Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4iGeJSvjO96EbHdR2KHH2s2DnOw.roa
File: 4iGeJSvjO96EbHdR2KHH2s2DnOw.roa (raw, json)
Hash identifier: ByDfhxZKo0G8/pt1And5ahhLPa2LqvvslWVhdS89oS0=
Subject key identifier: E2:21:9E:25:2B:E3:3B:DE:84:6C:77:51:D8:A1:C7:DA:CD:83:9C:EC
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64ADD949907CA87379763DA90B045AB
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4iGeJSvjO96EbHdR2KHH2s2DnOw.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 24704
IP address blocks: 80.96.239.0/24 maxlen: 24
193.230.233.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:dd:94:99:07:ca:87:37:97:63:da:90:b0:45:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e2219e252be33bde846c7751d8a1c7dacd839cec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:f0:68:d7:a7:68:9b:a3:05:15:52:e4:d4:
ba:4a:07:f2:8f:ad:af:1d:f9:a3:18:37:1c:ef:ab:
72:39:17:4d:b1:47:78:05:71:1f:dc:ea:28:10:22:
73:e9:9c:da:a4:a2:45:2f:e9:87:51:05:08:4e:07:
d2:d0:b0:88:bd:d5:09:5f:35:e7:90:ce:43:39:8c:
08:fb:ac:b0:c6:68:f4:67:37:5a:03:04:b6:59:02:
c8:b0:33:02:9b:7e:86:6d:99:e8:8e:95:6c:c6:04:
94:1e:bb:16:b2:c2:70:0b:c6:e3:ff:fa:04:d6:58:
3b:70:dd:e2:04:c6:75:91:2c:d1:41:0d:bb:0f:b4:
8f:10:a6:aa:03:42:64:db:7d:a5:2b:07:c5:4c:f5:
62:8d:c8:9a:be:2e:24:85:9a:ef:96:80:99:90:63:
2f:4f:89:fd:a3:10:37:50:39:27:a6:c8:99:9d:14:
ef:d4:ae:52:39:a6:a3:5c:f1:8d:9d:df:f2:0d:a9:
ea:40:6e:2c:4c:9a:a9:53:fb:78:6d:ab:3c:28:8f:
94:2a:a7:cc:a4:16:57:e0:92:76:5f:68:e6:06:da:
1e:7c:32:b7:1d:89:d7:6d:26:1d:43:b7:3f:2c:8b:
f4:58:ec:17:8a:4a:2a:a9:6c:9a:20:47:e1:8a:b9:
db:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:21:9E:25:2B:E3:3B:DE:84:6C:77:51:D8:A1:C7:DA:CD:83:9C:EC
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/4iGeJSvjO96EbHdR2KHH2s2DnOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.239.0/24
193.230.233.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:9b:3d:0c:3a:4f:c3:3c:f6:75:fb:6f:53:0b:ce:c6:a5:7c:
cf:69:7b:cb:6e:2c:ac:40:36:20:fa:bf:43:66:aa:f1:53:7e:
45:90:c7:b4:5c:c3:27:d0:35:a4:9f:a4:df:9d:ed:f6:85:7e:
09:6a:1e:63:63:33:70:ea:e9:bd:51:7c:30:66:14:fd:d5:1e:
e3:98:3f:db:d0:e9:ea:f3:ef:6a:b2:db:3f:99:e5:1d:59:1d:
5f:92:7a:8e:cf:96:a9:11:ae:6e:3b:7a:a0:8f:e3:61:61:6b:
45:48:88:4d:ee:50:37:fc:07:ea:52:1b:c4:96:5e:c8:ea:65:
bc:03:5b:36:ee:52:8b:d9:28:2a:82:e3:38:9e:de:c4:e1:23:
a8:f4:78:80:4e:9a:a6:e8:34:06:6f:4e:47:39:b2:4a:a2:d1:
81:90:64:d4:fa:10:cb:7b:45:eb:b5:25:dd:92:e1:4f:09:b2:
22:a1:6f:e7:8f:ff:d7:f9:f3:2f:e1:f7:1d:a5:28:80:6c:e4:
4e:e5:2f:2b:bc:6b:0f:be:2b:1d:cb:db:b3:7c:b8:e5:bc:9d:
02:6e:33:75:cd:a9:c6:18:ba:42:b8:aa:e5:1d:1e:b3:ab:69:
17:cf:ab:df:02:f9:66:82:f5:b8:f9:01:2e:5f:71:d8:de:be:
fe:4b:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:28:50 2024 by rpki-client on console-fra.rpki-client.org