Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/Y-VNWXLfuPjT9eHSbIbQfkFjnvQ.roa
File: Y-VNWXLfuPjT9eHSbIbQfkFjnvQ.roa (raw, json)
Hash identifier: EFMn+VLeP9bXgK2fygE1Ci+l0EmlxHaKnAt77xi47RY=
Subject key identifier: 63:E5:4D:59:72:DF:B8:F8:D3:F5:E1:D2:6C:86:D0:7E:41:63:9E:F4
Certificate issuer: /CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Certificate serial: 018CC349506C05FEE8BC372B185E4B1FF8D8
Authority key identifier: C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/Y-VNWXLfuPjT9eHSbIbQfkFjnvQ.roa
Signing time: Mon 01 Jan 2024 04:30:10 +0000
ROA not before: Mon 01 Jan 2024 04:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47432
IP address blocks: 195.182.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Jun 2024 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:50:6c:05:fe:e8:bc:37:2b:18:5e:4b:1f:f8:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c765d63c9163f2cc5b5614c3c7f3116e7c72f9f5
Validity
Not Before: Jan 1 04:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63e54d5972dfb8f8d3f5e1d26c86d07e41639ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:f7:39:b0:f7:20:98:94:da:ad:a4:b1:f9:fd:
e0:01:c8:45:67:5d:33:0e:22:fc:02:e7:a8:1b:20:
72:c9:d3:08:32:1f:8b:22:96:ed:7c:b2:0a:c9:1f:
2c:9c:a5:9c:37:eb:95:37:33:07:c5:6f:42:1a:85:
db:1b:ae:91:0d:a5:d7:08:8b:57:c5:5b:73:10:7c:
4c:54:a6:1a:03:6f:da:c0:a5:95:ef:8d:4c:f4:51:
76:55:91:23:f7:c6:c5:c8:bb:da:37:9b:84:d1:58:
92:8b:20:cd:97:ae:71:f6:e1:45:e5:e5:a9:91:35:
c9:02:1e:8d:fb:9a:ef:a7:97:c7:d1:f0:2d:2b:fe:
48:de:57:82:d9:31:b4:38:69:79:db:1e:dc:ae:b5:
cc:bd:60:3c:04:e2:80:eb:11:d5:47:64:23:a9:3f:
83:78:e8:b3:be:97:2e:bc:d1:8d:7f:21:b5:3e:18:
d4:6e:96:3f:42:c3:e0:5d:e4:62:07:18:fd:07:58:
82:04:87:97:76:9a:8b:4a:48:3a:9b:20:a8:d4:6b:
a3:2c:cd:8c:89:29:eb:31:eb:71:6f:d7:8f:09:18:
23:d2:d5:07:c3:8b:7f:bf:ea:56:3e:fd:0f:72:ff:
0d:25:32:4e:e4:91:85:f4:30:ce:49:44:14:74:c8:
08:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E5:4D:59:72:DF:B8:F8:D3:F5:E1:D2:6C:86:D0:7E:41:63:9E:F4
X509v3 Authority Key Identifier:
keyid:C7:65:D6:3C:91:63:F2:CC:5B:56:14:C3:C7:F3:11:6E:7C:72:F9:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2XWPJFj8sxbVhTDx_MRbnxy-fU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/Y-VNWXLfuPjT9eHSbIbQfkFjnvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/979417-f186-46de-acd4-9ce1b416877d/1/x2XWPJFj8sxbVhTDx_MRbnxy-fU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.18.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:b5:eb:2e:ec:66:8a:5c:85:2d:1d:40:18:73:b2:e5:66:24:
d7:1f:1e:28:3e:ce:3c:7f:3c:c3:de:52:58:94:4e:21:42:bd:
08:91:9f:88:a3:d1:ec:e3:1a:dd:77:79:14:f2:fb:1c:30:db:
51:0d:9a:bf:43:5c:d1:e5:9c:a1:58:61:b5:8e:cf:45:3c:82:
b3:11:d3:cd:5d:28:9b:6b:40:fa:7d:27:dc:e6:81:60:3c:32:
1b:8b:6f:ef:08:7b:44:96:84:c4:aa:66:e1:b1:0f:a8:13:81:
d5:ef:a0:2e:70:ea:b2:d6:c1:96:89:b2:a6:16:8e:3a:8a:56:
ce:e0:a7:b2:be:8a:62:34:25:85:b7:aa:6d:04:d0:3d:95:47:
bb:c2:f1:11:5f:b4:33:ac:1b:ce:e8:2b:12:0f:73:ac:ea:d7:
70:fe:fe:6c:fc:28:33:ff:80:75:b3:14:34:ff:8a:32:9a:09:
48:17:37:af:88:b2:eb:52:f4:03:d4:c7:a4:d2:f5:2f:0c:fe:
a3:31:da:32:c5:56:5d:5f:56:c5:ee:7e:e0:e4:57:be:e6:d7:
d8:6d:d5:9a:e8:c0:13:e9:27:2b:92:76:19:05:f8:f4:aa:ad:
1f:bd:34:ac:19:5c:e0:94:e6:0f:e7:8b:4e:33:b0:d1:f1:5f:
e3:b9:7c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:43:42 2024 by rpki-client on console-ams.rpki-client.org