Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/T5Y72OyoFncZu7t5ogm8mZCiD34.roa
File: T5Y72OyoFncZu7t5ogm8mZCiD34.roa (raw, json)
Hash identifier: nQBSWFce0A8SbMiQbz0kRsgebhgDIyKqn1c5rHHg0yQ=
Subject key identifier: 4F:96:3B:D8:EC:A8:16:77:19:BB:BB:79:A2:09:BC:99:90:A2:0F:7E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AEE1CE33F6C3A310A1BADE550FE7C
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/T5Y72OyoFncZu7t5ogm8mZCiD34.roa
Signing time: Mon 01 Jan 2024 18:30:48 +0000
ROA not before: Mon 01 Jan 2024 18:30:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 57136
IP address blocks: 193.226.118.0/24 maxlen: 24
217.156.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:ee:1c:e3:3f:6c:3a:31:0a:1b:ad:e5:50:fe:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4f963bd8eca8167719bbbb79a209bc9990a20f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:7d:ec:99:6d:6b:0f:28:8f:d2:38:cc:4c:fd:
e2:74:5e:8f:c2:4f:26:c1:20:e9:53:20:e2:34:c4:
40:f1:97:cc:ba:19:6e:9a:69:4d:49:5e:53:88:e6:
38:33:9f:0e:fd:89:a6:d7:8e:bf:df:1e:a6:c5:2f:
28:c6:92:03:20:a1:21:76:e6:ee:52:1f:f0:3b:25:
ff:b7:a9:03:de:24:0a:5b:ca:e3:ed:47:cf:d3:7e:
ac:b2:13:f8:7a:ab:b4:53:3a:2a:fd:8f:65:64:ac:
89:6d:94:04:73:3d:f4:d9:77:de:52:ec:e0:17:7b:
22:b1:5c:d2:af:b9:a7:47:cb:74:2c:ad:73:52:79:
28:86:16:e6:91:be:59:b4:fa:87:10:57:36:24:2f:
b7:f3:f8:bf:e3:25:8b:2a:9e:d9:91:06:ca:b6:5b:
b3:47:25:29:d4:15:a6:d8:6c:7e:1c:35:24:f6:21:
b2:f2:2d:00:08:2a:b0:0e:9e:5a:f8:6a:63:14:a8:
2c:4f:8e:fb:b4:dd:3c:ec:cc:7b:5b:3d:97:6a:3a:
08:90:ec:f8:f3:be:20:c0:dd:dc:fa:33:28:17:b7:
55:64:af:98:9e:d8:db:8b:c1:b1:8d:1f:3b:0c:1f:
5e:a1:5d:6d:12:eb:bd:e1:79:07:f2:41:70:7b:6f:
74:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:96:3B:D8:EC:A8:16:77:19:BB:BB:79:A2:09:BC:99:90:A2:0F:7E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/T5Y72OyoFncZu7t5ogm8mZCiD34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.226.118.0/24
217.156.79.0/24
Signature Algorithm: sha256WithRSAEncryption
46:8f:39:d6:41:85:ce:f3:be:a5:67:8b:51:7b:2c:57:4d:51:
46:e4:99:cf:8b:7c:b2:f3:99:a1:d7:6d:43:1a:93:5f:93:e2:
97:9f:0f:2e:11:29:7c:3c:bb:7a:da:5f:c2:8a:8b:46:13:58:
28:66:31:a5:8c:35:c8:05:63:92:ff:55:ab:35:d6:bf:95:5d:
67:0b:e5:55:cc:b2:88:96:46:87:75:4b:42:d8:80:58:4e:39:
ce:12:44:27:d1:4d:e2:3d:d3:45:78:95:af:ff:00:9b:ab:39:
24:f6:3b:9d:34:74:b0:1e:72:e4:0c:ce:06:0b:2e:02:9f:b1:
9e:0b:a5:f0:36:39:fe:bf:bd:15:eb:14:9e:0d:62:9d:ff:92:
8a:0a:64:30:85:30:5b:2b:e0:40:57:89:75:4d:aa:cb:79:05:
d3:d7:f0:ea:4f:88:98:3f:32:84:7b:4a:be:95:8c:6c:83:c4:
2e:f2:7e:7d:33:54:46:54:d7:94:d2:9c:d1:71:4e:c8:f2:97:
92:0b:23:9c:ee:ca:d5:3a:fc:af:22:ba:0c:56:85:6b:cc:2a:
ac:c0:df:6a:54:91:e8:db:d3:ce:d0:e0:57:91:e0:af:0f:03:
7c:18:49:96:cc:cf:78:b0:44:ee:c8:84:20:56:11:4c:66:e0:
3b:c2:cb:63
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYzGSu4c4z9sOjEKG63lUP58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjQwMTAxMTgzMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Zjk2M2JkOGVjYTgxNjc3MTliYmJiNzlhMjA5YmM5OTkwYTIwZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhn3smW1rDyiP0jjMTP3idF6Pwk8m
wSDpUyDiNMRA8ZfMuhlummlNSV5TiOY4M58O/Ymm146/3x6mxS8oxpIDIKEhdubu
Uh/wOyX/t6kD3iQKW8rj7UfP036sshP4equ0Uzoq/Y9lZKyJbZQEcz302XfeUuzg
F3sisVzSr7mnR8t0LK1zUnkohhbmkb5ZtPqHEFc2JC+38/i/4yWLKp7ZkQbKtluz
RyUp1BWm2Gx+HDUk9iGy8i0ACCqwDp5a+GpjFKgsT477tN087Mx7Wz2XajoIkOz4
874gwN3c+jMoF7dVZK+Yntjbi8GxjR87DB9eoV1tEuu94XkH8kFwe290ZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFE+WO9jsqBZ3Gbu7eaIJvJmQog9+MB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvVDVZNzJPeW9GbmNadTd0NW9nbThtWkNpRDM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAweJ2AwQA
2ZxPMA0GCSqGSIb3DQEBCwUAA4IBAQBGjznWQYXO876lZ4tReyxXTVFG5JnPi3yy
85mh121DGpNfk+KXnw8uESl8PLt62l/CiotGE1goZjGljDXIBWOS/1WrNda/lV1n
C+VVzLKIlkaHdUtC2IBYTjnOEkQn0U3iPdNFeJWv/wCbqzkk9judNHSwHnLkDM4G
Cy4Cn7GeC6XwNjn+v70V6xSeDWKd/5KKCmQwhTBbK+BAV4l1TarLeQXT1/DqT4iY
PzKEe0q+lYxsg8Qu8n59M1RGVNeU0pzRcU7I8peSCyOc7srVOvyvIroMVoVrzCqs
wN9qVJHo29PO0OBXkeCvDwN8GEmWzM94sETuyIQgVhFMZuA7wstj
-----END CERTIFICATE-----
Generated at Mon Jun 3 08:58:25 2024 by rpki-client on console-fra.rpki-client.org