Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8lYa4ONo7GKcx9aFJOgqFZftVHs.roa
File: 8lYa4ONo7GKcx9aFJOgqFZftVHs.roa (raw, json)
Hash identifier: yKQA/hqfgafmRvDLHuYlnMkfGDSgi3FErtxoYr0FjpI=
Subject key identifier: F2:56:1A:E0:E3:68:EC:62:9C:C7:D6:85:24:E8:2A:15:97:ED:54:7B
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AFB53951D56E4133EFEB284B97065
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8lYa4ONo7GKcx9aFJOgqFZftVHs.roa
Signing time: Mon 01 Jan 2024 18:30:51 +0000
ROA not before: Mon 01 Jan 2024 18:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212816
IP address blocks: 194.102.184.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:fb:53:95:1d:56:e4:13:3e:fe:b2:84:b9:70:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f2561ae0e368ec629cc7d68524e82a1597ed547b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:1b:b7:f2:4b:6f:33:1e:c7:02:5f:40:79:ed:
dd:b0:d9:7d:84:59:18:fe:e5:f0:11:d1:aa:5a:93:
da:76:98:82:99:4b:5a:2f:a5:ca:03:6d:1f:f8:38:
e8:3f:01:20:e1:0d:5b:3a:a2:90:74:d4:8d:f0:04:
21:e0:f4:b3:fd:5e:4a:96:a4:ec:a2:ff:01:07:f8:
cb:0e:84:ce:e4:45:21:f4:bc:1f:a5:70:be:34:d7:
2f:e1:6c:63:cc:42:a8:cf:b6:bc:e2:fc:50:02:88:
dd:d1:3a:53:4b:84:a8:bb:b4:27:c8:e6:66:97:fb:
39:8c:4b:08:ff:d8:a6:a8:b7:62:a8:f1:33:d6:93:
c1:d5:f6:06:ba:20:c8:1a:43:e1:0b:fc:8e:b1:82:
fa:64:b0:33:74:af:58:47:16:41:a4:b4:8d:9d:5c:
a4:22:86:88:42:99:25:57:fb:4c:1f:38:fb:88:1a:
72:8b:7a:b9:08:21:a3:d3:b4:42:f1:b2:2e:7b:cb:
d9:41:17:e5:9b:9c:8b:c3:6a:df:46:39:b9:a9:8f:
f7:1f:f3:da:a8:16:5c:90:ba:40:43:25:3e:19:03:
60:0a:be:17:5a:f9:ae:ad:c9:8d:9b:dd:15:fc:90:
29:7d:b3:0b:ba:d0:1f:03:87:ce:6f:6b:55:1b:55:
75:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:56:1A:E0:E3:68:EC:62:9C:C7:D6:85:24:E8:2A:15:97:ED:54:7B
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/8lYa4ONo7GKcx9aFJOgqFZftVHs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a8:e1:4b:0f:43:f2:7d:5b:3e:73:02:c5:e4:d0:71:7c:81:11:
6d:18:61:5f:8b:0e:6f:52:8a:c4:17:ea:1e:f4:e5:7f:5d:e4:
3f:36:44:08:c6:3f:c4:bf:5c:95:80:46:e5:f3:9a:16:aa:18:
68:18:cf:cf:13:06:93:87:9e:40:03:8b:e5:1a:25:c9:46:79:
a7:ea:de:01:59:91:0d:c6:05:9b:f3:e9:c2:e8:60:21:24:99:
f2:8f:2a:52:a5:06:5e:95:dd:b3:01:e1:d1:3f:f9:2a:0d:d9:
dd:b3:3c:96:62:59:d3:d0:35:d7:80:a0:40:91:68:a8:d4:87:
6e:1b:90:4e:d7:78:53:2a:19:22:d4:66:2f:63:6b:2d:0e:06:
c6:d6:32:1e:b0:77:1c:4b:0f:01:96:1b:cd:40:e2:94:06:00:
47:a3:43:8b:8e:cd:dc:fb:8a:d8:cb:be:c3:4e:c9:77:7c:c9:
05:44:a8:d5:4c:ac:36:65:93:23:08:5d:c0:9c:45:5f:58:06:
f4:17:6b:66:89:8a:32:09:37:32:29:94:9c:ff:49:79:c0:6f:
be:55:06:0b:ea:c9:7c:a7:a5:62:44:f0:06:94:4f:65:64:bd:
33:8e:c5:90:4f:b1:c3:03:e9:fd:68:17:6c:96:f0:04:88:e2:
7b:3a:31:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:01:28 2024 by rpki-client on console-ams.rpki-client.org