Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/YPoSnXLsNG9pn9IPz5l49Bf3oOo.roa
File: YPoSnXLsNG9pn9IPz5l49Bf3oOo.roa (raw, json)
Hash identifier: AjVBz5/KuYNkL9CuOf9COPCjvPS5yPwPiZlR6msNDbA=
Subject key identifier: 60:FA:12:9D:72:EC:34:6F:69:9F:D2:0F:CF:99:78:F4:17:F7:A0:EA
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 018CC8DFAA6206066B2295305225A5C2315C
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/YPoSnXLsNG9pn9IPz5l49Bf3oOo.roa
Signing time: Tue 02 Jan 2024 06:32:30 +0000
ROA not before: Tue 02 Jan 2024 06:32:30 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201814
IP address blocks: 193.107.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.mft
rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 May 2024 08:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:df:aa:62:06:06:6b:22:95:30:52:25:a5:c2:31:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 2 06:32:30 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=60fa129d72ec346f699fd20fcf9978f417f7a0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:22:3d:ac:56:85:45:ea:07:a3:6f:09:c0:08:
0f:47:7b:14:6e:18:bf:21:80:df:c0:99:e4:a4:52:
f9:f5:e2:ba:fd:4e:5d:cc:02:7d:10:1e:ac:f0:cb:
bc:68:01:9f:30:72:db:12:c1:33:78:1a:27:73:c3:
42:e1:30:4b:35:34:4c:01:b5:66:9f:42:ff:91:27:
83:4e:96:86:85:a4:01:b1:da:ec:07:f7:15:33:22:
3f:9b:80:57:72:0f:34:31:a8:0a:72:15:61:ab:84:
43:eb:28:16:f3:67:da:3c:66:36:14:86:63:53:5e:
d4:5b:b4:ea:7e:42:ee:bb:94:c7:92:51:16:bb:62:
f5:48:e4:37:24:ce:28:07:bf:ca:20:26:ac:08:c5:
1f:d5:64:fe:10:25:5d:9e:5c:51:da:4d:ed:c1:ad:
87:48:53:25:c1:d8:d6:6d:32:a0:bd:9f:12:54:52:
89:a2:eb:7a:d0:09:a4:ce:98:32:21:da:76:54:64:
19:84:8e:97:c9:68:c0:81:6d:fa:75:c9:54:c0:4d:
6e:96:d7:0c:5c:1a:56:c6:01:34:51:d4:88:2b:6d:
b2:14:b6:5e:87:68:48:3d:62:aa:6a:b6:6e:23:f3:
e1:97:1d:6c:d1:e7:cd:95:92:25:41:9f:ec:98:90:
be:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:FA:12:9D:72:EC:34:6F:69:9F:D2:0F:CF:99:78:F4:17:F7:A0:EA
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/YPoSnXLsNG9pn9IPz5l49Bf3oOo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.216.0/24
Signature Algorithm: sha256WithRSAEncryption
16:65:1b:06:cf:26:e6:fa:c1:f8:ac:6c:a5:c2:70:8a:d4:16:
eb:33:fa:27:e8:a6:88:18:c5:33:68:ac:fa:5f:c0:71:b8:e6:
b3:05:d0:58:f5:aa:b4:63:2c:f8:9c:ac:65:c8:e0:32:4f:68:
5e:31:b3:e0:c7:1d:32:33:71:e8:8b:8d:b4:a1:b9:58:20:41:
f4:ba:5e:a9:70:62:73:21:c9:95:c8:a9:fb:94:9b:06:48:28:
6a:59:ab:a6:f1:f7:23:65:5b:db:c1:5e:45:4b:1c:e7:7e:05:
f6:c3:1a:cc:79:66:7b:12:ec:fa:37:33:11:ca:81:90:96:e5:
91:33:5d:0b:b0:26:e0:cb:ac:44:cf:ec:34:75:bf:4f:06:31:
d1:17:5e:1e:92:40:c6:b4:d9:13:b0:11:3b:c7:32:4e:e8:c0:
a6:4c:6f:26:f6:17:fb:b6:52:96:55:d3:a5:e3:4a:56:b0:68:
f3:5c:1b:be:22:89:47:da:99:fb:05:44:ca:e2:72:74:a8:cd:
b2:00:29:a3:b0:7b:8e:32:95:32:33:d3:e0:a1:54:34:e2:7b:
c3:e7:70:60:8d:7e:4e:cd:72:60:6a:50:2c:7b:78:10:c0:48:
cb:81:68:8d:1a:f3:24:f4:1d:dc:86:ae:0a:12:4f:b8:05:b6:
a3:8d:be:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 17:37:10 2024 by rpki-client on console-fra.rpki-client.org