Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FserYg8Za2eIuLOLBJ97_UPPMyw.roa
File: FserYg8Za2eIuLOLBJ97_UPPMyw.roa (raw, json)
Hash identifier: 0BY25eNTiQ5YYoh70X5pZoqqDe7uWsNYu5emWYo40zo=
Subject key identifier: 16:C7:AB:62:0F:19:6B:67:88:B8:B3:8B:04:9F:7B:FD:43:CF:33:2C
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64ADD2E32A0A430EBA3BCEC6B585C68
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FserYg8Za2eIuLOLBJ97_UPPMyw.roa
Signing time: Mon 01 Jan 2024 18:30:44 +0000
ROA not before: Mon 01 Jan 2024 18:30:44 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21294
IP address blocks: 217.156.85.0/24 maxlen: 24
217.156.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 03:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:dd:2e:32:a0:a4:30:eb:a3:bc:ec:6b:58:5c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:44 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16c7ab620f196b6788b8b38b049f7bfd43cf332c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:86:5e:0e:4a:8c:71:df:21:c0:c3:ab:19:1a:
29:7d:14:61:04:5d:28:5d:58:4d:f6:e9:66:ec:89:
dd:e8:ce:57:56:be:d8:d8:74:82:1c:4e:ff:61:12:
34:68:4b:9b:9c:1c:ea:ce:06:5b:5b:71:6c:28:5d:
0e:aa:30:ed:07:75:85:2f:22:9b:80:d0:9c:3f:89:
ff:ad:60:b5:b5:45:06:17:96:16:c0:c0:3a:93:d8:
9b:8a:76:b7:39:27:a2:7e:ce:71:4d:1a:8d:3d:9d:
7b:6f:89:af:04:a2:0c:a4:db:db:db:48:eb:56:c4:
f6:be:ed:9e:0c:ce:e6:84:82:a7:e9:b9:61:40:9d:
c8:1c:2b:9b:bb:9e:ff:f6:b8:76:19:4b:27:9b:3a:
43:6c:8e:a9:79:dc:c9:af:f8:33:6c:5b:10:77:7d:
16:29:22:5c:94:f2:07:ea:c5:7a:7a:09:80:1c:a8:
4a:bb:e2:2f:73:79:37:52:ea:c0:17:ef:4d:f3:0b:
95:71:5f:99:1e:9f:bf:4a:14:12:fe:4f:53:ac:22:
3c:0a:7e:89:9e:e4:b8:2a:8f:b4:b9:33:b0:2d:76:
f0:2e:be:e1:35:ac:31:37:db:86:31:9c:97:46:b5:
ba:05:ef:54:b4:58:03:98:26:4b:71:05:ce:58:01:
9d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C7:AB:62:0F:19:6B:67:88:B8:B3:8B:04:9F:7B:FD:43:CF:33:2C
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/FserYg8Za2eIuLOLBJ97_UPPMyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.85.0/24
217.156.99.0/24
Signature Algorithm: sha256WithRSAEncryption
69:e9:9c:63:14:ae:65:a1:e8:75:03:38:c3:94:64:b3:a5:91:
31:0b:2e:b2:e7:18:7b:c6:41:d6:ac:63:ec:d8:27:f4:ce:cb:
43:f9:33:f6:ff:24:b5:d3:b7:23:00:0e:fe:a8:95:86:32:30:
21:a1:ae:b0:e8:ae:bb:26:89:30:d2:e2:42:ac:24:68:a1:43:
7c:0a:46:fe:61:d9:a1:bc:a6:c2:09:03:64:7d:ef:81:83:f0:
37:cc:05:14:e6:fa:7f:0d:bd:f1:6b:87:5f:fc:dc:c4:0b:b3:
e5:76:95:aa:c3:86:7d:8c:4e:1e:cf:d1:65:c7:97:ae:36:49:
4b:05:ee:79:82:2a:76:5e:b9:1d:d8:da:16:c6:0a:09:63:b8:
6f:bc:f5:a6:92:4b:8a:c3:79:56:27:53:b4:4a:43:5a:cc:f7:
37:63:c5:e8:ab:8e:9f:75:7e:11:1d:ce:9b:74:8c:c0:e1:52:
e1:21:65:03:3c:14:2a:4d:dd:6b:15:36:58:61:c6:16:61:5f:
90:37:ad:02:b8:85:53:a3:11:02:7c:86:35:57:6e:9d:ce:b5:
e2:05:d4:25:ae:c9:22:e5:0a:f4:6c:64:9a:bf:b6:f6:32:15:
7d:72:38:a6:df:de:b1:ff:35:19:30:41:34:eb:38:50:8b:e2:
4e:52:08:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 12:18:34 2024 by rpki-client on console-ams.rpki-client.org