Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/yGVX_4VMq3ckLvm4qFSrJ7kpDXg.roa
File: yGVX_4VMq3ckLvm4qFSrJ7kpDXg.roa (raw, json)
Hash identifier: l2JIoh49eeMMd5L8dwTVIKknq3NAucQKQsaK6gBGM+M=
Subject key identifier: C8:65:57:FF:85:4C:AB:77:24:2E:F9:B8:A8:54:AB:27:B9:29:0D:78
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 018CCA2B7ED46C262CE3A43A9E236510E528
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/yGVX_4VMq3ckLvm4qFSrJ7kpDXg.roa
Signing time: Tue 02 Jan 2024 12:34:57 +0000
ROA not before: Tue 02 Jan 2024 12:34:57 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35285
IP address blocks: 193.189.122.0/24 maxlen: 24
193.189.123.0/24 maxlen: 24
2001:678:b1::/48 maxlen: 48
2001:14e8:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Nov 2024 21:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:2b:7e:d4:6c:26:2c:e3:a4:3a:9e:23:65:10:e5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 12:34:57 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c86557ff854cab77242ef9b8a854ab27b9290d78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:39:1e:01:64:f0:66:10:ff:4f:f4:df:98:66:
53:6d:f7:3b:45:c3:8c:d8:5b:f1:33:c0:88:91:28:
c4:97:23:2d:9b:ad:d8:11:0f:31:e6:10:13:35:8c:
13:11:9e:96:ca:01:8f:08:02:ce:6b:a2:6c:de:eb:
a2:07:7b:cc:59:0d:71:f4:3f:4e:95:72:e3:ec:a3:
9e:ec:a9:8f:ac:ac:af:49:95:c0:04:fb:21:fe:65:
9f:8c:98:34:36:6b:23:6c:d7:ad:56:5a:72:ae:ec:
fb:1f:bc:1c:d5:f4:cb:06:40:55:36:9e:cd:a6:f7:
53:4e:f0:ef:62:0b:56:2f:63:ea:18:9f:54:36:3d:
45:1d:55:f4:d3:e3:f7:44:8f:92:6f:e8:88:b4:77:
8d:b5:fb:a2:e4:1e:33:87:89:24:61:9a:7f:48:3c:
97:54:25:30:aa:12:a8:3c:89:88:9c:30:37:25:40:
79:1a:72:1e:1e:3c:ea:6b:f2:87:7f:bb:fe:1c:f7:
5d:8f:10:7e:a4:f7:92:1d:6b:ea:0c:3e:73:2e:10:
f9:d4:0e:44:33:60:24:5e:81:60:30:84:ee:a8:e4:
96:43:2c:ab:d5:b1:a5:92:7e:01:94:31:d7:55:88:
16:84:04:92:1d:91:43:28:c8:7d:12:fa:db:3a:c5:
64:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:65:57:FF:85:4C:AB:77:24:2E:F9:B8:A8:54:AB:27:B9:29:0D:78
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/yGVX_4VMq3ckLvm4qFSrJ7kpDXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.189.122.0/23
IPv6:
2001:678:b1::/48
2001:14e8:c::/48
Signature Algorithm: sha256WithRSAEncryption
a4:19:09:1a:66:e2:c0:87:f4:85:54:04:f8:3a:fd:49:7b:36:
09:2d:be:17:3b:21:f8:0b:04:14:5c:b6:09:88:30:dd:bf:db:
73:44:93:6c:0e:0c:73:a8:e6:fd:16:db:ef:f3:e7:74:06:08:
40:84:aa:dd:0b:f9:67:d2:90:0a:7c:9a:f5:23:e6:ad:38:55:
e1:c5:1c:36:64:58:03:80:06:e5:c2:5f:3c:f9:93:ab:31:c4:
c0:45:7d:f8:7e:43:45:45:10:1f:8a:1c:10:5e:54:c4:79:67:
e3:0d:26:36:88:85:89:f6:d1:75:bd:c0:a2:96:fb:17:80:bc:
b8:1a:81:1c:68:3f:cc:2b:13:01:3c:3c:ef:06:a5:7e:39:96:
5a:d5:77:37:cf:fc:11:17:e2:c2:a9:3a:f4:a1:a7:87:b2:3c:
0b:da:9c:3d:5b:14:dc:a5:18:da:dc:6c:4a:a1:58:d8:1b:81:
a3:e7:68:a3:05:d5:0c:61:30:e8:5b:9b:a9:78:61:1c:aa:a2:
76:54:d9:09:a2:eb:f7:26:77:54:5f:02:54:27:99:ef:ca:49:
bb:d4:e4:74:46:17:d6:a0:89:5e:c4:df:08:11:66:29:f9:29:
63:21:1f:46:48:45:33:3e:b9:74:65:19:20:0d:8f:ed:28:a8:
a2:ca:37:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 04:43:47 2024 by rpki-client on console-ams.rpki-client.org