Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ydjUXp79rae7vK_b1brCafnsM74.roa
File: ydjUXp79rae7vK_b1brCafnsM74.roa (raw, json)
Hash identifier: Os+gN22LkUeJ5mwWVQepZTwfD9U+yfmCLzrPdFRq/4w=
Subject key identifier: C9:D8:D4:5E:9E:FD:AD:A7:BB:BC:AF:DB:D5:BA:C2:69:F9:EC:33:BE
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64AF86FA2D24D0E9450F9FF6B3E8EEF
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ydjUXp79rae7vK_b1brCafnsM74.roa
Signing time: Mon 01 Jan 2024 18:30:51 +0000
ROA not before: Mon 01 Jan 2024 18:30:51 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210822
IP address blocks: 193.230.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Jun 2024 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:f8:6f:a2:d2:4d:0e:94:50:f9:ff:6b:3e:8e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c9d8d45e9efdada7bbbcafdbd5bac269f9ec33be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:b4:b8:58:ee:1a:ec:8f:a3:d0:50:ce:b9:0f:
62:ad:98:bc:f1:db:b4:06:59:84:85:91:fb:70:ab:
e2:e7:8d:d7:85:14:78:2c:ea:3a:76:f2:38:ed:51:
6d:0d:da:1e:a3:67:4a:f5:74:24:e8:df:1d:86:0f:
c5:2f:48:f8:bd:04:62:69:e1:a0:a5:70:b2:2a:c0:
20:57:04:d5:7e:8e:e4:15:e0:0f:60:c9:01:94:35:
1b:4f:d1:dc:fb:61:08:a0:56:59:4e:b5:02:cc:7d:
d3:bc:b9:f0:63:c4:17:6e:c3:e3:1f:ad:b8:a1:cb:
01:d4:19:46:79:19:60:96:a4:ec:cc:e3:13:92:cc:
8f:54:bd:a3:c2:45:1f:62:08:02:7a:c8:1d:d5:93:
ef:c4:23:fd:03:a4:f7:97:0a:df:18:6c:e7:ac:fd:
e3:cf:52:fa:47:63:65:94:76:b6:aa:d8:c4:46:7b:
8b:4e:8d:c2:7c:22:b4:30:dc:1d:28:54:af:6e:11:
c9:52:ea:91:c8:82:2d:d1:89:e9:95:c7:9b:1a:4d:
0d:fa:e6:5f:8c:d0:86:18:07:5a:33:c0:db:c1:f2:
2b:f2:cd:d5:85:4f:9c:99:9c:ce:a4:0c:5d:a3:c9:
f9:ef:4d:ab:1a:52:7d:e8:c6:28:5b:b9:d5:d6:07:
13:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D8:D4:5E:9E:FD:AD:A7:BB:BC:AF:DB:D5:BA:C2:69:F9:EC:33:BE
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/ydjUXp79rae7vK_b1brCafnsM74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.230.133.0/24
Signature Algorithm: sha256WithRSAEncryption
af:8d:23:24:1f:e9:fa:e0:ec:a2:70:33:65:05:52:90:89:62:
34:97:dc:3b:7b:34:66:92:ca:de:a6:58:72:7d:c1:8d:fe:4e:
31:98:a1:8d:31:b0:71:35:e0:c7:4f:a6:87:dd:76:19:f0:8c:
4d:58:8f:90:67:5b:1f:04:65:b2:dd:a7:9c:0e:80:34:c1:56:
69:de:ce:fe:cf:3e:0c:56:21:c8:ae:c9:d9:be:d8:61:e1:11:
e7:4c:28:c3:1b:d7:da:fd:76:de:37:71:5b:5b:a4:a3:4b:92:
ac:27:ba:2a:ef:d8:61:83:f2:c4:de:2a:9f:3f:07:41:0b:72:
40:98:9b:99:a7:c1:b5:71:39:0e:d3:13:92:54:21:e7:53:b5:
56:fc:15:dd:f1:c3:25:05:a6:48:15:28:05:ab:bb:ce:0d:30:
de:2d:be:80:ef:35:9e:af:d8:e0:c2:bc:69:03:38:2c:76:2a:
e5:92:83:9b:eb:a5:de:8f:d6:72:70:4c:9e:2c:c8:ef:a4:88:
5e:ea:b2:52:e4:4d:24:4c:ce:40:dc:ea:03:9f:31:87:b0:05:
9e:13:9c:74:8c:a1:84:f9:70:61:d7:0f:8c:41:d3:6e:05:cb:
3e:7e:ff:71:75:44:0d:01:3a:8b:3d:f7:c3:7c:54:9c:0f:66:
0b:d5:e4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 3 10:13:11 2024 by rpki-client on console-ams.rpki-client.org