Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/cnG9KNUJIN1BQR6YDVq_sHLztns.roa
File: cnG9KNUJIN1BQR6YDVq_sHLztns.roa (raw, json)
Hash identifier: 63j7FGQ1z6KZcbbtwNL0q01PVly1yLAxClo8Wzo2JKY=
Subject key identifier: 72:71:BD:28:D5:09:20:DD:41:41:1E:98:0D:5A:BF:B0:72:F3:B6:7B
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018F51BAF390498811595F742F651A4FCCF8
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/cnG9KNUJIN1BQR6YDVq_sHLztns.roa
Signing time: Tue 07 May 2024 06:25:57 +0000
ROA not before: Tue 07 May 2024 06:25:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200019
IP address blocks: 217.156.64.0/24 maxlen: 24
217.156.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:51:ba:f3:90:49:88:11:59:5f:74:2f:65:1a:4f:cc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: May 7 06:25:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7271bd28d50920dd41411e980d5abfb072f3b67b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:de:45:8d:a7:e6:d6:dd:7b:4a:67:2a:05:0a:
46:5e:1a:24:db:fe:a8:f5:18:03:0e:46:c7:b0:95:
f4:ea:51:a7:d2:e2:5f:a6:5a:0d:6a:d4:67:c5:ef:
dc:e6:4a:5e:05:02:cb:10:15:3b:1e:f5:ff:69:77:
da:24:95:8c:c3:7c:a9:19:d5:86:ad:e7:6a:14:2d:
d6:37:ff:4e:a4:06:81:83:cc:6a:7d:e7:85:51:59:
e2:23:23:6e:ff:0e:c4:19:c5:65:dc:f6:7a:e2:a5:
8c:e1:4c:cf:c9:d7:ca:ae:26:66:0b:02:42:7b:91:
97:1f:10:af:5b:65:49:db:e8:e4:88:3d:1f:20:e2:
1a:cd:06:a4:c4:04:d2:da:96:c5:3e:05:a1:97:7e:
3e:f1:a3:c9:e4:50:74:b2:99:58:f4:06:57:92:3b:
d7:ca:a0:2d:99:c5:b6:b8:ae:4f:a0:b5:42:62:2d:
0d:9b:53:29:d8:7c:04:12:89:0f:94:50:f1:4c:3f:
8a:79:c7:13:0e:32:33:67:5d:1f:f1:36:7f:be:bc:
66:1e:40:ea:2e:b1:c4:b6:19:49:c2:77:eb:cd:bb:
bd:87:e1:1f:b0:10:91:eb:d9:87:1e:c0:35:3f:d6:
0d:4e:61:8f:0c:24:d9:db:70:b6:e0:76:09:f0:1b:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:71:BD:28:D5:09:20:DD:41:41:1E:98:0D:5A:BF:B0:72:F3:B6:7B
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/cnG9KNUJIN1BQR6YDVq_sHLztns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.156.64.0/23
Signature Algorithm: sha256WithRSAEncryption
66:6b:77:e5:55:a3:d1:11:ed:20:e2:8a:13:30:40:62:18:2a:
43:c9:4e:71:99:43:b0:88:c7:c0:b2:cf:cd:05:df:8d:6f:88:
8e:73:82:3f:44:24:8d:49:2f:0c:a8:2c:17:1a:03:36:f9:08:
ef:d8:0e:31:92:a6:c8:4b:0d:3e:e6:b6:2c:b8:5a:29:55:97:
3d:5d:1f:23:6f:7a:5d:f1:a8:96:a7:b1:a3:7a:ec:50:3a:c6:
90:dd:c6:a4:55:ea:60:97:68:5f:d5:78:dd:d1:f8:11:c7:1f:
4b:1a:85:d6:e7:f1:88:0c:b8:ae:de:13:64:25:42:00:f5:68:
80:89:f0:cf:9c:94:5a:81:8e:bc:f6:84:9c:2b:3b:c1:34:38:
4d:26:56:8c:30:a5:c0:39:9f:42:4c:02:bd:04:0e:63:be:38:
ff:56:27:f2:e9:12:2b:03:22:49:c4:86:46:7c:3a:74:c3:dc:
db:63:c3:31:e1:09:13:0f:b2:6e:d3:30:76:57:a1:64:63:a2:
93:c4:e9:10:d5:af:bb:89:c3:be:ea:5a:76:c2:b6:a2:05:b5:
96:e9:a8:c0:db:91:fc:3a:34:23:48:56:76:97:19:4b:d9:20:
b6:06:e5:a4:23:09:b9:68:42:53:bb:2e:b1:b9:10:1c:02:d8:
d2:12:89:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 16:08:46 2024 by rpki-client on console-fra.rpki-client.org