Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/ymkvMj4O8Ok5IvQFcap1Q8O0qwo.roa
File: ymkvMj4O8Ok5IvQFcap1Q8O0qwo.roa (raw, json)
Hash identifier: CQ9zilfn+kN1BsY8BYU6oP3rx6+vLnHDxJ8wBDI8ky0=
Subject key identifier: CA:69:2F:32:3E:0E:F0:E9:39:22:F4:05:71:AA:75:43:C3:B4:AB:0A
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 018CC6B8F08895A5A0025EC29E46E2EAC18B
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/ymkvMj4O8Ok5IvQFcap1Q8O0qwo.roa
Signing time: Mon 01 Jan 2024 20:30:58 +0000
ROA not before: Mon 01 Jan 2024 20:30:58 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47943
IP address blocks: 193.19.204.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:f0:88:95:a5:a0:02:5e:c2:9e:46:e2:ea:c1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Jan 1 20:30:58 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ca692f323e0ef0e93922f40571aa7543c3b4ab0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:a0:9d:54:3f:86:c4:fc:d7:bf:3c:e7:12:
ea:db:6d:18:19:24:e2:52:54:23:44:ef:42:24:e1:
4d:93:d7:f1:39:67:c4:22:1b:8b:5a:6e:52:6b:7d:
e5:17:c9:78:19:a6:1a:a9:79:bc:44:0b:2a:21:34:
68:4e:97:6d:56:7c:08:ef:40:47:da:92:4c:cf:90:
a0:d6:1d:ae:60:91:31:1b:5f:b9:39:84:82:52:6b:
4a:9e:f1:39:69:28:97:a0:48:61:e4:2a:80:c4:0b:
04:5e:7f:6d:17:be:ad:04:00:7d:d8:56:fc:49:0c:
8e:5d:3e:39:56:92:cf:6a:5a:82:08:3a:68:4b:b4:
ce:96:83:6c:82:8c:df:7a:12:e7:77:bf:f3:9e:99:
38:2e:f8:07:84:38:1c:c8:65:41:73:dd:50:d0:4b:
7f:cf:d8:6c:3c:9e:65:7a:90:ed:45:68:3a:a0:4e:
ed:7c:05:f4:c3:19:f2:ca:90:6b:9e:8b:98:01:ed:
0a:81:2b:71:ef:bd:dc:6c:55:26:72:3f:28:2c:2e:
ba:25:80:f8:c0:36:2d:fd:24:f2:00:f3:70:b5:31:
f7:99:d0:e6:0e:2a:3c:97:3c:93:e9:81:45:b5:02:
62:49:60:53:2d:ff:3e:e9:32:36:e1:d6:55:96:0a:
e5:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:69:2F:32:3E:0E:F0:E9:39:22:F4:05:71:AA:75:43:C3:B4:AB:0A
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/ymkvMj4O8Ok5IvQFcap1Q8O0qwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.204.0/24
Signature Algorithm: sha256WithRSAEncryption
53:d1:55:a2:f0:cd:bb:7d:a5:66:fb:d3:77:39:c1:b6:bd:98:
11:87:59:d5:1c:ce:0a:08:9f:fb:3d:a8:e7:f0:5e:34:e1:66:
96:0c:07:16:ea:ac:5a:b3:e0:5c:17:bb:9f:dd:07:86:1c:8c:
5f:bb:5f:ba:3f:7a:10:70:c6:55:9c:33:49:28:e4:6a:7d:12:
08:89:4e:59:90:3d:52:ad:a6:3c:10:d6:91:83:89:4f:7b:b5:
c4:e6:21:c1:f9:19:68:96:e6:d4:6f:07:5b:bc:4a:3c:32:b0:
f8:73:89:aa:98:5d:b2:c2:c4:95:52:5e:72:37:57:fb:45:72:
e1:5d:d5:c7:06:ac:8c:f1:6b:80:44:96:c6:74:d3:9f:d7:80:
7d:2a:4f:b1:4a:6a:85:93:c3:16:ac:15:f1:65:68:b7:69:c7:
95:75:5e:a3:bc:55:d5:f3:e3:96:5e:01:d1:22:10:d1:b2:67:
d4:5b:c3:1e:58:92:dc:e4:dc:60:a8:54:7a:5e:e5:8d:dc:aa:
ba:1b:c6:87:ba:55:50:78:9f:1f:47:a6:7e:00:a4:c8:be:ec:
dc:fe:c2:62:9a:38:1b:16:c8:d0:48:ba:2c:f3:8b:2b:39:3d:
75:90:c9:cc:1a:62:25:b0:6c:35:07:57:82:08:e9:bb:83:ac:
59:d4:9f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:04:36 2024 by rpki-client on console-fra.rpki-client.org