Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/JY_zqahBtL6K5fU2TmogafRf9eE.roa
File: JY_zqahBtL6K5fU2TmogafRf9eE.roa (raw, json)
Hash identifier: FQAijQm51+0EufUa0kU3UpPA/SVjCAO7luM4OeIl5eg=
Subject key identifier: 25:8F:F3:A9:A8:41:B4:BE:8A:E5:F5:36:4E:6A:20:69:F4:5F:F5:E1
Certificate issuer: /CN=893a58124ce9cc43783955255e7f583905cdb14e
Certificate serial: 018E18EABF2CAED5D247D75617F48E361E6E
Authority key identifier: 89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/JY_zqahBtL6K5fU2TmogafRf9eE.roa
Signing time: Thu 07 Mar 2024 12:37:01 +0000
ROA not before: Thu 07 Mar 2024 12:37:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209393
IP address blocks: 193.187.156.0/23 maxlen: 24
193.187.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 09:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:18:ea:bf:2c:ae:d5:d2:47:d7:56:17:f4:8e:36:1e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=893a58124ce9cc43783955255e7f583905cdb14e
Validity
Not Before: Mar 7 12:37:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=258ff3a9a841b4be8ae5f5364e6a2069f45ff5e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:3c:9c:19:72:79:46:29:ca:fc:67:74:6c:6f:
c7:de:88:01:a5:8c:01:84:f4:be:64:85:2e:ab:da:
9a:36:03:2c:21:42:16:54:b2:79:b7:a6:d6:16:56:
a1:35:8f:cb:f6:9c:f0:58:36:ba:c4:c3:c9:12:61:
e9:3e:b7:ce:ad:3e:c9:97:a1:7b:19:e3:e7:c3:96:
99:d7:6e:4c:ff:74:c9:ce:c4:ba:fa:97:7e:2a:5b:
74:d0:9f:a0:73:80:53:88:5f:83:19:c3:85:e4:24:
b8:61:cc:74:35:bb:70:e5:ca:22:42:e8:68:e7:35:
ab:a0:dd:f6:bb:f4:d9:5f:e9:05:78:9f:ab:54:83:
49:d7:e8:0a:62:cf:0b:fa:57:56:e1:01:be:c8:63:
ea:04:71:10:f0:eb:a1:87:c6:38:d8:5a:49:46:aa:
eb:37:33:bf:49:6c:8c:04:15:53:43:97:12:3e:ff:
e4:6e:f6:d3:e8:51:05:5e:ac:52:68:79:00:7a:11:
4a:e4:4e:28:15:03:74:f3:95:dd:61:4b:a3:15:53:
cd:d3:31:a1:61:fe:73:54:8b:17:f9:a3:a7:b3:a2:
fc:14:b9:86:0a:95:55:5f:10:aa:ca:25:ca:81:81:
2c:f1:60:ae:55:db:0a:5c:45:c1:53:38:ce:b2:29:
a7:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:8F:F3:A9:A8:41:B4:BE:8A:E5:F5:36:4E:6A:20:69:F4:5F:F5:E1
X509v3 Authority Key Identifier:
keyid:89:3A:58:12:4C:E9:CC:43:78:39:55:25:5E:7F:58:39:05:CD:B1:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iTpYEkzpzEN4OVUlXn9YOQXNsU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/JY_zqahBtL6K5fU2TmogafRf9eE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/a352ba-c228-4a15-9168-303b8bc28bfa/1/iTpYEkzpzEN4OVUlXn9YOQXNsU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.187.156.0-193.187.158.255
Signature Algorithm: sha256WithRSAEncryption
31:8e:6e:84:d5:c4:2f:87:ed:2a:1f:32:46:45:a6:3b:16:71:
9f:97:00:db:8d:b8:fa:25:d8:25:af:70:b8:70:54:d6:0c:5c:
73:f1:5b:28:6c:45:09:29:3d:2e:b8:d2:cf:2c:db:7c:c9:f6:
53:b6:31:36:5a:5a:02:1b:a2:29:f6:15:e5:26:b8:cf:f0:46:
ad:1e:15:2e:fa:a0:e6:16:1f:dd:51:68:7d:0e:41:db:d0:71:
9f:03:c8:f6:2a:70:ec:94:52:11:b8:73:cc:95:18:3f:ed:55:
2f:85:4e:19:e8:3e:38:b0:be:31:9d:1d:9f:02:f8:77:c6:3e:
60:a1:94:74:2e:e6:36:76:ff:ce:f9:1c:9d:13:21:e9:9b:65:
f5:e3:bb:f8:28:ee:a5:a0:13:06:cc:d4:69:e4:cd:86:ee:96:
2b:cd:40:23:16:19:db:42:b5:0f:54:89:91:52:2e:d7:d9:27:
dc:71:51:80:70:5f:a5:7c:be:af:29:2f:bb:73:3b:9a:4a:18:
75:ae:f3:3e:92:8d:8c:da:59:34:41:26:d4:41:ff:55:28:25:
aa:52:04:47:06:c9:e1:67:cd:05:3e:1c:93:25:d8:26:55:b5:
a6:1a:24:51:b6:a5:a5:d4:ab:c4:09:4e:52:26:7a:ed:5f:a5:
4d:8c:55:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 12:25:37 2024 by rpki-client on console-ams.rpki-client.org