A51077567775D03C5B10FCA5E
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/_Y-6NYDWXt3hu2Vbn9g95xYk-ms.roa
Signing time: Mon 01 Jan 2024 18:31:19 +0000
ROA not before: Mon 01 Jan 2024 18:31:19 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 400529
IP address blocks: 193.243.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:65:1a:51:07:75:67:77:5d:03:c5:b1:0f:ca:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jan 1 18:31:19 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fd8fba3580d65edde1bb655b9fd83de71624fa6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:dd:6c:a8:63:3d:eb:c5:d6:5f:f8:99:98:8d:
03:27:28:f4:9b:62:73:67:05:89:e8:62:63:49:0b:
d7:c4:74:c3:41:12:fe:cd:da:41:86:3a:f0:8b:5d:
98:d3:df:36:6b:2f:3b:f7:ba:4a:5b:d2:34:6e:33:
51:b5:d1:24:f4:70:e4:ac:c3:cd:2c:b2:70:ce:6d:
c7:4e:23:92:ab:64:04:09:3c:2a:60:20:e8:f8:04:
81:d0:77:01:d3:75:c8:3c:80:18:fb:ae:a3:74:34:
15:59:d1:ce:7d:16:4a:13:5d:6a:05:9d:c1:2e:5e:
7a:bb:8e:52:3d:91:d9:6a:79:fe:33:bc:74:8c:8e:
12:2c:39:89:52:45:bc:25:d7:6e:e2:c7:b0:2a:c0:
22:d8:6d:b2:df:ec:b5:e7:41:0d:b1:ff:22:c9:e8:
aa:e0:9e:af:30:84:06:7c:89:3e:d4:14:35:f5:2e:
1b:f6:78:43:2b:74:99:19:e5:9f:ba:7d:8c:a6:92:
a2:19:a5:48:2f:22:2d:b2:9d:1f:df:2f:fe:a0:30:
c7:73:1d:2f:f3:8f:86:64:08:ac:31:4b:5f:a9:8a:
d7:cc:37:d4:ed:84:af:dc:2e:9f:52:d1:e3:d3:d5:
13:1a:e4:72:0f:b8:71:c2:66:27:b6:7a:ab:09:99:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:8F:BA:35:80:D6:5E:DD:E1:BB:65:5B:9F:D8:3D:E7:16:24:FA:6B
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/_Y-6NYDWXt3hu2Vbn9g95xYk-ms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.190.0/24
Signature Algorithm: sha256WithRSAEncryption
59:15:2d:00:d0:40:eb:b1:8e:31:7f:8b:65:c0:2e:82:a5:9b:
c3:92:a1:3a:be:5b:47:e9:f2:ed:06:3a:48:a6:7c:e7:fe:0e:
7b:b8:8d:8a:2d:99:49:09:a1:c1:27:6b:9d:3e:af:bb:16:17:
e7:56:34:d9:fb:42:a6:9a:49:02:57:57:b8:4d:b2:82:a5:90:
ba:e1:0d:d6:63:b7:1b:7d:6b:20:d4:e3:df:da:68:bf:c3:21:
a4:ee:b0:35:ef:ae:c6:84:12:89:6f:2c:59:39:4a:1e:1e:d6:
3f:37:5f:80:7b:ae:dd:18:ff:66:69:de:49:a6:75:f4:f8:d1:
a8:bd:94:b0:4b:21:c3:30:b8:de:2f:17:a6:e5:9f:cc:4d:ac:
85:d2:74:83:2c:0c:6d:d4:85:6e:cc:59:bb:ca:5b:f9:c4:00:
68:62:ff:c7:ab:54:af:fe:4f:07:db:bc:25:9f:f4:9d:48:b0:
f7:76:88:cb:28:21:56:4e:42:ac:2e:9e:3a:9d:6d:5f:e8:9f:
4f:c3:f5:aa:fa:e0:4d:e9:9c:b8:51:49:29:60:dd:64:c8:7e:
f2:01:30:72:0b:8b:ca:82:15:31:72:c3:2a:e9:b1:a7:e1:cb:
95:8e:4f:ea:b6:e9:a7:74:94:e5:79:9d:b7:56:b4:2d:13:10:
76:f2:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 03:39:30 2024 by rpki-client on console-fra.rpki-client.org