Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/YEqHdJW_z13kdDDIGITxefq6R_g.roa
File: YEqHdJW_z13kdDDIGITxefq6R_g.roa (raw, json)
Hash identifier: 35jkPlKRlZX26qWM+NhHimMxYwOTA5rjAeBnPkgv03k=
Subject key identifier: 60:4A:87:74:95:BF:CF:5D:E4:74:30:C8:18:84:F1:79:FA:BA:47:F8
Certificate issuer: /CN=01ce8a50dd43272b474d55443d2fac46566477c2
Certificate serial: 018CC4937226B1CD212B4CD43BE8E208ED52
Authority key identifier: 01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/YEqHdJW_z13kdDDIGITxefq6R_g.roa
Signing time: Mon 01 Jan 2024 10:30:46 +0000
ROA not before: Mon 01 Jan 2024 10:30:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206907
IP address blocks: 193.200.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 03 Jun 2024 10:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:72:26:b1:cd:21:2b:4c:d4:3b:e8:e2:08:ed:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01ce8a50dd43272b474d55443d2fac46566477c2
Validity
Not Before: Jan 1 10:30:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=604a877495bfcf5de47430c81884f179faba47f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:0e:da:68:54:28:90:8c:b3:f2:1b:64:e8:
c7:91:c5:35:21:23:08:d8:1b:f8:24:bb:79:fe:89:
43:eb:98:64:1c:03:ce:2a:8d:47:e5:5e:e8:24:b2:
e7:c1:23:a0:5c:1c:ac:ad:cc:4b:23:13:96:d8:c8:
fc:fd:0f:19:d9:db:3c:8c:3b:1e:f1:22:0e:06:cc:
cf:5e:d3:09:a3:0c:11:35:19:60:09:66:9b:3f:51:
81:e9:ee:2d:9b:ad:0e:84:2a:5f:90:5b:60:04:fe:
9d:ee:af:25:cb:3b:21:03:44:3f:8a:bc:9d:8d:ec:
b8:ed:7e:47:14:64:68:1c:be:ee:9c:4f:18:06:0c:
80:23:a9:c3:db:32:d5:3c:27:3d:de:49:da:ee:bb:
2d:b5:1b:2e:c9:8d:df:15:b7:37:8c:a5:bd:97:d2:
63:8d:ea:11:2b:96:32:5c:57:17:e8:69:4d:f7:fd:
be:37:7d:e5:93:9e:ac:90:51:92:96:11:19:26:32:
28:d2:1e:ac:5d:b1:81:37:50:de:d6:3f:86:c0:7b:
b9:a2:31:75:4e:0c:a1:4f:e3:0d:61:d0:02:fd:29:
6d:cc:e4:d7:69:84:7d:19:79:4d:a7:41:db:4c:11:
e5:f0:b6:0e:36:b2:3b:e6:04:57:1a:ef:3e:27:93:
a6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4A:87:74:95:BF:CF:5D:E4:74:30:C8:18:84:F1:79:FA:BA:47:F8
X509v3 Authority Key Identifier:
keyid:01:CE:8A:50:DD:43:27:2B:47:4D:55:44:3D:2F:AC:46:56:64:77:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ac6KUN1DJytHTVVEPS-sRlZkd8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/YEqHdJW_z13kdDDIGITxefq6R_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a7c33b-682e-4e00-8211-bb94530841e5/1/Ac6KUN1DJytHTVVEPS-sRlZkd8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.84.0/23
Signature Algorithm: sha256WithRSAEncryption
4a:5d:ed:cb:11:e5:bc:fd:5e:03:96:ec:96:75:2b:a4:8a:1c:
5f:b2:02:c9:77:a8:a8:bf:df:b3:92:dd:e3:bc:05:10:96:9f:
5e:2e:c3:63:c7:68:99:72:0c:cc:94:d5:2f:73:d6:2d:47:50:
d7:26:48:6a:ac:97:fa:8c:b2:e8:7b:9b:c8:5f:f5:07:f3:b3:
1a:1f:d0:42:85:0b:76:d2:4c:c3:47:99:90:9f:12:3d:66:13:
3b:0f:ad:22:be:38:49:7a:8c:16:91:e4:2a:f4:d9:a7:b0:89:
07:72:46:27:71:ad:c1:32:04:38:6a:69:90:2e:a1:49:2a:dd:
92:92:de:ab:e4:03:e4:a6:ae:27:89:4a:5d:61:d8:76:03:54:
e1:17:33:5d:28:e9:f5:9b:c5:31:df:f7:79:bc:1a:f7:99:98:
9e:e2:66:c8:8f:a3:bb:66:79:ed:bc:7b:82:c4:91:85:8f:f4:
40:ab:65:78:df:cf:51:f9:f0:05:63:29:62:3b:37:10:cf:fd:
77:32:21:2c:a1:99:c1:71:75:3b:92:b1:41:88:40:ea:93:4c:
85:38:1e:67:9e:eb:52:59:65:34:09:db:7e:4f:9c:d4:42:47:
05:ef:4b:8d:d9:69:23:75:22:b2:2d:6a:1e:b1:e7:e3:ed:50:
06:3f:7a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 14:58:10 2024 by rpki-client on console-fra.rpki-client.org