Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/ymmwU-S0s2qZKMYgvnfNrjAdQUQ.roa
File: ymmwU-S0s2qZKMYgvnfNrjAdQUQ.roa (raw, json)
Hash identifier: roWsHVRN5kmuNyxoDQBZjSEiQoZVe196TBlViKY9irA=
Subject key identifier: CA:69:B0:53:E4:B4:B3:6A:99:28:C6:20:BE:77:CD:AE:30:1D:41:44
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 018CCA9972054511721737399F9A833406CF
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/ymmwU-S0s2qZKMYgvnfNrjAdQUQ.roa
Signing time: Tue 02 Jan 2024 14:35:02 +0000
ROA not before: Tue 02 Jan 2024 14:35:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20860
IP address blocks: 193.7.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.mft
rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Apr 2024 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:99:72:05:45:11:72:17:37:39:9f:9a:83:34:06:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Jan 2 14:35:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca69b053e4b4b36a9928c620be77cdae301d4144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:53:fb:ad:77:da:08:59:ca:f0:47:29:da:bc:
aa:4c:4e:44:81:72:c8:b5:04:f6:92:2c:da:43:bf:
6a:a1:45:48:30:53:03:40:b3:99:e9:e4:4a:20:93:
37:7d:4d:01:f7:dd:eb:96:86:b0:40:10:1b:74:b9:
90:00:de:84:8c:14:7c:b7:de:39:9d:27:f1:d6:41:
e6:8b:45:06:a2:47:bb:47:8d:80:5d:0f:d0:e2:c2:
0f:18:83:60:9f:c4:0f:e9:42:7f:6f:cf:b0:e0:0d:
a3:9e:b1:69:7d:52:c2:ed:b3:da:fd:b9:ea:36:be:
2e:93:62:02:f7:8e:65:ed:e8:6f:1a:0c:fc:c2:dd:
15:f6:df:33:3e:78:5c:48:57:a2:cb:d0:aa:02:29:
94:22:e6:f0:3a:0f:ee:e6:3c:34:a2:ba:cb:cc:c4:
d6:c1:2e:f6:bb:5b:49:42:dc:44:fb:b8:9f:1f:f9:
be:dc:ea:71:38:10:56:8a:b1:9e:2e:ca:f1:cd:38:
b1:fb:d1:7c:bc:2e:9e:b1:24:23:1e:02:38:c7:cf:
5a:6a:ba:d7:74:e3:ec:9e:71:2a:69:7c:2d:cc:aa:
fa:3f:3d:7c:59:7a:de:d7:e7:60:65:cd:ec:0e:9e:
30:72:a2:bb:4b:f8:61:11:0e:14:45:61:67:c8:f3:
96:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:69:B0:53:E4:B4:B3:6A:99:28:C6:20:BE:77:CD:AE:30:1D:41:44
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/ymmwU-S0s2qZKMYgvnfNrjAdQUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.7.195.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:ab:7b:a8:0a:e1:f4:6f:57:d8:e7:ef:19:e1:4a:5c:4d:00:
74:8c:5f:1d:c8:d4:0d:e2:3d:e9:2c:37:c7:3d:15:37:b8:ec:
62:ea:19:54:94:6d:a3:4f:b1:8d:3a:99:c4:a7:44:45:ff:13:
2e:c0:07:29:de:42:ae:70:11:04:7c:a0:46:39:88:a5:5d:e5:
5a:1d:9b:3a:0b:05:46:bd:39:16:34:41:dd:7e:81:81:f8:26:
58:38:67:af:ff:53:82:87:9e:04:be:1e:1d:cb:f2:ed:02:a5:
11:51:56:ac:44:d8:f0:43:db:f4:19:ca:20:1c:93:09:b7:3b:
86:01:5f:b7:9d:7d:70:01:0b:ee:d8:fe:eb:8f:1a:81:a2:ab:
b6:ef:1b:ae:fc:a3:8d:07:8b:79:b3:7e:cc:fb:85:0f:79:02:
73:94:fc:6b:ee:8e:2b:c1:a8:4d:69:de:b6:50:30:d8:6b:e3:
fd:f8:a5:6a:50:46:b5:70:35:63:43:04:d4:eb:b7:f8:05:50:
22:b0:34:40:6f:68:1f:de:c1:45:eb:00:0c:7f:67:40:49:e2:
06:5d:4e:0c:a6:30:2d:35:4e:67:60:1f:11:ca:64:38:ac:81:
2a:5c:8b:ab:8c:9f:b4:b6:8c:16:a0:0a:9c:bf:fa:07:21:1a:
87:92:e5:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 10:11:42 2024 by rpki-client on console-ams.rpki-client.org