Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/Y-XpU5J7gUvKYU4H9VvKq656D8c.roa
File: Y-XpU5J7gUvKYU4H9VvKq656D8c.roa (raw, json)
Hash identifier: 283khEeG3SscuSdnICp+kRreS3E00RGA0cxKqHj7e0E=
Subject key identifier: 63:E5:E9:53:92:7B:81:4B:CA:61:4E:07:F5:5B:CA:AB:AE:7A:0F:C7
Certificate issuer: /CN=6e831066ea8fe20b067a136006b7af906633843b
Certificate serial: 018CC5007B1A4DF3DE0320F61F0876710586
Authority key identifier: 6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/Y-XpU5J7gUvKYU4H9VvKq656D8c.roa
Signing time: Mon 01 Jan 2024 12:29:52 +0000
ROA not before: Mon 01 Jan 2024 12:29:52 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49923
IP address blocks: 193.104.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.mft
rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Nov 2024 03:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:7b:1a:4d:f3:de:03:20:f6:1f:08:76:71:05:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e831066ea8fe20b067a136006b7af906633843b
Validity
Not Before: Jan 1 12:29:52 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63e5e953927b814bca614e07f55bcaabae7a0fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:47:36:06:4e:23:ca:f8:5f:48:08:44:9f:24:
ca:10:de:1b:94:68:22:fa:df:c3:f4:d4:23:58:ab:
00:5b:ef:56:25:1a:05:04:13:9d:74:be:27:d4:a6:
0e:a3:3c:92:72:15:06:bb:32:15:9f:c7:ef:3a:43:
f3:b9:a5:73:44:bc:b7:20:e6:92:a0:d0:87:ae:74:
45:76:64:6c:90:62:c7:21:42:03:20:5a:b8:e5:8e:
1b:cf:73:6d:e7:75:bd:4c:f8:6e:1f:0c:bd:70:6a:
86:5e:42:52:85:0d:84:4f:05:0b:b0:fc:c4:6d:59:
c3:d7:5b:78:dc:24:0a:d6:d5:fe:d6:a7:89:06:17:
83:b8:c3:a9:9a:aa:2f:ce:dc:b4:dd:fa:81:22:18:
de:78:01:7f:e7:05:70:d8:be:f3:fb:f9:df:9f:37:
c7:e9:8c:e7:4f:c8:cc:c5:6e:79:10:06:37:2f:b4:
e1:16:1e:e4:32:3a:2d:a1:6c:81:05:ab:b8:ef:c9:
47:3e:f0:66:fb:85:bd:49:dc:5c:20:e9:f0:74:67:
03:a7:0d:43:64:85:c5:65:3f:06:d8:ce:30:12:9e:
7b:1e:12:dd:96:50:a9:e1:94:e8:ab:57:3d:f2:51:
27:19:4b:ec:70:83:81:54:7b:1b:c0:62:ba:14:b3:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E5:E9:53:92:7B:81:4B:CA:61:4E:07:F5:5B:CA:AB:AE:7A:0F:C7
X509v3 Authority Key Identifier:
keyid:6E:83:10:66:EA:8F:E2:0B:06:7A:13:60:06:B7:AF:90:66:33:84:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/boMQZuqP4gsGehNgBrevkGYzhDs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/Y-XpU5J7gUvKYU4H9VvKq656D8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/bd19fd-f369-42bf-926f-2a4dd23a2f9a/1/boMQZuqP4gsGehNgBrevkGYzhDs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.48.0/24
Signature Algorithm: sha256WithRSAEncryption
79:04:b7:c8:61:c7:f0:d6:11:2f:5c:79:18:6b:6a:10:8c:2e:
f2:93:16:5a:f6:6e:45:a9:a6:57:b9:c7:5a:a1:86:f6:bf:a0:
dd:0b:19:b1:91:fa:ab:1a:f0:dc:1f:be:a2:73:ac:ed:64:24:
76:79:f4:bc:88:e2:ee:5b:46:82:0e:a5:5e:64:71:8b:2f:d5:
5f:cc:51:fc:e1:e5:bf:8d:ef:1f:9c:91:49:48:4f:b9:6b:35:
f8:59:bc:58:c4:fc:85:a3:c2:7c:5b:fe:0e:e4:84:26:fc:b8:
78:ce:25:aa:37:75:22:19:ed:c7:8a:ea:92:fa:22:0f:b2:dc:
03:c1:60:f6:f9:68:ae:34:db:a7:d8:12:d8:50:45:86:bc:de:
d8:a0:7f:cd:e6:90:b1:0f:43:50:8f:de:70:86:02:c3:9f:56:
b8:bd:95:26:5a:4b:e9:d4:ad:7c:d3:42:22:bf:41:8f:d3:b6:
91:ab:99:a1:6a:2e:15:9c:31:de:3e:45:0f:f5:3f:bf:2d:1d:
58:94:df:54:6a:a9:29:e8:8a:99:ad:0f:9d:a3:d3:db:d7:0b:
56:51:4b:6e:ce:87:3b:92:9b:b2:3d:eb:58:b0:8e:df:af:8c:
f1:28:f4:02:c9:b4:18:77:51:bd:b9:45:87:8e:e0:ea:64:b9:
62:25:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 10:41:15 2024 by rpki-client on console-ams.rpki-client.org