Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9z-yR-4VdT86ikVlrw8QQlO4mVQ.roa
File: 9z-yR-4VdT86ikVlrw8QQlO4mVQ.roa (raw, json)
Hash identifier: iEgvWzDKZa9cFr2QLOS/eRPcfy6ZPwBLwj5l6pzOyA8=
Subject key identifier: F7:3F:B2:47:EE:15:75:3F:3A:8A:45:65:AF:0F:10:42:53:B8:99:54
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AF7C2550D0DE84F943596ABC1493C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9z-yR-4VdT86ikVlrw8QQlO4mVQ.roa
Signing time: Mon 01 Jan 2024 18:30:51 +0000
ROA not before: Mon 01 Jan 2024 18:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210343
IP address blocks: 193.230.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f7:c2:55:0d:0d:e8:4f:94:35:96:ab:c1:49:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f73fb247ee15753f3a8a4565af0f104253b89954
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:64:41:bd:7a:53:84:69:79:57:de:88:cc:df:
72:39:0a:6a:25:4a:50:25:09:29:52:be:54:29:43:
57:83:8d:89:ca:c3:1d:79:11:3b:fc:93:a1:2f:6e:
f8:97:5d:87:c1:91:eb:4e:54:d3:7d:a2:c5:23:6d:
de:20:da:b3:92:51:74:39:69:2f:76:2b:3b:36:b3:
7e:3d:ec:46:02:aa:05:83:e6:e1:c1:37:b9:77:a1:
64:4f:d0:9e:46:4d:2c:0c:b4:e6:19:39:40:2c:fa:
29:7a:b0:81:c7:03:4a:88:a8:49:48:f4:49:fb:57:
20:5f:20:9a:43:a1:02:54:55:95:35:e2:65:12:e4:
e0:1c:be:75:48:49:53:04:1b:3e:c0:c6:5f:64:ea:
f8:5e:39:78:b5:73:52:57:31:27:f2:d0:8d:c4:df:
11:1b:ad:72:e2:8b:de:39:5c:7c:9d:d8:82:31:4c:
12:3d:a1:55:ac:93:3c:24:4b:fb:02:55:95:f4:5c:
51:d8:ab:d1:02:ce:d7:0b:8c:0b:bd:5a:ce:20:ab:
5c:db:d2:0a:51:f6:45:a1:24:24:c5:5e:58:e6:19:
66:2a:e1:3c:9a:c2:7c:0c:e3:c7:a5:45:11:34:3d:
59:c0:9f:d8:08:7b:3d:5d:33:22:ea:69:04:b6:91:
f2:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:3F:B2:47:EE:15:75:3F:3A:8A:45:65:AF:0F:10:42:53:B8:99:54
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/9z-yR-4VdT86ikVlrw8QQlO4mVQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.206.0/24
Signature Algorithm: sha256WithRSAEncryption
08:98:36:05:4e:c1:e5:96:bd:a7:54:6f:40:92:2f:ab:a7:80:
2a:07:e9:dc:13:17:6e:ff:4a:3e:be:ae:c5:9d:ef:42:14:00:
59:cf:85:84:89:96:08:ec:b7:53:cd:6c:43:c9:3f:e9:d5:3c:
e6:59:49:53:e2:0b:3e:a4:b7:d0:7f:9a:b6:95:00:df:9f:03:
ed:08:92:ab:f1:cf:a5:95:be:8a:12:d8:bd:45:3b:0a:a2:d9:
22:83:9a:b6:a1:c9:c0:46:c3:f0:bd:a8:1e:80:b6:6b:79:0b:
d3:20:14:26:bb:62:0c:d5:e3:18:6b:67:58:e2:41:88:97:f5:
08:41:95:15:2d:8b:b5:4d:53:1e:bc:3d:fd:4e:02:1f:ab:30:
15:00:55:97:fc:a5:7e:92:df:29:f6:9b:5e:f3:63:c4:43:7c:
a3:3f:8a:49:22:21:c3:07:51:98:f0:17:54:e6:19:cd:07:29:
61:3d:fe:d0:9f:71:3f:15:cf:c3:8a:94:fa:1d:5d:de:18:65:
e3:82:70:e2:f8:76:5a:0e:8a:fb:5f:f8:42:93:bc:86:79:c9:
e2:5d:ad:31:a6:9c:df:c4:b8:35:82:ae:0e:14:74:c5:ed:64:
5d:14:09:8b:36:90:8b:bf:1a:b4:fa:b6:33:94:18:b5:c4:4a:
a8:75:14:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 23:01:28 2024 by rpki-client on console-ams.rpki-client.org