Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/CYfA2djZ-zBbRadgswdiFQKo1iM.roa
File: CYfA2djZ-zBbRadgswdiFQKo1iM.roa (raw, json)
Hash identifier: ueWFdLpx55FZEaLakBKBCKMy6P4RNOpnuNVyD6XgsIE=
Subject key identifier: 09:87:C0:D9:D8:D9:FB:30:5B:45:A7:60:B3:07:62:15:02:A8:D6:23
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 018CC9BCBE677581A33821A399578C522270
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/CYfA2djZ-zBbRadgswdiFQKo1iM.roa
Signing time: Tue 02 Jan 2024 10:33:59 +0000
ROA not before: Tue 02 Jan 2024 10:33:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204705
IP address blocks: 195.53.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Jun 2024 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:be:67:75:81:a3:38:21:a3:99:57:8c:52:22:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Jan 2 10:33:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0987c0d9d8d9fb305b45a760b307621502a8d623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:21:74:05:d5:e1:62:c5:b9:5a:9e:6c:e5:50:
8e:6d:7c:f9:97:2e:7c:25:f6:97:7e:41:74:b3:c3:
eb:36:85:21:4a:51:af:dd:52:02:38:8c:12:43:ae:
ee:24:0a:fc:20:47:6b:e6:c9:9a:79:0d:12:22:5c:
3d:68:db:2d:f7:e8:8f:f8:b3:b8:d9:ff:ff:40:e6:
17:aa:4d:e8:c4:46:0b:66:2e:4f:7c:01:36:2d:2d:
ab:75:24:90:a2:00:6c:55:86:97:bf:80:a5:44:e9:
8b:39:c5:f7:db:53:63:53:f5:f7:92:48:44:cb:ac:
2f:8e:52:80:a1:cd:83:2b:3d:10:cf:85:2d:16:e6:
60:3a:50:8e:30:aa:6d:8e:66:47:d6:3f:dc:18:e8:
8a:0b:33:f3:8f:64:cd:3a:6c:7f:58:52:b1:41:c8:
77:1c:dd:61:82:29:53:ae:d9:23:5c:14:36:39:7c:
04:bb:53:99:c1:1b:a5:76:2a:8a:cb:21:01:38:c2:
c9:10:f2:1e:e7:b1:ba:b3:e6:05:98:3b:0e:01:0f:
e8:68:30:79:f5:ec:1d:db:9c:f9:f0:ea:5a:c7:78:
7f:46:59:3f:ca:6b:02:00:ef:52:7a:0d:fe:9d:26:
1d:ed:39:39:65:a6:93:2a:73:ce:55:f0:a9:e0:c9:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:87:C0:D9:D8:D9:FB:30:5B:45:A7:60:B3:07:62:15:02:A8:D6:23
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/CYfA2djZ-zBbRadgswdiFQKo1iM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.53.177.0/24
Signature Algorithm: sha256WithRSAEncryption
59:2e:a1:00:e0:9e:e0:78:de:b3:37:1c:0e:73:25:57:ca:8e:
16:d2:d6:95:7c:95:c7:6a:e4:ae:75:d1:4d:4f:37:78:8a:23:
18:04:a5:ff:4b:36:25:1d:61:1c:a0:58:cf:5d:0d:56:f9:1e:
ca:26:48:74:80:f9:9d:db:09:35:e1:bf:5c:e1:3c:47:49:79:
98:6a:8b:0d:a5:81:8d:58:99:e1:8d:a6:f4:f2:b0:a0:de:ee:
2d:4b:45:58:04:b7:cb:ea:1c:c4:06:35:bf:5c:3a:99:95:81:
ff:23:5f:6c:89:40:b7:bb:68:63:71:60:5a:7b:0e:e5:32:16:
70:4a:98:8a:9b:cc:85:1b:e7:33:af:ca:4f:19:4e:16:06:ae:
45:ef:db:90:90:82:1a:96:5a:88:48:df:e6:bd:ff:de:af:fa:
22:b6:84:2b:4a:a8:b6:e2:71:34:79:c7:c3:83:1a:de:e3:d5:
3c:85:40:bb:9f:2a:f4:98:8e:fd:cc:c4:32:bd:64:4b:35:bb:
48:45:f4:ec:47:60:a6:36:78:e2:4a:42:0c:44:a6:06:f1:de:
2c:21:68:cf:9f:e5:c3:da:7e:b6:2a:17:ae:5b:c6:ac:8f:27:
da:13:8c:cd:db:8f:8a:70:53:bb:ca:6d:59:34:5b:31:51:fa:
fe:69:aa:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 10:33:38 2024 by rpki-client on console-fra.rpki-client.org