Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/yEzqyG8tT5eEz_RZV9wWvZQrm8w.roa
File: yEzqyG8tT5eEz_RZV9wWvZQrm8w.roa (raw, json)
Hash identifier: 0ODANTI8IzzL8hYFmoUGSubve8/drQt35/A6T5ChXTw=
Subject key identifier: C8:4C:EA:C8:6F:2D:4F:97:84:CF:F4:59:57:DC:16:BD:94:2B:9B:CC
Certificate issuer: /CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Certificate serial: 018CC5DC5D859BB4A26C3030B5307921BBB4
Authority key identifier: A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/yEzqyG8tT5eEz_RZV9wWvZQrm8w.roa
Signing time: Mon 01 Jan 2024 16:30:02 +0000
ROA not before: Mon 01 Jan 2024 16:30:02 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39257
IP address blocks: 193.110.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.mft
rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 08 Jun 2024 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:5d:85:9b:b4:a2:6c:30:30:b5:30:79:21:bb:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3c8a0ca78984283fab986c9b80a5b040977e556
Validity
Not Before: Jan 1 16:30:02 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c84ceac86f2d4f9784cff45957dc16bd942b9bcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1d:33:9e:9a:2d:5f:b3:32:13:a7:c2:d3:49:
a5:80:59:fc:55:34:82:61:b4:b4:56:0e:66:2b:28:
b8:8c:4e:9f:7b:86:8b:df:de:6c:00:6c:22:e0:0f:
c2:7d:12:73:6a:b3:f7:9a:6c:5b:9c:cb:5b:0f:51:
31:33:7e:49:68:2e:84:ea:13:73:e5:53:02:e3:f0:
fb:1c:24:76:77:39:73:8c:f8:f9:f8:ab:21:3f:84:
4c:71:bb:09:77:69:53:a2:2c:bc:62:34:90:d2:04:
0d:54:da:ed:ba:14:09:a5:00:00:93:c3:1e:64:35:
5c:01:1c:2a:23:c4:29:ef:45:19:76:7a:ae:c1:2f:
35:0c:d4:f6:cc:7e:6b:65:a1:90:9b:65:65:44:17:
71:3f:c2:6f:d7:c1:c8:9c:03:25:5f:29:d4:8a:5f:
63:ea:c1:05:71:a0:fd:6a:c5:b6:16:be:dc:1a:9e:
6e:ab:6f:75:67:c5:d1:67:f3:e5:21:58:8a:77:fa:
a1:85:88:4c:dc:7a:62:96:c5:fd:f9:8c:fd:ae:87:
b8:69:2c:52:14:26:56:c2:b8:95:35:ec:6d:fa:10:
6c:b8:c7:d0:a0:0d:51:d5:16:93:0e:7a:57:00:c5:
fc:76:5e:5c:b0:37:a8:93:13:39:f0:12:aa:2b:ee:
15:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:4C:EA:C8:6F:2D:4F:97:84:CF:F4:59:57:DC:16:BD:94:2B:9B:CC
X509v3 Authority Key Identifier:
keyid:A3:C8:A0:CA:78:98:42:83:FA:B9:86:C9:B8:0A:5B:04:09:77:E5:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o8igyniYQoP6uYbJuApbBAl35VY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/yEzqyG8tT5eEz_RZV9wWvZQrm8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/c339dd-443f-4ba9-a959-66db25e1990c/1/o8igyniYQoP6uYbJuApbBAl35VY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.110.178.0/23
Signature Algorithm: sha256WithRSAEncryption
4e:e9:3b:d1:d2:da:ef:9e:39:e2:e9:eb:31:7b:06:35:3a:6f:
b1:bf:32:38:f0:d9:8e:f2:7f:8e:d7:91:d7:53:e7:59:90:3e:
fe:73:f5:cc:e0:3e:62:b2:f5:43:32:f1:d0:92:3e:ef:bb:df:
78:c5:68:7d:ae:6d:05:b6:cf:4a:79:7a:ac:56:7a:d6:60:f1:
ae:04:72:3a:7e:5f:7b:20:9d:24:1f:b5:72:54:ee:79:3d:72:
b0:cd:dc:b9:12:21:0c:c9:6a:df:70:e3:3c:c5:61:c0:70:bf:
a8:65:26:a3:d1:7c:63:ea:4f:81:93:6b:3f:bf:d0:1f:81:17:
23:4f:f1:0d:b8:1e:83:4e:58:3f:fa:59:11:f6:ca:7f:91:19:
7e:72:bd:70:a3:37:57:e0:d5:40:ab:bd:ea:a1:fe:60:55:aa:
c1:df:09:53:5d:06:49:70:64:71:04:48:72:e3:43:d9:e0:d2:
c1:d7:94:26:f5:27:9c:e1:96:d8:fd:2e:5e:42:b9:cf:b8:a4:
d3:e0:9b:57:26:a2:49:c8:11:39:f9:a9:4b:ac:60:ed:10:12:
35:fb:9c:77:c6:3e:40:33:55:77:6f:89:be:5e:a7:28:d6:e1:
0a:d1:df:16:be:3a:2a:19:80:79:4e:13:17:9b:ad:0c:49:26:
5e:bd:7a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 21:01:30 2024 by rpki-client on console-fra.rpki-client.org